Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e2036343631.roa
File:                     3139352e37382e35352e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          cjB/02IEUtm0pSwAqw3tBHwd9vkP/Rxw65H6fYYgU5E=
Subject key identifier:   1B:4E:28:D0:89:A2:56:C1:7E:72:AA:36:CD:2B:D7:E6:B8:DA:82:9D
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       69F6DD62F3D8F3339BB009B57AEA35D48E774524
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e2036343631.roa
Signing time:             Sun 03 Apr 2022 10:17:41 +0000
ROA not before:           Sun 03 Apr 2022 10:12:41 +0000
ROA not after:            Sun 02 Apr 2023 10:17:41 +0000
asID:                     6461
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f6:dd:62:f3:d8:f3:33:9b:b0:09:b5:7a:ea:35:d4:8e:77:45:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  3 10:12:41 2022 GMT
            Not After : Apr  2 10:17:41 2023 GMT
        Subject: CN=3082010A0282010100A7C8EFA7CDB4D509A4F02181831C2AD1CA4913E572F3AE11C59F7E881A7F42ACDAD131A56D69DA660C223E53BC78E706F8B12F50BFF5ED98AFCBC508D8D834465F1A416B68C88A6A85DADBCA59A573D57CB300E65EFC531A0D4A7662FA213EF990FD55EACB68E4F61AF924D7D450E048658BA791F1424858CEA3B6F94492337986FB9FD78294EFF4C1264F227393994F80C03FAC18D7553DC445CE186AC664990DF1B9B2455AE7B80EEA7D4028ECAE4F9310B5BDE3958829499E74CEDFEA97185DB9A5D19384FEE6117CD42E1A15964D61752DE048464A10AA9B898A03380E446F7115FD539D57E04A212CBD59CC6EFEA3BF32FE98D04FD4232DF0050A71DF310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:ef:a7:cd:b4:d5:09:a4:f0:21:81:83:1c:
                    2a:d1:ca:49:13:e5:72:f3:ae:11:c5:9f:7e:88:1a:
                    7f:42:ac:da:d1:31:a5:6d:69:da:66:0c:22:3e:53:
                    bc:78:e7:06:f8:b1:2f:50:bf:f5:ed:98:af:cb:c5:
                    08:d8:d8:34:46:5f:1a:41:6b:68:c8:8a:6a:85:da:
                    db:ca:59:a5:73:d5:7c:b3:00:e6:5e:fc:53:1a:0d:
                    4a:76:62:fa:21:3e:f9:90:fd:55:ea:cb:68:e4:f6:
                    1a:f9:24:d7:d4:50:e0:48:65:8b:a7:91:f1:42:48:
                    58:ce:a3:b6:f9:44:92:33:79:86:fb:9f:d7:82:94:
                    ef:f4:c1:26:4f:22:73:93:99:4f:80:c0:3f:ac:18:
                    d7:55:3d:c4:45:ce:18:6a:c6:64:99:0d:f1:b9:b2:
                    45:5a:e7:b8:0e:ea:7d:40:28:ec:ae:4f:93:10:b5:
                    bd:e3:95:88:29:49:9e:74:ce:df:ea:97:18:5d:b9:
                    a5:d1:93:84:fe:e6:11:7c:d4:2e:1a:15:96:4d:61:
                    75:2d:e0:48:46:4a:10:aa:9b:89:8a:03:38:0e:44:
                    6f:71:15:fd:53:9d:57:e0:4a:21:2c:bd:59:cc:6e:
                    fe:a3:bf:32:fe:98:d0:4f:d4:23:2d:f0:05:0a:71:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4E:28:D0:89:A2:56:C1:7E:72:AA:36:CD:2B:D7:E6:B8:DA:82:9D
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:10:b9:c9:4c:2b:ae:53:92:ad:4c:b3:7f:07:b5:87:11:
         fb:cf:74:54:23:36:c0:70:d1:2a:d8:b2:b8:ea:76:ba:bc:25:
         60:f6:e4:50:46:02:56:7a:8d:00:4c:58:41:40:a0:4d:dd:9b:
         0b:24:9d:fc:5a:80:bd:05:ae:a9:74:b1:73:c6:50:cd:4c:e7:
         3b:ee:79:cf:e7:89:1f:2c:0f:92:38:33:66:61:f3:67:5b:09:
         5c:89:a2:61:09:af:13:8e:fb:88:7f:b0:f7:b9:56:1f:e6:50:
         04:20:4d:11:50:73:d3:79:ae:7f:12:c0:07:a5:10:9c:d7:dd:
         e9:e0:bf:39:3e:d1:7f:8b:48:8b:37:8a:32:fe:09:20:5e:8b:
         ec:08:55:7a:58:ca:48:71:05:d8:06:e8:93:b5:f7:71:bc:2c:
         71:00:56:63:fb:e7:04:c7:72:bf:3f:4f:25:1d:17:f9:e4:1c:
         0f:90:0a:d3:0b:fb:ce:67:92:b8:cc:de:ec:61:8f:bd:70:82:
         56:ff:74:35:46:d8:59:31:92:e8:2f:73:ae:4b:c2:12:1c:0c:
         b0:87:a9:ca:36:d2:9f:77:8d:8b:34:aa:ed:6c:bd:f2:e3:c9:
         c5:07:7b:51:bc:67:93:51:69:69:a6:e9:7e:64:41:a6:6a:bd:
         9c:b4:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org