Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35342e302f32342d3234203d3e20313734.roa
File:                     3139352e37382e35342e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          6fM1Up4WFDyhUID6IW2MKCBesXBMiNWOHZa3ex6prn0=
Subject key identifier:   D6:C2:83:4C:8F:3E:0C:03:52:A2:FA:E9:D5:63:9B:C9:54:37:E5:6D
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       026F0B13CEFA4EA7A03DB052517250F2437A5F38
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35342e302f32342d3234203d3e20313734.roa
Signing time:             Tue 05 Apr 2022 15:05:27 +0000
ROA not before:           Tue 05 Apr 2022 15:00:27 +0000
ROA not after:            Tue 04 Apr 2023 15:05:27 +0000
asID:                     174
IP address blocks:        195.78.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6f:0b:13:ce:fa:4e:a7:a0:3d:b0:52:51:72:50:f2:43:7a:5f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  5 15:00:27 2022 GMT
            Not After : Apr  4 15:05:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:33:f4:5f:0a:11:e4:2b:b1:a1:f4:5d:3c:
                    7f:92:c3:8e:29:bc:9b:1b:6e:fa:5d:2b:1a:ad:5e:
                    ae:ec:ef:d6:c4:d2:ec:4b:2a:75:b4:9a:e7:13:57:
                    f6:ab:e0:ee:27:3d:0d:90:73:53:b9:54:a6:3e:ad:
                    e8:6d:55:14:6a:e2:7c:ae:3b:f8:1f:15:e9:bc:33:
                    62:14:d5:42:30:c0:c3:68:31:61:6f:63:bb:fc:19:
                    47:b6:c9:ec:20:b1:2b:62:ab:8e:c3:b9:e0:cb:89:
                    fa:02:9c:f7:9d:25:b3:95:73:43:7c:ec:a7:ee:07:
                    83:de:71:3d:31:ff:14:e2:59:71:97:1c:42:a0:ce:
                    f8:ee:44:2a:94:ee:2a:a9:df:58:77:6a:3a:47:3b:
                    63:0d:f4:82:84:2c:68:a9:58:ef:54:6d:9a:dd:55:
                    b2:ab:85:91:e1:70:bb:25:7c:9c:66:59:0f:06:5e:
                    94:e8:a6:76:ee:9a:9d:78:64:26:bd:ac:88:55:6b:
                    2f:7e:00:e7:a6:5d:95:6d:1a:fe:8b:2c:28:ce:bd:
                    44:61:b7:8f:58:7a:f6:5a:2d:24:49:98:a1:e3:ff:
                    94:66:6f:cb:f5:0e:06:d0:80:7a:a6:ae:c9:82:c1:
                    0e:9c:8a:57:ce:e3:9e:f6:fe:9e:7f:40:3b:7e:57:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C2:83:4C:8F:3E:0C:03:52:A2:FA:E9:D5:63:9B:C9:54:37:E5:6D
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35342e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:77:ed:39:bb:f6:8d:29:8f:a6:e3:3b:37:d3:df:88:24:
         ce:db:18:8b:92:7f:e7:41:37:e5:c6:65:76:60:16:be:ac:b6:
         af:8b:e3:52:fd:f4:2e:39:80:2a:f9:8e:f3:27:82:f3:63:7c:
         71:ae:8e:06:08:de:10:2b:df:70:2d:05:a8:51:f1:2f:d4:0e:
         bd:f6:3c:af:24:73:5a:cc:c7:f5:40:64:a0:9f:57:e2:3d:cb:
         3e:e6:20:c8:17:e5:5d:a8:4e:ba:cb:d9:2f:d9:80:26:1b:b2:
         4c:32:b2:92:15:9a:ee:27:24:66:c8:87:dd:b4:bf:0b:00:fc:
         51:7b:07:3f:2a:9d:6d:19:14:7a:a6:93:26:24:c4:cb:d0:2d:
         c8:d6:85:2d:b1:09:99:62:8c:1c:9c:5f:4f:f1:5a:e4:34:64:
         fb:dc:2e:5e:7a:13:a3:19:4d:ad:b1:19:01:46:de:40:4c:b9:
         f5:35:04:9f:10:47:6b:ed:c1:28:28:df:b3:6b:ef:29:ab:7d:
         9f:93:cf:ea:c8:17:c5:90:c4:54:0c:cb:05:14:fb:a4:58:6c:
         5e:10:2f:49:3c:bb:ef:d1:b6:51:c7:26:e5:90:9d:71:9a:c8:
         11:ed:2d:4b:87:91:42:e9:06:cd:d4:21:e2:89:a4:d9:c1:56:
         ec:3e:4d:02
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUAm8LE876TqegPbBSUXJQ8kN6XzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVBQ0FCNjVE
QzVFRkY5RjAeFw0yMjA0MDUxNTAwMjdaFw0yMzA0MDQxNTA1MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzEwRjMzRjQ1RjBBMTFFNDJC
QjFBMUY0NUQzQzdGOTJDMzhFMjlCQzlCMUI2RUZBNUQyQjFBQUQ1RUFFRUNFRkQ2
QzREMkVDNEIyQTc1QjQ5QUU3MTM1N0Y2QUJFMEVFMjczRDBEOTA3MzUzQjk1NEE2
M0VBREU4NkQ1NTE0NkFFMjdDQUUzQkY4MUYxNUU5QkMzMzYyMTRENTQyMzBDMEMz
NjgzMTYxNkY2M0JCRkMxOTQ3QjZDOUVDMjBCMTJCNjJBQjhFQzNCOUUwQ0I4OUZB
MDI5Q0Y3OUQyNUIzOTU3MzQzN0NFQ0E3RUUwNzgzREU3MTNEMzFGRjE0RTI1OTcx
OTcxQzQyQTBDRUY4RUU0NDJBOTRFRTJBQTlERjU4Nzc2QTNBNDczQjYzMERGNDgy
ODQyQzY4QTk1OEVGNTQ2RDlBREQ1NUIyQUI4NTkxRTE3MEJCMjU3QzlDNjY1OTBG
MDY1RTk0RThBNjc2RUU5QTlENzg2NDI2QkRBQzg4NTU2QjJGN0UwMEU3QTY1RDk1
NkQxQUZFOEIyQzI4Q0VCRDQ0NjFCNzhGNTg3QUY2NUEyRDI0NDk5OEExRTNGRjk0
NjY2RkNCRjUwRTA2RDA4MDdBQTZBRUM5ODJDMTBFOUM4QTU3Q0VFMzlFRjZGRTlF
N0Y0MDNCN0U1NzcyMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwQ8z9F8KEeQrsaH0XTx/ksOOKbybG276XSsarV6u7O/WxNLsSyp1
tJrnE1f2q+DuJz0NkHNTuVSmPq3obVUUauJ8rjv4HxXpvDNiFNVCMMDDaDFhb2O7
/BlHtsnsILErYquOw7ngy4n6Apz3nSWzlXNDfOyn7geD3nE9Mf8U4llxlxxCoM74
7kQqlO4qqd9Yd2o6RztjDfSChCxoqVjvVG2a3VWyq4WR4XC7JXycZlkPBl6U6KZ2
7pqdeGQmvayIVWsvfgDnpl2VbRr+iywozr1EYbePWHr2Wi0kSZih4/+UZm/L9Q4G
0IB6pq7JgsEOnIpXzuOe9v6ef0A7fldyHQIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FNbCg0yPPgwDUqL66dVjm8lUN+VtMB8GA1UdIwQYMBaAFPFQURNfZvH/Z0rZpvWs
q2XcXv+fMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzdiYmFhNWQwLWE1MGMtNDE3OC04
NTczLTgwNDUwNDhiN2JjMy03LzAvRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVB
Q0FCNjVEQzVFRkY5Ri5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2JiYWE1ZDAtYTUw
Yy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTkvMC9GMTUwNTExMzVGNjZGMUZGNjc0
QUQ5QTZGNUFDQUI2NURDNUVGRjlGLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoG
CCsGAQUFBzALhn5yc3luYzovL3IubWFnZWxsYW4uaXB4by5jb20vcmVwby83YmJh
YTVkMC1hNTBjLTQxNzgtODU3My04MDQ1MDQ4YjdiYzMtNy8wLzMxMzkzNTJlMzcz
ODJlMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMNONjANBgkqhkiG9w0BAQsFAAOCAQEAW3t37Tm79o0pj6bjOzfT34gkztsYi5J/
50E35cZldmAWvqy2r4vjUv30LjmAKvmO8yeC82N8ca6OBgjeECvfcC0FqFHxL9QO
vfY8ryRzWszH9UBkoJ9X4j3LPuYgyBflXahOusvZL9mAJhuyTDKykhWa7ickZsiH
3bS/CwD8UXsHPyqdbRkUeqaTJiTEy9AtyNaFLbEJmWKMHJxfT/Fa5DRk+9wuXnoT
oxlNrbEZAUbeQEy59TUEnxBHa+3BKCjfs2vvKat9n5PP6sgXxZDEVAzLBRT7pFhs
XhAvSTy779G2Uccm5ZCdcZrIEe0tS4eRQukGzdQh4omk2cFW7D5NAg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org