Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          h7N3VB3Jpvzv28P9h4N2YC7gH6f5CQ772Am/Cuoysnk=
Subject key identifier:   29:8B:EA:26:00:D9:26:4E:46:5D:C0:C0:FD:A5:CB:E2:97:6F:E4:1C
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       3E6A2B608710016EC887EA7F88EC94E11B89B86F
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
Signing time:             Thu 18 Nov 2021 15:57:25 +0000
ROA not before:           Thu 18 Nov 2021 15:52:25 +0000
ROA not after:            Thu 17 Nov 2022 15:57:25 +0000
asID:                     397373
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6a:2b:60:87:10:01:6e:c8:87:ea:7f:88:ec:94:e1:1b:89:b8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:52:25 2021 GMT
            Not After : Nov 17 15:57:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:5c:be:31:98:4d:e8:d4:89:f2:1e:62:4a:
                    83:5e:44:8b:1f:9d:3b:4b:03:a2:09:34:b7:84:b1:
                    fa:9e:92:38:f6:2d:5c:d1:10:ea:c3:46:ff:a5:de:
                    fb:f9:f0:2b:df:05:a1:fd:67:c1:80:9b:26:9b:1f:
                    55:24:b5:2a:87:ff:da:67:44:ee:f1:1a:87:78:59:
                    a9:80:cf:d8:4c:e7:91:6c:c8:21:fe:46:99:d7:86:
                    c8:ac:98:b9:d5:51:87:94:e1:d7:be:11:a6:38:96:
                    84:de:a7:2d:0b:8e:7e:4c:f2:3e:35:86:4c:48:ea:
                    f1:8f:48:99:87:f7:d4:c8:ed:54:56:8b:ac:9e:71:
                    e0:ea:bf:b0:fe:9c:ae:48:42:fa:76:5f:b0:26:27:
                    05:ff:1a:a6:14:5f:7a:27:96:88:54:79:e9:01:13:
                    09:e1:5f:6e:44:b0:25:9e:42:5f:3b:7a:75:8a:8c:
                    60:ab:cb:7b:5b:0d:38:3e:fe:e7:73:15:77:01:f0:
                    6e:0d:00:ab:82:7e:50:7b:f2:65:d1:c1:4b:b8:f6:
                    14:7c:ff:c7:75:5d:ca:1d:34:f3:b6:95:57:1d:30:
                    4c:82:20:33:d1:b7:74:c8:a3:60:64:65:48:d0:ae:
                    d5:76:49:4b:12:8e:8f:cd:00:ce:31:cf:dd:da:a3:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:EA:26:00:D9:26:4E:46:5D:C0:C0:FD:A5:CB:E2:97:6F:E4:1C
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:94:27:b0:20:5b:d8:d3:52:c9:eb:3e:e9:c5:7a:cb:01:fa:
         88:44:b6:43:c4:88:0a:4c:55:c7:13:04:be:7e:2c:39:70:60:
         b1:df:06:4d:3c:b7:24:79:0e:da:da:43:c4:5a:25:4d:f9:c3:
         be:3a:73:27:e2:7e:e8:87:93:aa:96:1f:dc:98:98:c7:0b:c7:
         cd:d1:40:e0:32:3a:d2:f3:fe:97:2a:4d:3a:3a:84:3d:97:4d:
         a2:98:2c:e0:fc:71:5a:11:d6:fb:eb:b8:2c:8b:8e:7f:72:c5:
         c3:be:8e:2d:09:e7:4b:85:58:a2:cf:eb:20:17:90:34:5d:f2:
         c3:cd:ab:b6:a2:c8:2f:63:50:53:a0:97:a4:95:55:a7:a9:f3:
         f4:f0:6a:8f:e1:eb:15:78:19:e3:0a:44:1f:82:67:ed:bb:f8:
         83:bf:56:48:7f:b3:6a:c3:fc:81:d9:bf:f0:92:a0:87:3b:43:
         f0:4b:c1:57:94:bc:06:49:80:9b:9d:3e:c4:1c:b4:1a:8f:d7:
         69:02:bc:ba:7c:20:d8:19:93:f7:cc:13:87:25:fa:b9:43:1f:
         51:d9:5c:77:c8:35:d6:0a:ce:13:9c:52:21:e3:61:23:e7:22:
         4a:ee:b3:a3:8e:18:04:36:63:9a:99:f1:a2:7e:10:4a:a7:ff:
         44:53:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org