Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e20313332333136.roa
File:                     3139352e37382e35352e302f32342d3234203d3e20313332333136.roa (raw, json)
Hash identifier:          dTEFNBRTf6jGNqcUND4pHiItR6sB6Uc+P9tmPAvo/x8=
Subject key identifier:   F8:5C:1C:B6:2F:17:F7:8C:CF:2B:58:4D:4F:D7:F3:1A:CC:E4:4C:1F
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       097FE3E8EFA29735FD03988B9E952965F7ADB678
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e20313332333136.roa
Signing time:             Thu 31 Mar 2022 11:59:34 +0000
ROA not before:           Thu 31 Mar 2022 11:54:34 +0000
ROA not after:            Thu 30 Mar 2023 11:59:34 +0000
asID:                     132316
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:e3:e8:ef:a2:97:35:fd:03:98:8b:9e:95:29:65:f7:ad:b6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Mar 31 11:54:34 2022 GMT
            Not After : Mar 30 11:59:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:8e:a8:9d:76:1e:32:61:d9:26:67:cf:fe:
                    f6:35:94:4a:c2:6b:25:a0:85:c0:4c:a4:dc:e1:17:
                    4d:2e:c9:f6:71:2e:02:be:4b:5f:09:ce:8d:35:e7:
                    55:71:79:a5:4d:53:96:2d:e6:9a:19:e4:28:5c:d3:
                    77:7b:ae:60:44:78:df:9c:d2:c4:7f:4f:6d:8d:96:
                    c6:73:73:d5:24:b5:98:fc:7e:74:38:d8:c6:79:be:
                    df:aa:ec:e7:ca:bc:81:6c:55:46:8c:fe:e9:92:eb:
                    a8:f9:ef:4c:a8:f2:67:cb:8d:ff:db:a5:df:13:8b:
                    89:0c:1d:d6:f6:b0:90:0a:6a:b7:85:d5:0c:f4:d3:
                    2c:35:71:dc:7f:fe:8b:de:33:6e:9b:b7:8b:d7:1e:
                    93:d8:01:24:f0:c0:96:6f:50:81:82:37:ea:ba:f5:
                    0e:87:e8:29:67:cb:00:f1:c9:0c:66:03:8c:93:e3:
                    ed:3c:f8:31:ee:8a:bb:11:89:d4:77:3c:44:3a:15:
                    be:72:9f:2c:42:e2:a5:f6:ca:21:3c:49:86:f7:ce:
                    80:99:6f:93:fd:87:5a:74:ee:ba:5e:19:bc:aa:92:
                    1f:f6:4f:20:a5:92:ba:a7:93:01:0c:81:6b:ed:50:
                    2f:5a:10:1f:cb:b6:50:50:76:77:aa:b8:c3:63:21:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:1C:B6:2F:17:F7:8C:CF:2B:58:4D:4F:D7:F3:1A:CC:E4:4C:1F
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e20313332333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:07:ae:9c:be:19:32:2b:53:0f:c0:5e:d8:19:72:b0:07:1f:
         4f:bf:79:ab:48:9f:1d:9c:17:a7:ce:8d:90:c3:8a:d9:ba:11:
         16:a8:c5:34:e6:e9:85:34:0c:2b:bf:b3:42:52:ac:78:46:09:
         9b:e6:0a:e0:c6:c9:a2:75:d8:df:72:3c:dc:d6:6d:8a:87:17:
         ae:b4:6b:7a:02:11:8d:23:65:24:09:95:35:7e:3f:90:a5:9f:
         31:3a:49:c5:9a:32:4f:ce:24:50:08:bc:76:0e:75:e1:74:03:
         0a:42:42:47:45:78:84:91:d6:f3:d4:de:5c:29:bc:e9:04:0f:
         e1:9f:df:cd:d6:3e:1c:e5:d3:41:2a:37:1b:7e:9b:dd:69:97:
         33:d1:23:01:19:ee:9d:2d:d3:a3:fc:ae:1d:98:b0:e6:47:ac:
         77:17:c9:6d:ba:29:3d:9c:a5:80:f5:68:60:01:91:a6:f6:e3:
         2b:36:1d:5a:86:e7:2e:fa:8f:f7:80:b3:a5:85:13:67:a6:48:
         27:8c:a5:62:a0:31:b1:e7:a5:c6:69:47:88:70:11:a4:45:88:
         16:1f:b0:4e:93:a4:d4:04:44:d9:60:eb:51:8e:b8:64:34:1d:
         03:9f:ed:0c:68:8b:94:ab:b0:3e:5f:61:3d:a5:a6:f9:9a:1b:
         af:ee:93:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org