Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3131322e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          e5L/7Ze9kZaNRVfJJNOrwHLU2SYVbWV5UuOzU1ilbMA=
Subject key identifier:   4D:62:9B:BB:CB:E8:20:7A:DE:EE:FB:4A:2A:2C:BC:D6:1C:FE:42:AE
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       32C29D242EE9B77203512698E8CDE68C953168E7
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa
Signing time:             Thu 18 Nov 2021 15:52:00 +0000
ROA not before:           Thu 18 Nov 2021 15:47:00 +0000
ROA not after:            Thu 17 Nov 2022 15:52:00 +0000
asID:                     17216
IP address blocks:        198.37.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c2:9d:24:2e:e9:b7:72:03:51:26:98:e8:cd:e6:8c:95:31:68:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:47:00 2021 GMT
            Not After : Nov 17 15:52:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:db:ba:f2:b5:7d:38:4b:ac:a0:b6:3f:8e:
                    d2:71:54:3e:f9:f9:73:b9:59:58:53:9a:84:1f:5f:
                    1b:5d:b2:51:2c:61:7d:62:03:af:8c:e6:2f:52:d2:
                    2f:26:e9:c1:07:fb:20:93:e1:83:53:bc:ca:cb:f6:
                    78:60:74:66:28:9b:24:eb:04:67:13:16:5e:c8:2f:
                    e3:77:6b:5e:48:75:3f:52:db:a1:93:5c:f1:5c:89:
                    d0:24:04:ac:df:1d:39:6b:8e:a9:f7:61:c9:c4:84:
                    7f:c8:6d:d7:ed:1d:ca:54:bf:33:0d:6d:e9:9c:3b:
                    1c:10:90:3e:5d:59:c3:a4:de:8d:cb:ae:75:4d:d3:
                    db:bc:08:e8:cb:70:c3:0b:0a:a5:98:75:1b:63:15:
                    d2:ec:c2:ef:81:4d:ea:13:82:0a:57:fb:45:22:0b:
                    89:12:5e:1a:1e:3c:31:b6:c6:d8:8c:4b:de:bb:0b:
                    e7:1d:e4:63:f1:59:09:89:00:af:dc:c6:67:9a:92:
                    4e:b8:22:6e:cc:cb:39:7a:89:b8:68:e3:63:e7:a6:
                    3b:2d:15:3c:64:be:a5:3b:7e:77:7d:aa:e6:a8:99:
                    06:40:78:a5:c8:82:79:bc:21:64:e7:82:13:f6:61:
                    7e:e0:5d:12:ff:5b:7b:2b:f0:c5:a3:8f:f5:58:84:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:62:9B:BB:CB:E8:20:7A:DE:EE:FB:4A:2A:2C:BC:D6:1C:FE:42:AE
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:7b:15:5a:2a:6b:96:f6:29:3e:cb:bf:ec:bc:df:64:72:d4:
         9b:a3:9b:82:2c:05:54:cd:43:bb:60:44:17:34:f7:a6:23:3d:
         b1:a9:0a:71:b4:63:15:fd:13:2e:2e:47:3e:f3:e5:22:25:61:
         1d:80:ad:e7:1a:42:a0:71:d1:31:5f:c2:2b:2f:f9:b3:77:65:
         15:20:e6:02:04:29:24:b4:58:b4:7d:96:00:5f:3b:10:2c:f3:
         9d:67:1a:8e:02:ad:02:a4:df:e0:f0:77:88:2d:4c:5f:ea:e5:
         31:44:3f:95:09:3c:55:a2:5b:27:37:de:4b:f4:58:f7:4f:a7:
         b7:c1:69:f7:c0:aa:a4:76:8f:2e:07:6a:88:fc:07:67:35:8b:
         cc:ee:10:a9:3e:44:10:89:7a:c3:0e:11:e9:14:21:8b:dc:e3:
         e4:e9:9e:d7:d1:4a:f3:ab:4f:05:16:3a:93:5c:07:7c:80:eb:
         1d:7d:e3:74:aa:f7:8e:2e:18:eb:34:34:da:fe:0b:12:8a:50:
         2e:c5:43:29:35:6a:cd:28:b5:dc:9d:1f:f1:c6:57:4a:e4:12:
         ae:63:0a:f6:d8:b9:bc:e9:fc:d5:49:92:0f:5f:26:ef:2c:7c:
         ef:aa:78:5f:37:0d:51:0c:c7:e4:e2:00:2b:63:2a:d6:87:25:
         b6:58:32:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org