Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3131302e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          vwgjy15Cb1VFqGj+nlisTU3ym+wRZKI6TcHgeDDBr3g=
Subject key identifier:   7E:85:A9:6D:B8:32:8C:25:55:13:20:F9:8C:6D:5D:D7:E5:DE:05:70
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       168BFF342041E04B216B0BEAF4A5383F97BAA695
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
Signing time:             Thu 18 Nov 2021 15:59:16 +0000
ROA not before:           Thu 18 Nov 2021 15:54:16 +0000
ROA not after:            Thu 17 Nov 2022 15:59:16 +0000
asID:                     53340
IP address blocks:        198.37.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8b:ff:34:20:41:e0:4b:21:6b:0b:ea:f4:a5:38:3f:97:ba:a6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:54:16 2021 GMT
            Not After : Nov 17 15:59:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:94:28:9c:83:6c:f1:4f:8f:51:27:00:7e:
                    8e:fb:8f:af:6b:be:38:dc:d9:3f:d9:01:39:fd:18:
                    78:08:e4:56:09:59:76:ca:d8:b5:83:82:fa:17:59:
                    be:eb:df:b6:49:04:df:ad:9c:15:7a:92:15:6d:50:
                    8f:5d:3c:74:2e:d5:2b:e7:a5:40:b2:c3:97:6a:c5:
                    59:cc:3f:81:24:ed:0e:79:52:ed:7a:70:52:b8:a9:
                    24:88:58:58:c2:9d:d2:58:ad:d0:e4:ca:08:58:8d:
                    a7:e7:b4:2f:f8:88:a1:0d:e3:ae:a1:20:23:1b:92:
                    49:3c:dc:c0:51:81:ab:02:c8:f7:66:5e:cc:86:12:
                    4a:dc:3c:d5:ae:df:1b:f0:1b:16:97:94:46:e1:f9:
                    53:b4:c8:3f:8e:f8:0a:68:18:c2:dc:f4:5a:19:da:
                    e1:ca:46:eb:3b:a3:74:75:ee:ce:2f:ed:ba:19:3a:
                    fd:c2:c9:51:4b:81:7a:49:b0:cd:d2:b0:5b:b6:db:
                    b1:ed:65:0c:80:9d:6a:da:68:29:6c:67:cc:59:8c:
                    0e:3b:2c:14:21:14:ee:98:96:bd:c3:ba:01:3d:ab:
                    c6:ba:db:6b:ba:7f:07:c9:c4:06:b0:e4:d6:99:45:
                    23:3c:61:13:ca:06:dd:4b:c7:0f:10:1b:08:16:e9:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:A9:6D:B8:32:8C:25:55:13:20:F9:8C:6D:5D:D7:E5:DE:05:70
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:6c:c8:bd:2d:98:cd:1b:58:5b:0d:4e:79:1f:73:86:58:
         40:45:eb:28:f7:19:c3:53:88:70:7a:71:20:d6:c7:e9:d5:e0:
         4c:cc:5b:02:2a:26:8d:80:fb:22:3e:01:eb:b4:4d:9a:9f:5e:
         36:e3:6e:fc:24:7a:57:45:aa:0e:27:35:36:07:6f:2c:d4:8b:
         82:e0:ca:52:b6:83:bd:77:0d:60:35:3a:74:fa:5f:a8:c1:f8:
         25:c5:be:2d:49:2a:a7:51:88:a3:e5:1c:23:6c:f6:75:25:6e:
         bf:d5:11:e2:ba:85:07:15:78:fe:b8:6b:58:82:9f:a2:1c:6f:
         24:04:5a:cd:ff:57:e0:b3:59:57:75:d5:4a:92:2d:ee:38:97:
         73:c6:b4:bc:24:a1:f4:e0:82:bf:b3:84:4c:b5:9e:01:ca:88:
         68:67:75:fb:ff:df:e2:de:44:5f:d0:f2:f0:a3:ac:8e:4e:99:
         a0:46:69:86:ac:13:95:c9:6d:8e:9c:82:e3:96:f9:13:d9:0e:
         a8:64:8d:94:62:a6:ee:65:df:ee:07:1a:b3:42:f7:16:61:6d:
         42:f2:5b:7b:63:c7:26:3c:43:41:42:96:b5:cc:71:1f:ca:4e:
         c2:f3:9f:e5:b9:0f:13:f1:69:99:d0:e9:b2:33:a7:e1:ce:09:
         7a:7c:3c:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org