Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3130342e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          KBdI76/JhID4DJMN5Q9ENuIGffyRGB0L5oCKg+HRlt8=
Subject key identifier:   06:B6:AC:0F:D5:D6:A4:B3:BE:8D:73:B8:0F:F7:AE:16:A2:37:89:46
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       11B473DC7DA65CC9DB1171D9F8B86DED24D3DB80
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
Signing time:             Thu 18 Nov 2021 15:51:48 +0000
ROA not before:           Thu 18 Nov 2021 15:46:48 +0000
ROA not after:            Thu 17 Nov 2022 15:51:48 +0000
asID:                     17216
IP address blocks:        198.37.104.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b4:73:dc:7d:a6:5c:c9:db:11:71:d9:f8:b8:6d:ed:24:d3:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:46:48 2021 GMT
            Not After : Nov 17 15:51:48 2022 GMT
        Subject: CN=3082010A0282010100D3F2E31156A9A5D9D71397267F88260ADC9E6B7447ADC6C114AC17C97605D7837F273C9E800814AEF1044F214EE88370C2520BA076E9B21645EC424371486D15E5F8F39C28BCE3AB3181C8617569A791E9195400551C356A19E8EC6665C2990B53DC8F7E8B8E30D2308389F77389BC2C0C4C3E2337D0AB44E44C0B5A44FEF5F6CBDA75705E93AEC4DBBB48114060AC9B4E6C81DB91E1F9F6F457FF7193DDCAF66CDCD29E0F2774227EF07DE7824D7FFBD8E25FB580D2F65313047AA2EA69874364267FDE366E1F177EAF501BA9166109825CF873BADFA9588DACAD62FDF7EC271210433322B6E813E996AF34FD0E12B982300B09C573ABCCD30AB97BF2F2A02B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:e3:11:56:a9:a5:d9:d7:13:97:26:7f:88:
                    26:0a:dc:9e:6b:74:47:ad:c6:c1:14:ac:17:c9:76:
                    05:d7:83:7f:27:3c:9e:80:08:14:ae:f1:04:4f:21:
                    4e:e8:83:70:c2:52:0b:a0:76:e9:b2:16:45:ec:42:
                    43:71:48:6d:15:e5:f8:f3:9c:28:bc:e3:ab:31:81:
                    c8:61:75:69:a7:91:e9:19:54:00:55:1c:35:6a:19:
                    e8:ec:66:65:c2:99:0b:53:dc:8f:7e:8b:8e:30:d2:
                    30:83:89:f7:73:89:bc:2c:0c:4c:3e:23:37:d0:ab:
                    44:e4:4c:0b:5a:44:fe:f5:f6:cb:da:75:70:5e:93:
                    ae:c4:db:bb:48:11:40:60:ac:9b:4e:6c:81:db:91:
                    e1:f9:f6:f4:57:ff:71:93:dd:ca:f6:6c:dc:d2:9e:
                    0f:27:74:22:7e:f0:7d:e7:82:4d:7f:fb:d8:e2:5f:
                    b5:80:d2:f6:53:13:04:7a:a2:ea:69:87:43:64:26:
                    7f:de:36:6e:1f:17:7e:af:50:1b:a9:16:61:09:82:
                    5c:f8:73:ba:df:a9:58:8d:ac:ad:62:fd:f7:ec:27:
                    12:10:43:33:22:b6:e8:13:e9:96:af:34:fd:0e:12:
                    b9:82:30:0b:09:c5:73:ab:cc:d3:0a:b9:7b:f2:f2:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B6:AC:0F:D5:D6:A4:B3:BE:8D:73:B8:0F:F7:AE:16:A2:37:89:46
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:08:c8:30:b6:8b:57:7e:8b:3b:8d:81:f3:14:f1:c2:24:
         0e:ee:47:d6:9f:5f:91:89:02:97:c8:55:0e:af:4e:e9:4b:99:
         0f:cf:d5:73:a3:fa:9a:7a:93:cd:d0:92:f4:4e:50:8e:38:a0:
         e5:72:e5:a5:b4:95:29:51:60:58:67:0e:29:68:8f:43:4b:66:
         4b:03:01:63:ba:e7:79:d8:cb:3d:17:29:c3:b7:5a:31:aa:04:
         94:3b:72:2c:8e:2c:b4:6e:1c:7e:6b:47:19:fa:8f:49:cd:be:
         c1:99:24:71:55:98:d3:c8:78:c7:c2:9e:64:ef:e7:19:b2:97:
         fc:5f:79:cf:87:f5:17:24:58:83:ce:bf:1e:17:da:01:b8:1c:
         04:d3:86:75:08:b5:32:40:84:69:ac:9a:77:eb:97:96:da:5d:
         a8:11:af:fd:84:c5:59:63:87:aa:8a:6f:7d:10:f9:15:fb:1a:
         9e:17:7a:a3:ea:9e:d9:f0:01:bb:37:38:49:8d:c9:3b:dc:6c:
         ec:24:e2:d0:0f:66:bb:d0:f2:7d:d8:97:57:e9:59:84:40:bd:
         33:f0:6e:e2:66:76:cf:0e:1d:50:b7:68:03:51:91:ac:26:55:
         64:7b:40:8d:cb:df:bf:a3:3b:2a:cd:7b:48:96:ed:94:82:43:
         02:3c:75:ca
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUEbRz3H2mXMnbEXHZ+Lht7STT24AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVBQ0FCNjVE
QzVFRkY5RjAeFw0yMTExMTgxNTQ2NDhaFw0yMjExMTcxNTUxNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNGMkUzMTE1NkE5QTVEOUQ3
MTM5NzI2N0Y4ODI2MEFEQzlFNkI3NDQ3QURDNkMxMTRBQzE3Qzk3NjA1RDc4MzdG
MjczQzlFODAwODE0QUVGMTA0NEYyMTRFRTg4MzcwQzI1MjBCQTA3NkU5QjIxNjQ1
RUM0MjQzNzE0ODZEMTVFNUY4RjM5QzI4QkNFM0FCMzE4MUM4NjE3NTY5QTc5MUU5
MTk1NDAwNTUxQzM1NkExOUU4RUM2NjY1QzI5OTBCNTNEQzhGN0U4QjhFMzBEMjMw
ODM4OUY3NzM4OUJDMkMwQzRDM0UyMzM3RDBBQjQ0RTQ0QzBCNUE0NEZFRjVGNkNC
REE3NTcwNUU5M0FFQzREQkJCNDgxMTQwNjBBQzlCNEU2QzgxREI5MUUxRjlGNkY0
NTdGRjcxOTNERENBRjY2Q0RDRDI5RTBGMjc3NDIyN0VGMDdERTc4MjREN0ZGQkQ4
RTI1RkI1ODBEMkY2NTMxMzA0N0FBMkVBNjk4NzQzNjQyNjdGREUzNjZFMUYxNzdF
QUY1MDFCQTkxNjYxMDk4MjVDRjg3M0JBREZBOTU4OERBQ0FENjJGREY3RUMyNzEy
MTA0MzMzMjJCNkU4MTNFOTk2QUYzNEZEMEUxMkI5ODIzMDBCMDlDNTczQUJDQ0Qz
MEFCOTdCRjJGMkEwMkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0/LjEVappdnXE5cmf4gmCtyea3RHrcbBFKwXyXYF14N/JzyegAgU
rvEETyFO6INwwlILoHbpshZF7EJDcUhtFeX485wovOOrMYHIYXVpp5HpGVQAVRw1
ahno7GZlwpkLU9yPfouOMNIwg4n3c4m8LAxMPiM30KtE5EwLWkT+9fbL2nVwXpOu
xNu7SBFAYKybTmyB25Hh+fb0V/9xk93K9mzc0p4PJ3QifvB954JNf/vY4l+1gNL2
UxMEeqLqaYdDZCZ/3jZuHxd+r1AbqRZhCYJc+HO636lYjaytYv337CcSEEMzIrbo
E+mWrzT9DhK5gjALCcVzq8zTCrl78vKgKwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FAa2rA/V1qSzvo1zuA/3rhaiN4lGMB8GA1UdIwQYMBaAFPFQURNfZvH/Z0rZpvWs
q2XcXv+fMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzdiYmFhNWQwLWE1MGMtNDE3OC04
NTczLTgwNDUwNDhiN2JjMy03LzAvRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVB
Q0FCNjVEQzVFRkY5Ri5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2JiYWE1ZDAtYTUw
Yy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTkvMC9GMTUwNTExMzVGNjZGMUZGNjc0
QUQ5QTZGNUFDQUI2NURDNUVGRjlGLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2Ji
YWE1ZDAtYTUwYy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTcvMC8zMTM5MzgyZTMz
MzcyZTMxMzAzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzczMjMxMzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAPGJWgwDQYJKoZIhvcNAQELBQADggEBAFP7CMgwtotXfos7jYHzFPHC
JA7uR9afX5GJApfIVQ6vTulLmQ/P1XOj+pp6k83QkvROUI44oOVy5aW0lSlRYFhn
Diloj0NLZksDAWO653nYyz0XKcO3WjGqBJQ7ciyOLLRuHH5rRxn6j0nNvsGZJHFV
mNPIeMfCnmTv5xmyl/xfec+H9RckWIPOvx4X2gG4HATThnUItTJAhGmsmnfrl5ba
XagRr/2ExVljh6qKb30Q+RX7Gp4XeqPqntnwAbs3OEmNyTvcbOwk4tAPZrvQ8n3Y
l1fpWYRAvTPwbuJmds8OHVC3aANRkawmVWR7QI3L37+jOyrNe0iW7ZSCQwI8dco=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org