Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa
File:                     3138312e34312e3230352e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier:          SqdlyOLZiPGfxCpGF858sT5yl53tSUfQek9uH1FBipA=
Subject key identifier:   8B:90:A9:04:74:38:71:EB:AC:AE:0E:1E:F6:F3:79:E7:80:DF:B2:D2
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       17E93058E56A06BBE3336895B270FFB66FB48FC3
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa
Signing time:             Mon 25 Oct 2021 08:31:04 +0000
ROA not before:           Mon 25 Oct 2021 08:26:04 +0000
ROA not after:            Mon 24 Oct 2022 08:31:04 +0000
asID:                     29066
IP address blocks:        181.41.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e9:30:58:e5:6a:06:bb:e3:33:68:95:b2:70:ff:b6:6f:b4:8f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:04 2021 GMT
            Not After : Oct 24 08:31:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:9c:8f:f5:f6:4c:7a:74:35:b3:58:9d:a5:
                    13:1e:0e:82:d7:ba:71:59:bc:97:61:11:0b:f5:64:
                    55:1a:e2:aa:0a:d2:1d:f7:e6:6d:1e:2c:db:09:b3:
                    44:e7:1b:9e:0d:5f:8e:ef:da:02:8a:99:0d:ba:9d:
                    ed:64:8f:3f:8f:c8:21:9a:cf:06:14:d9:cf:bb:76:
                    9d:c2:15:e0:da:52:38:5b:e5:93:cc:26:3b:9b:48:
                    f1:6b:a3:5f:3e:b5:5b:0b:0b:00:24:80:c2:57:06:
                    e5:fe:6b:b9:11:4b:cf:6a:7e:26:9d:80:ef:43:b3:
                    a2:dd:df:0a:d7:3d:f5:29:54:d8:b5:67:85:28:c0:
                    8d:aa:e5:23:60:1c:88:09:6c:0c:44:ca:67:8b:94:
                    92:56:3a:09:cd:00:8e:c8:b9:5e:5f:79:21:a9:8b:
                    54:7d:cb:9c:36:41:e9:8f:c7:c7:4c:e9:42:d6:13:
                    10:23:fc:36:be:c2:d3:a7:28:06:28:e6:1d:9e:00:
                    4e:e0:f1:79:89:f2:2b:54:72:67:d2:b2:eb:88:71:
                    48:00:05:1e:12:cb:bd:06:3d:1e:22:e2:fa:06:e7:
                    74:e6:7c:54:50:5e:e1:89:d7:94:60:bd:1e:0f:fe:
                    3a:7b:1e:1d:92:57:fc:16:e9:86:17:2d:24:f3:d5:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:A9:04:74:38:71:EB:AC:AE:0E:1E:F6:F3:79:E7:80:DF:B2:D2
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:23:73:da:7b:e0:bf:22:b5:59:30:54:14:47:8f:ab:48:fe:
         1e:2f:47:c9:cf:20:5c:9a:19:9a:6a:a5:43:67:c7:2a:31:c9:
         bf:a0:9a:fc:77:1f:ab:ba:59:75:bc:30:ec:58:6f:7e:4a:cd:
         1b:ad:91:67:3a:ba:48:18:f0:b7:e1:27:07:f2:fd:52:34:48:
         6d:f0:82:0a:f6:16:ab:ee:47:86:74:b4:21:b1:a4:0f:0f:bb:
         4b:e1:0e:53:0f:98:f2:46:65:24:70:8f:fc:d8:06:57:93:8e:
         4d:df:85:d5:fb:c9:f5:8a:0a:f6:df:51:57:55:8e:71:c0:d1:
         80:27:b2:82:60:d9:10:ce:92:ca:a3:d6:4a:69:6c:a2:2a:4e:
         f9:aa:ba:cd:80:ba:12:28:21:57:46:ab:ef:69:66:c3:6b:d3:
         0f:b9:92:c1:c8:76:91:68:20:cd:a1:6f:27:94:8c:ae:c6:9a:
         08:9c:c8:0c:7f:14:d7:8f:ef:eb:08:11:c5:90:e3:ce:4a:d9:
         26:fc:8d:85:33:a5:73:2d:87:2e:b3:72:07:88:f0:23:6b:f6:
         5c:88:81:e5:a4:84:4d:ce:64:35:2a:ed:7a:6b:f5:da:c1:e3:
         7c:e8:88:14:24:51:74:43:69:98:f1:47:fc:ea:4e:5a:cd:b2:
         04:95:4d:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org