Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          RiVuD1ppHtP2K2WGDEOyiZpCj23+prM163ghSXgGh80=
Subject key identifier:   81:25:FC:4B:FE:0B:18:14:77:81:DF:B9:58:53:9A:A6:87:77:49:30
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       76416B0D9C346352EE95FDAC65CD4A4E3DB4A2C5
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa
Signing time:             Thu 18 Nov 2021 15:58:24 +0000
ROA not before:           Thu 18 Nov 2021 15:53:24 +0000
ROA not after:            Thu 17 Nov 2022 15:58:24 +0000
asID:                     397423
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:41:6b:0d:9c:34:63:52:ee:95:fd:ac:65:cd:4a:4e:3d:b4:a2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:53:24 2021 GMT
            Not After : Nov 17 15:58:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:a3:b4:34:5a:1b:91:0c:5d:d8:a8:0f:8b:
                    5d:72:db:bf:da:86:35:3a:89:6d:3e:5d:cc:96:7a:
                    0c:0f:c9:17:d6:a8:ff:96:d1:10:eb:2b:48:ac:d8:
                    3d:d3:5d:18:9c:74:d6:59:f3:65:27:29:2d:ad:eb:
                    b7:d5:28:bc:50:17:26:a5:3b:56:b5:a8:06:f9:d8:
                    5e:c7:b9:fd:c1:e1:1d:f8:03:03:c9:5d:fb:72:4c:
                    9c:51:d6:ec:bc:46:4c:81:a5:ba:43:a9:13:21:fb:
                    97:4f:cf:d8:b7:d8:d8:1b:ce:f4:f3:52:8d:1d:5f:
                    93:35:cb:b8:ad:88:ce:38:30:a4:86:ca:b3:a6:b0:
                    40:ad:0f:62:4b:50:f9:f2:77:94:77:c0:d2:a6:af:
                    de:52:8b:6e:93:eb:52:a9:d6:99:51:d5:90:44:5c:
                    87:58:44:21:a2:21:04:c4:c3:88:b0:09:d1:85:9b:
                    e5:fb:7d:fe:d3:cd:54:18:35:5a:09:6b:97:b0:10:
                    90:11:48:12:58:61:75:f6:11:94:b2:dc:d0:9a:ca:
                    30:41:f8:57:6e:da:89:f2:85:ce:e5:13:c7:a5:af:
                    3e:90:93:44:14:44:7c:18:59:48:83:70:27:26:1e:
                    76:14:61:0b:19:44:e9:69:09:84:25:7a:11:5b:1b:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:FC:4B:FE:0B:18:14:77:81:DF:B9:58:53:9A:A6:87:77:49:30
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:a8:bf:5c:03:7c:37:ad:75:0c:de:b2:d3:36:3b:10:05:
         26:5f:23:a7:f6:c8:cb:ed:2a:78:58:3e:69:1a:c7:fa:38:aa:
         f8:45:5b:5e:75:06:93:4e:1b:ec:c4:58:32:df:83:40:5a:a1:
         40:d9:61:41:63:cb:58:c9:9a:66:5f:ee:af:08:8a:55:3c:ea:
         76:23:13:e3:a1:75:85:c1:a2:3a:fc:76:47:1c:09:ed:c4:d9:
         9d:22:4a:2e:03:aa:94:d7:5c:0f:b7:b3:32:62:c2:6d:02:19:
         d6:17:c9:8f:0c:d3:1d:62:98:5f:d4:59:22:35:51:b3:ac:bf:
         9e:09:71:b6:67:9f:79:a7:ef:6a:d6:d4:c3:2f:f6:4b:c6:9d:
         a0:70:59:fa:e4:17:5c:9f:7e:b7:bc:9d:e2:32:2c:52:dd:a4:
         4d:8c:d1:df:82:89:42:a6:0c:e9:29:ba:fe:d9:98:59:a8:9f:
         a5:26:b3:d3:7e:e3:69:d7:6c:86:35:ea:98:17:38:29:d9:89:
         3c:58:a3:dc:a6:c3:df:ea:71:4e:d6:3a:04:bc:3c:56:5f:e1:
         1b:76:45:ab:14:87:94:f1:ee:f8:af:04:36:7c:3f:6e:71:dc:
         2b:b5:74:18:c0:7b:95:83:fe:24:62:c6:64:5e:90:30:8e:60:
         27:8f:4f:a0
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUdkFrDZw0Y1Lulf2sZc1KTj20osUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVBQ0FCNjVE
QzVFRkY5RjAeFw0yMTExMTgxNTUzMjRaFw0yMjExMTcxNTU4MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREM3MEEzQjQzNDVBMUI5MTBD
NUREOEE4MEY4QjVENzJEQkJGREE4NjM1M0E4OTZEM0U1RENDOTY3QTBDMEZDOTE3
RDZBOEZGOTZEMTEwRUIyQjQ4QUNEODNERDM1RDE4OUM3NEQ2NTlGMzY1MjcyOTJE
QURFQkI3RDUyOEJDNTAxNzI2QTUzQjU2QjVBODA2RjlEODVFQzdCOUZEQzFFMTFE
RjgwMzAzQzk1REZCNzI0QzlDNTFENkVDQkM0NjRDODFBNUJBNDNBOTEzMjFGQjk3
NEZDRkQ4QjdEOEQ4MUJDRUY0RjM1MjhEMUQ1RjkzMzVDQkI4QUQ4OENFMzgzMEE0
ODZDQUIzQTZCMDQwQUQwRjYyNEI1MEY5RjI3Nzk0NzdDMEQyQTZBRkRFNTI4QjZF
OTNFQjUyQTlENjk5NTFENTkwNDQ1Qzg3NTg0NDIxQTIyMTA0QzRDMzg4QjAwOUQx
ODU5QkU1RkI3REZFRDNDRDU0MTgzNTVBMDk2Qjk3QjAxMDkwMTE0ODEyNTg2MTc1
RjYxMTk0QjJEQ0QwOUFDQTMwNDFGODU3NkVEQTg5RjI4NUNFRTUxM0M3QTVBRjNF
OTA5MzQ0MTQ0NDdDMTg1OTQ4ODM3MDI3MjYxRTc2MTQ2MTBCMTk0NEU5NjkwOTg0
MjU3QTExNUIxQjdEQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3HCjtDRaG5EMXdioD4tdctu/2oY1OoltPl3MlnoMD8kX1qj/ltEQ
6ytIrNg9010YnHTWWfNlJyktreu31Si8UBcmpTtWtagG+dhex7n9weEd+AMDyV37
ckycUdbsvEZMgaW6Q6kTIfuXT8/Yt9jYG87081KNHV+TNcu4rYjOODCkhsqzprBA
rQ9iS1D58neUd8DSpq/eUotuk+tSqdaZUdWQRFyHWEQhoiEExMOIsAnRhZvl+33+
081UGDVaCWuXsBCQEUgSWGF19hGUstzQmsowQfhXbtqJ8oXO5RPHpa8+kJNEFER8
GFlIg3AnJh52FGELGUTpaQmEJXoRWxt9tQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FIEl/Ev+CxgUd4HfuVhTmqaHd0kwMB8GA1UdIwQYMBaAFPFQURNfZvH/Z0rZpvWs
q2XcXv+fMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzdiYmFhNWQwLWE1MGMtNDE3OC04
NTczLTgwNDUwNDhiN2JjMy03LzAvRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVB
Q0FCNjVEQzVFRkY5Ri5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2JiYWE1ZDAtYTUw
Yy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTkvMC9GMTUwNTExMzVGNjZGMUZGNjc0
QUQ5QTZGNUFDQUI2NURDNUVGRjlGLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2Ji
YWE1ZDAtYTUwYy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTcvMC8zMTM5MzgyZTMz
MzcyZTMxMzEzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMzMzkzNzM0MzIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBMYlcDANBgkqhkiG9w0BAQsFAAOCAQEATsGov1wDfDetdQzestM2
OxAFJl8jp/bIy+0qeFg+aRrH+jiq+EVbXnUGk04b7MRYMt+DQFqhQNlhQWPLWMma
Zl/urwiKVTzqdiMT46F1hcGiOvx2RxwJ7cTZnSJKLgOqlNdcD7ezMmLCbQIZ1hfJ
jwzTHWKYX9RZIjVRs6y/nglxtmefeafvatbUwy/2S8adoHBZ+uQXXJ9+t7yd4jIs
Ut2kTYzR34KJQqYM6Sm6/tmYWaifpSaz037jaddshjXqmBc4KdmJPFij3KbD3+px
TtY6BLw8Vl/hG3ZFqxSHlPHu+K8ENnw/bnHcK7V0GMB7lYP+JGLGZF6QMI5gJ49P
oA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org