Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231302e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          PbYTV4VAwm5mKMHGfHIku3mlIQBAuqoSkEq+tgBM/3o=
Subject key identifier:   92:B7:20:D4:6C:A7:9C:C7:74:D1:ED:4E:3F:DB:CB:82:C0:AE:6A:A3
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       6E4C1570314602E3B22587F806703B8FAB593FCC
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231302e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:14 +0000
ROA not before:           Mon 25 Oct 2021 08:27:14 +0000
ROA not after:            Mon 24 Oct 2022 08:32:14 +0000
asID:                     61317
IP address blocks:        181.41.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4c:15:70:31:46:02:e3:b2:25:87:f8:06:70:3b:8f:ab:59:3f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:14 2021 GMT
            Not After : Oct 24 08:32:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:5d:29:4c:49:a5:21:2b:b9:4f:41:36:b2:
                    7b:0b:07:b5:da:3c:94:ac:58:d4:e8:fe:9b:84:75:
                    2e:ff:7a:2a:31:8e:24:b7:4a:dd:6c:0e:86:5c:62:
                    44:38:80:aa:71:33:9d:2e:97:ba:70:9b:1c:52:60:
                    5f:12:97:9d:b6:df:a3:27:f6:6d:c0:5f:91:8a:63:
                    6d:50:9a:54:28:1f:1c:0d:3a:b1:70:a2:08:3e:f6:
                    1e:6e:b7:9b:1f:75:92:11:35:61:86:0f:c9:34:84:
                    52:b1:3e:1c:9f:42:22:d6:3c:a5:ff:8a:96:c0:43:
                    c3:58:fd:7f:9a:cd:ba:d3:41:64:ca:66:e8:33:fd:
                    f6:a1:d2:40:12:d6:5b:82:82:6f:b0:93:5b:7d:13:
                    40:b0:1c:5c:40:df:f9:96:a4:92:32:a2:17:da:fd:
                    c7:86:45:8d:26:f3:0f:ed:e8:28:9a:4d:f7:23:a1:
                    31:9b:99:6e:a5:59:81:58:8a:b3:0e:86:6d:2c:1f:
                    31:00:59:22:9a:5e:1e:93:dc:03:db:ed:cd:2b:1c:
                    e5:be:65:96:0a:bc:74:f3:72:bd:0c:fc:15:e8:ac:
                    b1:12:cc:dd:72:02:71:f3:55:bb:81:0d:2b:8a:d6:
                    86:c2:4c:70:63:32:bc:75:40:bb:6b:ea:6c:1f:91:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B7:20:D4:6C:A7:9C:C7:74:D1:ED:4E:3F:DB:CB:82:C0:AE:6A:A3
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:14:e0:a0:ca:96:cd:66:c0:03:ad:02:2c:4d:8a:d7:ec:
         19:40:74:99:ed:0e:08:55:aa:e4:5f:63:eb:eb:3b:83:9b:cf:
         93:be:6c:33:98:0a:a3:8e:67:2d:44:53:ca:04:0a:a4:14:c5:
         ca:6e:0c:b5:40:36:37:b6:f2:b6:26:63:a3:d8:57:9b:64:34:
         15:77:59:88:57:e2:88:b7:5f:e8:72:40:77:07:34:eb:f5:21:
         a3:13:d7:67:14:0d:10:3c:ea:6f:eb:4e:42:81:3e:d9:ae:db:
         6a:46:d6:0d:38:6c:dc:6b:19:2e:89:16:98:26:05:1c:aa:ab:
         99:15:a0:3a:9f:4b:5f:1b:b2:2e:fb:d9:04:ca:2a:2c:fb:4a:
         aa:24:05:79:41:61:aa:e0:57:0e:97:ee:d6:44:1d:c0:59:bc:
         d4:4a:24:97:00:35:cf:41:2e:9b:0c:71:e3:cc:72:be:a4:18:
         66:46:13:cc:a3:4d:72:37:82:6f:3e:9f:19:2a:44:ba:ed:d8:
         4a:be:21:b8:3f:df:12:9e:db:73:88:f4:ea:a3:ab:6e:eb:a2:
         f3:72:2a:84:9d:28:ab:f2:f7:7b:82:2a:ba:03:98:5c:e9:d0:
         ce:2a:b3:a4:f5:04:7a:c6:58:3b:55:84:78:ef:fe:36:b5:b5:
         db:84:a3:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org