Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230322e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          aw5/JEjQXcx7OJvjRqg20dJzpMvA7ZrBgasgblzYa4o=
Subject key identifier:   E3:EE:57:3C:40:FB:ED:A4:D2:E6:ED:29:39:42:51:7A:33:57:83:45
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       2A9EBCD7EAF9CFE06A61F39712ADB0FD48FAF13F
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230322e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:01 +0000
ROA not before:           Mon 25 Oct 2021 08:27:01 +0000
ROA not after:            Mon 24 Oct 2022 08:32:01 +0000
asID:                     61317
IP address blocks:        181.41.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:bc:d7:ea:f9:cf:e0:6a:61:f3:97:12:ad:b0:fd:48:fa:f1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:01 2021 GMT
            Not After : Oct 24 08:32:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:10:44:11:d9:e6:2b:6a:35:a9:9e:0e:89:
                    22:c1:f2:72:5b:14:a1:26:aa:66:a8:61:1a:30:b4:
                    7f:5b:1c:d5:9f:c9:c5:fd:79:8e:66:e3:89:f4:d2:
                    cd:0e:49:a0:21:27:e0:65:b8:87:61:43:59:0f:38:
                    7a:88:a8:42:71:b3:86:c4:13:4e:d6:d9:2e:5f:23:
                    1e:2b:62:bb:f5:1c:c7:a0:fd:a4:31:cc:33:a5:4a:
                    24:2f:60:78:d7:05:5a:89:b5:d5:1c:9b:80:8b:6e:
                    c8:02:0d:c2:d1:af:51:35:67:20:f2:29:fa:f9:ac:
                    32:ea:7a:73:0e:18:b8:e4:f1:c4:54:c1:6b:a1:31:
                    6d:61:a8:d5:3e:e5:b8:af:f4:b8:39:91:bd:7e:0c:
                    20:55:2b:6e:0d:00:7e:88:46:b7:0d:6c:10:8e:ce:
                    6c:26:e9:cb:37:95:e0:90:2a:6b:4a:53:68:fd:bd:
                    ea:6e:f1:13:f1:73:1e:8b:10:22:70:56:ee:8b:89:
                    32:e3:71:73:7e:52:6f:fb:b2:10:4d:5e:ab:26:82:
                    d9:72:2a:4e:14:73:0e:10:34:60:b3:09:6a:f9:6b:
                    12:a5:85:70:d1:7a:39:81:ce:e3:44:a2:31:4f:e7:
                    a8:a3:98:0a:63:60:ac:17:0e:b8:ad:b9:18:e3:a9:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:57:3C:40:FB:ED:A4:D2:E6:ED:29:39:42:51:7A:33:57:83:45
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7f:38:05:45:b2:92:b1:00:ab:61:69:d4:61:09:fc:ed:63:
         33:d2:9e:7f:7b:b0:6c:62:76:1a:1c:6b:9c:a0:57:97:b5:2c:
         fa:66:d0:a1:38:2f:f6:cd:61:33:c0:95:28:88:16:74:ad:b3:
         cc:43:87:7f:3e:2c:82:ff:7b:11:81:e8:c7:b7:98:f5:5b:36:
         88:fe:4d:37:8a:b0:5f:52:96:e6:88:af:84:f6:9a:39:01:f2:
         98:86:4b:b7:91:4e:12:eb:a0:9e:25:fc:6b:56:7a:6a:db:17:
         45:5d:c4:b1:c2:d6:6b:6f:8d:c4:7a:1f:0f:06:b5:b9:8b:02:
         c7:51:85:b5:7c:40:43:ae:6e:a4:5c:64:c4:5a:3b:af:f1:e0:
         0f:52:2c:b4:11:50:2b:06:44:0f:71:bf:c5:93:fb:06:e6:65:
         dd:63:3f:97:da:54:c2:55:08:70:0d:09:ff:ec:8c:8a:59:54:
         35:d8:c2:70:21:0c:0e:b8:55:df:37:ba:08:a9:f4:c0:14:db:
         d3:d7:cf:3e:37:42:60:87:2b:a4:b2:80:8a:b2:63:8c:46:c7:
         a7:18:56:fc:b3:fc:bf:82:83:7a:a7:cd:0f:4b:aa:c1:92:96:
         e9:48:d9:e6:2b:0c:11:0e:ca:63:f6:26:db:4f:3c:4c:e1:4e:
         49:1d:cc:4f
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUKp681+r5z+BqYfOXEq2w/Uj68T8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0MjJCMUE5
QkFGMDZDNjAeFw0yMTEwMjUwODI3MDFaFw0yMjEwMjQwODMyMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNBQTEwNDQxMUQ5RTYyQjZB
MzVBOTlFMEU4OTIyQzFGMjcyNUIxNEExMjZBQTY2QTg2MTFBMzBCNDdGNUIxQ0Q1
OUZDOUM1RkQ3OThFNjZFMzg5RjREMkNEMEU0OUEwMjEyN0UwNjVCODg3NjE0MzU5
MEYzODdBODhBODQyNzFCMzg2QzQxMzRFRDZEOTJFNUYyMzFFMkI2MkJCRjUxQ0M3
QTBGREE0MzFDQzMzQTU0QTI0MkY2MDc4RDcwNTVBODlCNUQ1MUM5QjgwOEI2RUM4
MDIwREMyRDFBRjUxMzU2NzIwRjIyOUZBRjlBQzMyRUE3QTczMEUxOEI4RTRGMUM0
NTRDMTZCQTEzMTZENjFBOEQ1M0VFNUI4QUZGNEI4Mzk5MUJEN0UwQzIwNTUyQjZF
MEQwMDdFODg0NkI3MEQ2QzEwOEVDRTZDMjZFOUNCMzc5NUUwOTAyQTZCNEE1MzY4
RkRCREVBNkVGMTEzRjE3MzFFOEIxMDIyNzA1NkVFOEI4OTMyRTM3MTczN0U1MjZG
RkJCMjEwNEQ1RUFCMjY4MkQ5NzIyQTRFMTQ3MzBFMTAzNDYwQjMwOTZBRjk2QjEy
QTU4NTcwRDE3QTM5ODFDRUUzNDRBMjMxNEZFN0E4QTM5ODBBNjM2MEFDMTcwRUI4
QURCOTE4RTNBOTEyODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw6oQRBHZ5itqNameDokiwfJyWxShJqpmqGEaMLR/WxzVn8nF/XmO
ZuOJ9NLNDkmgISfgZbiHYUNZDzh6iKhCcbOGxBNO1tkuXyMeK2K79RzHoP2kMcwz
pUokL2B41wVaibXVHJuAi27IAg3C0a9RNWcg8in6+awy6npzDhi45PHEVMFroTFt
YajVPuW4r/S4OZG9fgwgVStuDQB+iEa3DWwQjs5sJunLN5XgkCprSlNo/b3qbvET
8XMeixAicFbui4ky43FzflJv+7IQTV6rJoLZcipOFHMOEDRgswlq+WsSpYVw0Xo5
gc7jRKIxT+eoo5gKY2CsFw64rbkY46kSgwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FOPuVzxA++2k0ubtKTlCUXozV4NFMB8GA1UdIwQYMBaAFHgc0qnZ1XLrRQEiqERC
KxqbrwbGMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzEvNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0
MjJCMUE5QkFGMDZDNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMS83ODFDRDJBOUQ5RDU3MkVCNDUw
MTIyQTg0NDQyMkIxQTlCQUYwNkM2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMS8zMTM4MzEyZTM0
MzEyZTMyMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KcowDQYJKoZIhvcNAQELBQADggEBAKx/OAVFspKxAKthadRhCfzt
YzPSnn97sGxidhoca5ygV5e1LPpm0KE4L/bNYTPAlSiIFnSts8xDh38+LIL/exGB
6Me3mPVbNoj+TTeKsF9SluaIr4T2mjkB8piGS7eRThLroJ4l/GtWemrbF0VdxLHC
1mtvjcR6Hw8GtbmLAsdRhbV8QEOubqRcZMRaO6/x4A9SLLQRUCsGRA9xv8WT+wbm
Zd1jP5faVMJVCHANCf/sjIpZVDXYwnAhDA64Vd83ugip9MAU29PXzz43QmCHK6Sy
gIqyY4xGx6cYVvyz/L+Cg3qnzQ9LqsGSlulI2eYrDBEOymP2JttPPEzhTkkdzE8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org