Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230322e302f32342d3234203d3e203433323630.roa
File:                     3138312e34312e3230322e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          seNUe6hNgh8t7MNsS/3VvsyO7f7fevquzp0I76SaWqw=
Subject key identifier:   96:E0:D3:E3:58:5C:2F:BE:B0:28:76:5F:49:25:24:DC:BB:BE:DD:B7
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       2D3EEF07A14C29BADE281880246F0892B97B83EB
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230322e302f32342d3234203d3e203433323630.roa
Signing time:             Tue 01 Feb 2022 22:04:15 +0000
ROA not before:           Tue 01 Feb 2022 21:59:15 +0000
ROA not after:            Tue 31 Jan 2023 22:04:15 +0000
asID:                     43260
IP address blocks:        181.41.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3e:ef:07:a1:4c:29:ba:de:28:18:80:24:6f:08:92:b9:7b:83:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Feb  1 21:59:15 2022 GMT
            Not After : Jan 31 22:04:15 2023 GMT
        Subject: CN=3082010A0282010100AABEE70B778941528F2F2941BACE9F67AE34C33E2739D225259E62F58D106A036BBE298BB7F441F93F8E063119D386FC5D0EA692A9B43FF37AD322E5275280ADC1ED81079ABCAD1F608EEB8FECC681B91C61D59A0D71348E163BB7906285C44911FA9823301B5808C3686D0B15C9FCCA890694E010A966E154C27EE31236006721E500375F0535A1D433009B08F790F5C1C14B6AC49033A394BD5953598DC062AF01EE559DC2EB5860B7FA51D13435C01FE344A8A799688D4851C20A8725B2092845330B2B4F2250E16CC61343B1710CE299EDC02D06DBE0B8946A4992A79C9A7D3EC2E8425E721EFADB05745ADA814909E783B2AD7F947D1F8E3654EB2DC20D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:e7:0b:77:89:41:52:8f:2f:29:41:ba:ce:
                    9f:67:ae:34:c3:3e:27:39:d2:25:25:9e:62:f5:8d:
                    10:6a:03:6b:be:29:8b:b7:f4:41:f9:3f:8e:06:31:
                    19:d3:86:fc:5d:0e:a6:92:a9:b4:3f:f3:7a:d3:22:
                    e5:27:52:80:ad:c1:ed:81:07:9a:bc:ad:1f:60:8e:
                    eb:8f:ec:c6:81:b9:1c:61:d5:9a:0d:71:34:8e:16:
                    3b:b7:90:62:85:c4:49:11:fa:98:23:30:1b:58:08:
                    c3:68:6d:0b:15:c9:fc:ca:89:06:94:e0:10:a9:66:
                    e1:54:c2:7e:e3:12:36:00:67:21:e5:00:37:5f:05:
                    35:a1:d4:33:00:9b:08:f7:90:f5:c1:c1:4b:6a:c4:
                    90:33:a3:94:bd:59:53:59:8d:c0:62:af:01:ee:55:
                    9d:c2:eb:58:60:b7:fa:51:d1:34:35:c0:1f:e3:44:
                    a8:a7:99:68:8d:48:51:c2:0a:87:25:b2:09:28:45:
                    33:0b:2b:4f:22:50:e1:6c:c6:13:43:b1:71:0c:e2:
                    99:ed:c0:2d:06:db:e0:b8:94:6a:49:92:a7:9c:9a:
                    7d:3e:c2:e8:42:5e:72:1e:fa:db:05:74:5a:da:81:
                    49:09:e7:83:b2:ad:7f:94:7d:1f:8e:36:54:eb:2d:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E0:D3:E3:58:5C:2F:BE:B0:28:76:5F:49:25:24:DC:BB:BE:DD:B7
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230322e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:1f:fb:42:8f:37:60:2a:e8:9b:48:88:c3:91:de:28:6f:
         db:b7:d8:73:05:b7:97:46:93:11:cb:f2:2d:03:67:8a:c6:d5:
         88:a0:9d:22:11:ec:40:db:e3:8b:a5:26:97:d1:2a:58:78:c8:
         7d:e7:0a:7f:5f:ef:af:c0:cb:8a:e1:0a:4e:05:eb:18:49:7b:
         2e:fe:22:32:df:3e:11:fb:5d:53:d4:63:bd:87:3e:a3:cc:14:
         7b:3b:3c:ec:58:23:ed:2b:9d:e7:e8:aa:e9:79:07:79:cc:97:
         36:1d:8a:81:a2:31:7a:8a:a5:16:16:39:e9:dd:02:82:09:8a:
         6d:09:24:b2:18:b4:d8:8b:29:f2:f5:8d:1b:6f:23:5a:68:ec:
         d4:92:b9:d2:18:61:cd:79:54:0d:d2:88:8d:38:3a:70:39:5a:
         a2:83:3a:c6:e5:6a:de:1c:6d:a7:03:1d:2d:50:82:90:94:42:
         40:8b:09:48:a6:8d:a1:e8:53:bd:f2:3b:3f:3c:a4:2c:5c:96:
         da:0e:79:cf:a9:5d:40:1e:70:4f:f5:d0:1e:83:2f:e7:41:37:
         9d:fd:93:9f:68:e4:27:45:06:e7:22:26:fc:b7:b3:70:6b:93:
         60:08:64:a2:0e:42:51:71:71:be:48:8c:e8:39:d3:10:12:1b:
         61:d4:05:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org