Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          7/9FdmYBa9fmCETwl0yk68/vCl2teMTSp8T9l31MF4A=
Subject key identifier:   68:8A:5A:80:67:31:31:0B:E1:1C:E6:EB:48:DC:D6:3A:CB:F8:5E:3F
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       37BBCA5CEBED61F01CA12FD9CAC0671CA2F58BB0
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:31:56 +0000
ROA not before:           Mon 25 Oct 2021 08:26:56 +0000
ROA not after:            Mon 24 Oct 2022 08:31:56 +0000
asID:                     61317
IP address blocks:        181.41.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bb:ca:5c:eb:ed:61:f0:1c:a1:2f:d9:ca:c0:67:1c:a2:f5:8b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:56 2021 GMT
            Not After : Oct 24 08:31:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:62:90:d8:75:33:a9:3f:9d:3a:fe:37:67:
                    a8:94:ea:bd:9b:ff:14:59:9d:46:51:4c:6c:fb:98:
                    50:c4:62:16:28:c1:4c:4a:dc:98:e6:ae:ca:c9:0b:
                    19:0e:90:39:4d:74:1a:c4:05:62:6d:d3:0f:e8:30:
                    36:b4:50:05:59:1b:ae:78:43:09:69:44:3d:28:a5:
                    12:59:86:8a:15:d3:3b:e8:8d:b6:b0:f1:f5:53:db:
                    d3:00:1a:87:18:95:ef:0a:06:af:4a:ac:ae:b0:be:
                    1b:b5:27:c0:75:fc:a4:70:da:30:5b:87:14:eb:b2:
                    60:5c:ea:f7:03:5e:a5:99:c9:a4:26:e4:a3:0a:68:
                    58:75:6e:73:37:b1:04:f3:c3:5e:25:64:a5:31:f1:
                    d9:ed:3d:76:f4:ae:da:f8:8e:e4:f0:3d:4f:5a:f0:
                    db:d2:8c:ef:31:23:c6:2c:e4:f5:50:b7:7e:5f:f5:
                    eb:aa:21:f1:cb:d6:93:3e:45:c1:f0:d0:f5:8d:58:
                    4d:95:97:ac:ba:f7:5e:bb:d6:50:e0:ef:33:91:d2:
                    ba:41:c6:e4:a0:83:75:6c:1b:aa:54:fc:91:ba:26:
                    21:e3:e9:82:36:0b:dc:89:0f:9f:22:68:ea:3e:52:
                    a4:6d:3d:55:03:cd:07:e0:5d:56:5c:2b:3e:fe:18:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8A:5A:80:67:31:31:0B:E1:1C:E6:EB:48:DC:D6:3A:CB:F8:5E:3F
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:8a:60:63:7f:3f:de:ef:6b:2a:ae:6f:6e:ce:10:dd:12:
         56:95:9b:96:f3:df:72:17:19:03:69:c6:41:b2:97:4f:35:dc:
         8a:70:65:1e:9e:93:32:c5:b4:b5:9d:8b:4a:a5:a7:c2:af:0d:
         50:73:0b:d3:c9:4e:7f:03:42:37:28:b5:95:4b:74:37:82:a0:
         04:8b:5a:1a:3c:b2:ba:49:30:48:30:95:85:b4:31:af:6e:7e:
         4b:6c:e6:96:23:99:6e:86:6e:64:17:78:10:7c:d4:24:d7:ed:
         8f:2f:b6:00:6b:84:aa:4c:f8:95:12:c3:8e:25:9d:e6:17:a4:
         9d:65:f4:dc:a7:bf:54:e3:3c:ab:9c:69:a4:a5:e5:87:bb:1d:
         b4:a3:15:29:b7:00:61:47:49:f5:cb:06:dc:2c:7c:1a:73:46:
         ee:b2:05:4b:22:d3:44:2c:96:40:b4:20:10:49:6a:65:1a:ad:
         60:4a:88:0d:34:78:0c:8c:dc:d0:3d:e2:c8:56:d5:ea:58:8e:
         fc:03:4f:7f:da:28:7c:3b:c8:b9:c7:85:a4:29:65:5e:76:8d:
         48:29:d8:8a:23:12:1e:13:4d:ff:1f:11:b1:0c:c8:1a:8d:f5:
         2e:9f:ad:ad:32:11:1c:c6:08:e9:41:bd:f1:f8:a7:95:43:bc:
         2b:a6:8a:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org