Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132372e302f32342d3234203d3e203430363736.roa
File:                     3139382e33372e3132372e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          E879M0sjHsV8VvPetUSi8PACiLqgAWx8Z1HnAdr08J4=
Subject key identifier:   BF:F3:3D:52:2B:1C:DF:1A:50:89:82:6E:46:3E:9C:9D:92:64:F5:EC
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       03A70979A6FEC8FAF1F25DDDCA6074E247530B94
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132372e302f32342d3234203d3e203430363736.roa
Signing time:             Thu 18 Nov 2021 15:59:13 +0000
ROA not before:           Thu 18 Nov 2021 15:54:13 +0000
ROA not after:            Thu 17 Nov 2022 15:59:13 +0000
asID:                     40676
IP address blocks:        198.37.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:09:79:a6:fe:c8:fa:f1:f2:5d:dd:ca:60:74:e2:47:53:0b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:54:13 2021 GMT
            Not After : Nov 17 15:59:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:1d:09:1b:cc:09:c8:9f:bc:6f:03:b0:e9:
                    01:2f:99:80:68:9f:1b:72:f4:35:e2:00:cd:67:59:
                    50:94:29:e1:30:06:2e:cf:e0:02:87:44:18:12:cc:
                    db:9d:dd:0d:56:9c:fd:74:d5:52:2b:da:12:ee:22:
                    ae:ef:5c:29:51:79:87:e8:58:28:1e:3f:a4:35:7d:
                    99:f6:16:53:9f:b7:74:f6:1a:b8:27:9f:42:dc:99:
                    69:6e:2f:6c:90:1d:87:cf:20:6a:85:94:fd:a5:f5:
                    d2:e3:a5:8f:67:b9:26:8c:84:f5:df:01:ab:c9:6c:
                    03:e7:9e:a4:dc:75:77:45:fc:c8:87:40:29:8f:b0:
                    77:8b:df:bf:ff:c7:06:c1:1b:cd:b4:86:43:6d:82:
                    5d:b7:d1:a2:39:11:4e:88:d2:98:e9:cc:ac:49:1f:
                    8c:0b:a5:ba:67:f7:4a:a7:60:76:3b:13:f8:1f:b9:
                    94:03:22:42:9e:9f:bf:4c:10:9b:3e:15:fb:f2:5b:
                    66:d3:4d:96:58:b6:43:c3:fa:95:57:7e:59:b4:37:
                    c1:62:a2:96:c0:7a:92:0a:03:55:28:1c:6d:5a:88:
                    0f:b1:b9:ac:04:8c:c1:5d:c5:2b:69:52:11:7e:9c:
                    05:0b:2a:95:f7:49:2f:bd:d8:fc:44:f7:f9:bc:ac:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:3D:52:2B:1C:DF:1A:50:89:82:6E:46:3E:9C:9D:92:64:F5:EC
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132372e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:f8:f5:1d:1b:b3:d2:a9:ee:7c:c8:5a:9f:59:cc:60:f6:
         ba:4c:1e:77:63:00:bc:6a:73:7a:a1:d6:23:37:b5:14:8b:4c:
         dc:63:07:14:dc:2b:cc:e4:cb:83:9a:46:74:86:bf:91:5d:c2:
         14:47:f1:61:65:75:49:7c:59:5d:fa:52:d5:7a:e7:86:25:04:
         21:7a:53:a9:5e:20:59:17:bf:21:30:7f:74:6c:53:3b:b8:bf:
         e5:b3:7d:ac:2d:80:a4:5b:15:3f:68:1a:fa:9f:d5:63:93:13:
         68:59:2e:0c:f5:b5:e7:17:43:b5:8a:e4:cf:64:53:7c:3d:22:
         27:6c:74:77:3b:f8:50:1b:ca:68:a1:52:0e:e3:95:01:49:7d:
         27:f0:e0:ce:46:43:74:b9:56:36:8e:26:49:50:2b:e4:a5:1a:
         d2:8b:4f:8b:3c:e5:0b:8e:8f:ab:9c:32:b6:e3:fb:d6:0c:f3:
         48:6a:d8:21:0c:f3:6b:0c:75:78:c1:05:ba:de:23:99:95:e8:
         cd:a1:ee:f0:82:44:9d:73:7d:a3:6e:ef:60:43:ae:85:a9:9b:
         73:34:5b:f3:d7:8e:dd:19:23:b6:4e:ba:d2:83:c8:51:25:52:
         82:e8:21:00:c5:12:33:0a:7e:7d:91:31:32:d4:36:47:f6:ff:
         ed:14:cf:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org