Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          mCwOZey4Zt7VSKIHTH31/wPMFgyXE9vpw4wV7hU3I8Q=
Subject key identifier:   3C:E7:2F:61:DC:38:06:98:E4:7E:42:A6:82:A4:C0:F6:97:CA:5C:A2
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       2666077D932465E4BF2612D6E5840B328D131DD5
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:03 +0000
ROA not before:           Mon 25 Oct 2021 08:27:03 +0000
ROA not after:            Mon 24 Oct 2022 08:32:03 +0000
asID:                     61317
IP address blocks:        181.41.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:66:07:7d:93:24:65:e4:bf:26:12:d6:e5:84:0b:32:8d:13:1d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:03 2021 GMT
            Not After : Oct 24 08:32:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:3c:1e:bd:fa:d0:50:c3:1e:7a:f8:4f:f2:
                    be:d1:b6:05:65:2c:f6:3f:fe:6b:b4:30:a6:f8:08:
                    cb:e9:ee:d9:fa:73:ac:ab:1d:be:5e:92:a3:f1:13:
                    28:1e:4a:a5:e0:a4:87:ca:0d:09:4e:df:b3:cd:db:
                    b7:6b:00:d5:a6:e1:04:bc:60:40:6c:37:15:5b:b2:
                    97:0c:5c:32:72:23:26:05:17:f8:6f:d7:54:d6:60:
                    a6:87:72:cb:72:61:a3:1b:6d:be:09:5d:29:75:2d:
                    8d:84:e8:cd:5b:f9:f4:da:79:c3:c1:0a:87:7c:d9:
                    d5:ed:d0:8d:12:fd:62:fe:19:f7:88:c6:5d:16:63:
                    2b:93:f0:49:d4:0b:e2:bd:2e:62:5c:f2:71:22:bc:
                    fa:89:31:07:2c:bb:4d:6d:05:3a:db:dd:a0:37:69:
                    bb:8d:44:f1:c2:ba:02:f8:4b:e0:b1:73:58:35:b2:
                    9d:9c:94:33:31:eb:9b:40:dc:26:08:9b:ff:fc:0b:
                    bb:24:89:1b:6c:cd:4e:00:e6:18:0f:42:5e:68:cd:
                    d9:87:02:ec:3c:aa:26:f7:da:74:d2:9b:84:2c:25:
                    90:d9:0e:e1:d3:03:ea:76:3f:24:d4:bd:06:a1:d5:
                    53:83:fb:1a:1f:17:49:d0:ce:77:42:c5:d6:ab:af:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:2F:61:DC:38:06:98:E4:7E:42:A6:82:A4:C0:F6:97:CA:5C:A2
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:bc:f5:5f:c4:f3:07:25:10:75:30:dd:98:87:ce:d6:2d:
         b8:0b:41:5c:fa:23:a9:60:2a:3c:f0:ec:64:7d:d9:cb:bb:16:
         8a:ee:e5:1d:b1:8f:9b:32:28:d1:25:02:d3:3f:84:b8:2e:a8:
         61:2e:8f:bd:50:5f:a3:f0:cd:6f:dd:c0:84:b2:19:f6:78:61:
         2c:c2:3c:01:0a:90:9f:e2:e5:68:8c:29:5e:55:a3:2a:3f:07:
         93:8a:ef:a5:6f:e2:5d:84:c7:81:42:ea:5f:c3:29:6c:8c:b1:
         44:ac:99:ec:c2:0c:ec:0f:3a:23:c0:82:cf:43:9c:66:53:5f:
         42:eb:7f:08:67:40:ac:cf:5e:82:7a:85:35:0e:16:38:b1:f7:
         78:63:cd:b3:f8:0d:f7:10:16:8d:c4:07:d9:d1:81:1e:f2:87:
         f3:c9:55:c3:1a:4c:f4:45:85:f2:50:80:0d:31:99:60:41:64:
         67:a8:8c:e6:b8:8f:ee:1e:07:0e:bb:db:00:8f:d4:11:e9:bf:
         11:63:17:a4:89:a6:71:09:43:42:90:00:16:96:a6:6d:6f:70:
         cc:31:8d:23:b9:d2:72:a1:7c:96:71:a8:2d:d5:17:d9:79:5d:
         76:b0:85:8e:76:4c:77:b8:d6:86:c4:28:88:1d:4c:71:96:90:
         d4:16:1a:c5
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUJmYHfZMkZeS/JhLW5YQLMo0THdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0MjJCMUE5
QkFGMDZDNjAeFw0yMTEwMjUwODI3MDNaFw0yMjEwMjQwODMyMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDdGQjNDMUVCREZBRDA1MEMz
MUU3QUY4NEZGMkJFRDFCNjA1NjUyQ0Y2M0ZGRTZCQjQzMEE2RjgwOENCRTlFRUQ5
RkE3M0FDQUIxREJFNUU5MkEzRjExMzI4MUU0QUE1RTBBNDg3Q0EwRDA5NEVERkIz
Q0REQkI3NkIwMEQ1QTZFMTA0QkM2MDQwNkMzNzE1NUJCMjk3MEM1QzMyNzIyMzI2
MDUxN0Y4NkZENzU0RDY2MEE2ODc3MkNCNzI2MUEzMUI2REJFMDk1RDI5NzUyRDhE
ODRFOENENUJGOUY0REE3OUMzQzEwQTg3N0NEOUQ1RUREMDhEMTJGRDYyRkUxOUY3
ODhDNjVEMTY2MzJCOTNGMDQ5RDQwQkUyQkQyRTYyNUNGMjcxMjJCQ0ZBODkzMTA3
MkNCQjRENkQwNTNBREJEREEwMzc2OUJCOEQ0NEYxQzJCQTAyRjg0QkUwQjE3MzU4
MzVCMjlEOUM5NDMzMzFFQjlCNDBEQzI2MDg5QkZGRkMwQkJCMjQ4OTFCNkNDRDRF
MDBFNjE4MEY0MjVFNjhDREQ5ODcwMkVDM0NBQTI2RjdEQTc0RDI5Qjg0MkMyNTkw
RDkwRUUxRDMwM0VBNzYzRjI0RDRCRDA2QTFENTUzODNGQjFBMUYxNzQ5RDBDRTc3
NDJDNUQ2QUJBRjMxOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1/s8Hr360FDDHnr4T/K+0bYFZSz2P/5rtDCm+AjL6e7Z+nOsqx2+
XpKj8RMoHkql4KSHyg0JTt+zzdu3awDVpuEEvGBAbDcVW7KXDFwyciMmBRf4b9dU
1mCmh3LLcmGjG22+CV0pdS2NhOjNW/n02nnDwQqHfNnV7dCNEv1i/hn3iMZdFmMr
k/BJ1AvivS5iXPJxIrz6iTEHLLtNbQU6292gN2m7jUTxwroC+EvgsXNYNbKdnJQz
MeubQNwmCJv//Au7JIkbbM1OAOYYD0JeaM3ZhwLsPKom99p00puELCWQ2Q7h0wPq
dj8k1L0GodVTg/saHxdJ0M53QsXWq68xjwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FDznL2HcOAaY5H5CpoKkwPaXylyiMB8GA1UdIwQYMBaAFHgc0qnZ1XLrRQEiqERC
KxqbrwbGMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzEvNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0
MjJCMUE5QkFGMDZDNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMS83ODFDRDJBOUQ5RDU3MkVCNDUw
MTIyQTg0NDQyMkIxQTlCQUYwNkM2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMS8zMTM4MzEyZTM0
MzEyZTMyMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KcswDQYJKoZIhvcNAQELBQADggEBAEVevPVfxPMHJRB1MN2Yh87W
LbgLQVz6I6lgKjzw7GR92cu7Foru5R2xj5syKNElAtM/hLguqGEuj71QX6PwzW/d
wISyGfZ4YSzCPAEKkJ/i5WiMKV5Voyo/B5OK76Vv4l2Ex4FC6l/DKWyMsUSsmezC
DOwPOiPAgs9DnGZTX0LrfwhnQKzPXoJ6hTUOFjix93hjzbP4DfcQFo3EB9nRgR7y
h/PJVcMaTPRFhfJQgA0xmWBBZGeojOa4j+4eBw672wCP1BHpvxFjF6SJpnEJQ0KQ
ABaWpm1vcMwxjSO50nKhfJZxqC3VF9l5XXawhY52THe41obEKIgdTHGWkNQWGsU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org