Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e203134393335.roa
File:                     3139382e33372e39362e302f32302d3234203d3e203134393335.roa (raw, json)
Hash identifier:          BcpV5eZW3TZ8pkk8Jp+0OteWYFIRPogIeaXZ8J5v060=
Subject key identifier:   5E:0E:28:40:50:95:AD:8A:97:03:2D:A0:54:2D:5E:80:C8:26:A1:33
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       6C3B4B04416EC9383DD830900D362F2C8C39BC29
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e203134393335.roa
Signing time:             Thu 18 Nov 2021 15:59:07 +0000
ROA not before:           Thu 18 Nov 2021 15:54:07 +0000
ROA not after:            Thu 17 Nov 2022 15:59:07 +0000
asID:                     14935
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3b:4b:04:41:6e:c9:38:3d:d8:30:90:0d:36:2f:2c:8c:39:bc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:54:07 2021 GMT
            Not After : Nov 17 15:59:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:b7:ef:f4:3b:d5:95:d9:c6:91:a8:96:54:
                    34:7c:f5:e5:62:e3:8d:57:af:6a:c5:4e:a9:c2:ec:
                    3a:4f:2f:9c:ba:40:db:38:35:15:7f:4e:6a:66:ed:
                    3f:9e:50:2d:0d:21:fa:af:99:b2:c7:be:38:78:a2:
                    64:e2:4b:24:87:ed:ef:a9:ed:c6:59:05:d8:26:35:
                    32:b0:2d:7c:eb:1b:dd:fd:c2:5a:ab:44:04:40:14:
                    52:f8:98:e7:13:59:d4:d1:1e:51:57:b5:a3:d1:e5:
                    c7:4e:86:c6:97:aa:52:f3:45:f6:40:4e:09:4e:fe:
                    a1:31:14:6a:b7:5b:f3:6d:88:e6:29:37:a3:3a:6d:
                    2f:67:55:9f:0b:27:90:fd:ab:8e:22:3a:c8:0f:28:
                    67:75:9f:8a:76:bb:64:36:9b:bd:57:93:47:49:41:
                    03:65:56:c0:eb:53:fa:9a:57:1f:b0:9f:6f:36:b9:
                    4d:ca:05:6b:05:f3:c5:e9:43:66:c2:23:21:46:6f:
                    ea:8a:ce:74:6c:f1:80:f0:34:73:d7:b1:0d:ad:63:
                    77:6f:d9:29:26:80:4d:8d:fc:6b:40:1f:8c:3e:77:
                    d3:c4:94:bf:99:f4:51:f7:72:66:55:b6:74:96:45:
                    04:74:9a:f8:90:33:5d:ad:79:bc:3f:77:8c:24:cf:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0E:28:40:50:95:AD:8A:97:03:2D:A0:54:2D:5E:80:C8:26:A1:33
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e203134393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:5b:8b:c0:bb:22:d0:06:0d:dc:e9:18:e1:eb:a0:df:f7:51:
         96:b8:87:5f:9d:a9:4e:7f:d8:74:75:89:1b:ab:01:07:a9:e9:
         a2:fe:b7:96:8c:a4:fa:a3:19:2c:b4:c0:ee:fe:3f:1c:e7:38:
         13:0d:b9:63:f5:15:16:84:ef:69:75:41:9f:dd:3b:55:9a:42:
         87:63:d2:d2:6b:63:46:a7:1b:db:76:fe:60:fd:90:95:56:35:
         62:ca:82:35:8b:eb:59:9c:80:34:2f:d3:cf:89:e4:c6:02:22:
         a6:87:e4:31:43:0e:c1:75:b5:01:31:30:c8:6d:68:4f:78:22:
         a1:e2:8e:6c:ec:d3:52:76:33:58:cb:86:6c:02:be:af:70:72:
         fa:0f:38:05:dc:56:c0:47:a5:26:2e:16:38:e1:1f:d6:81:a7:
         f2:71:e4:42:40:40:d3:7b:aa:04:a8:e3:43:4c:0c:e4:c9:e6:
         ed:46:9e:77:ba:e5:97:64:af:24:03:c2:6a:07:bb:0a:7a:05:
         32:6d:27:4f:c7:77:79:02:08:34:f9:bc:70:a2:cb:18:32:ca:
         0b:ef:b9:d3:3c:bd:d0:d3:a9:20:1b:2d:e2:67:28:99:a0:62:
         17:fb:37:46:f6:48:6f:1a:ec:5c:ee:f0:0f:21:8e:b9:73:13:
         45:12:8f:be
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUbDtLBEFuyTg92DCQDTYvLIw5vCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVBQ0FCNjVE
QzVFRkY5RjAeFw0yMTExMTgxNTU0MDdaFw0yMjExMTcxNTU5MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUIwN0I3RUZGNDNCRDU5NUQ5
QzY5MUE4OTY1NDM0N0NGNUU1NjJFMzhENTdBRjZBQzU0RUE5QzJFQzNBNEYyRjlD
QkE0MERCMzgzNTE1N0Y0RTZBNjZFRDNGOUU1MDJEMEQyMUZBQUY5OUIyQzdCRTM4
NzhBMjY0RTI0QjI0ODdFREVGQTlFREM2NTkwNUQ4MjYzNTMyQjAyRDdDRUIxQkRE
RkRDMjVBQUI0NDA0NDAxNDUyRjg5OEU3MTM1OUQ0RDExRTUxNTdCNUEzRDFFNUM3
NEU4NkM2OTdBQTUyRjM0NUY2NDA0RTA5NEVGRUExMzExNDZBQjc1QkYzNkQ4OEU2
MjkzN0EzM0E2RDJGNjc1NTlGMEIyNzkwRkRBQjhFMjIzQUM4MEYyODY3NzU5RjhB
NzZCQjY0MzY5QkJENTc5MzQ3NDk0MTAzNjU1NkMwRUI1M0ZBOUE1NzFGQjA5RjZG
MzZCOTREQ0EwNTZCMDVGM0M1RTk0MzY2QzIyMzIxNDY2RkVBOEFDRTc0NkNGMTgw
RjAzNDczRDdCMTBEQUQ2Mzc3NkZEOTI5MjY4MDREOERGQzZCNDAxRjhDM0U3N0Qz
QzQ5NEJGOTlGNDUxRjc3MjY2NTVCNjc0OTY0NTA0NzQ5QUY4OTAzMzVEQUQ3OUJD
M0Y3NzhDMjRDRjZFQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6we37/Q71ZXZxpGollQ0fPXlYuONV69qxU6pwuw6Ty+cukDbODUV
f05qZu0/nlAtDSH6r5myx744eKJk4kskh+3vqe3GWQXYJjUysC186xvd/cJaq0QE
QBRS+JjnE1nU0R5RV7Wj0eXHTobGl6pS80X2QE4JTv6hMRRqt1vzbYjmKTejOm0v
Z1WfCyeQ/auOIjrIDyhndZ+KdrtkNpu9V5NHSUEDZVbA61P6mlcfsJ9vNrlNygVr
BfPF6UNmwiMhRm/qis50bPGA8DRz17ENrWN3b9kpJoBNjfxrQB+MPnfTxJS/mfRR
93JmVbZ0lkUEdJr4kDNdrXm8P3eMJM9uzwIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FF4OKEBQla2KlwMtoFQtXoDIJqEzMB8GA1UdIwQYMBaAFPFQURNfZvH/Z0rZpvWs
q2XcXv+fMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzdiYmFhNWQwLWE1MGMtNDE3OC04
NTczLTgwNDUwNDhiN2JjMy03LzAvRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVB
Q0FCNjVEQzVFRkY5Ri5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2JiYWE1ZDAtYTUw
Yy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTkvMC9GMTUwNTExMzVGNjZGMUZGNjc0
QUQ5QTZGNUFDQUI2NURDNUVGRjlGLmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2Ji
YWE1ZDAtYTUwYy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTcvMC8zMTM5MzgyZTMz
MzcyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQExiVgMA0GCSqGSIb3DQEBCwUAA4IBAQCpW4vAuyLQBg3c6Rjh66Df91GW
uIdfnalOf9h0dYkbqwEHqemi/reWjKT6oxkstMDu/j8c5zgTDblj9RUWhO9pdUGf
3TtVmkKHY9LSa2NGpxvbdv5g/ZCVVjViyoI1i+tZnIA0L9PPieTGAiKmh+QxQw7B
dbUBMTDIbWhPeCKh4o5s7NNSdjNYy4ZsAr6vcHL6DzgF3FbAR6UmLhY44R/Wgafy
ceRCQEDTe6oEqONDTAzkyebtRp53uuWXZK8kA8JqB7sKegUybSdPx3d5Agg0+bxw
ossYMsoL77nTPL3Q06kgGy3iZyiZoGIX+zdG9khvGuxc7vAPIY65cxNFEo++
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org