Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231312e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          z0rSmLC1WSP1MePuqMOgB3cmyEf7AAvFV7jDX0kOgWw=
Subject key identifier:   20:24:AF:E6:32:FC:11:F1:8F:DC:27:CC:73:75:6C:3A:08:00:72:3D
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       19A8859C6C6E82A48EF5D40951A77775E0A831E2
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231312e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:17 +0000
ROA not before:           Mon 25 Oct 2021 08:27:17 +0000
ROA not after:            Mon 24 Oct 2022 08:32:17 +0000
asID:                     61317
IP address blocks:        181.41.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a8:85:9c:6c:6e:82:a4:8e:f5:d4:09:51:a7:77:75:e0:a8:31:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:17 2021 GMT
            Not After : Oct 24 08:32:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:78:b3:56:89:d6:15:97:1b:bb:b2:dd:d6:91:
                    96:73:fd:4d:d2:70:60:01:87:5a:1f:ee:33:77:bb:
                    10:eb:cf:34:4c:f8:4d:28:d6:56:93:76:da:ec:7c:
                    fc:d6:52:b4:e8:da:14:69:3d:cc:62:40:03:57:66:
                    54:4b:67:e7:12:3c:58:64:3d:90:9c:37:88:39:8b:
                    fd:70:77:89:d9:85:3b:01:22:02:c4:0a:6b:e3:0c:
                    bb:a1:30:0f:c1:1f:44:7a:0a:09:17:aa:61:0d:5e:
                    24:a9:14:89:80:08:ce:27:35:96:68:3c:c8:fa:1d:
                    2a:ff:ff:49:b5:a2:ce:52:29:18:6c:aa:b3:05:f2:
                    8a:2c:65:07:36:db:62:90:a2:41:d4:19:db:43:e9:
                    2a:4e:35:26:0c:5d:47:95:c1:08:b2:16:6f:71:26:
                    cd:fa:4d:ef:71:9e:40:41:7f:b4:68:27:c1:0c:af:
                    5f:12:11:70:22:15:54:98:76:b8:ba:a0:db:63:e9:
                    68:bd:95:08:1f:f1:35:cd:4e:cf:5a:80:5c:ce:04:
                    22:ab:5f:8a:c4:32:d5:37:bd:7a:05:3a:bb:88:38:
                    96:53:97:ae:ce:be:d2:d5:a2:0b:25:bc:37:a1:df:
                    db:7b:f8:f4:0b:90:37:0a:c9:35:fe:12:2f:65:58:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:AF:E6:32:FC:11:F1:8F:DC:27:CC:73:75:6C:3A:08:00:72:3D
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:46:7f:71:22:5b:9d:4a:93:46:4d:08:95:2f:05:68:a1:
         4c:74:78:4c:ec:a9:bc:1f:9e:11:63:04:7b:1d:51:9b:f2:11:
         1d:ac:b7:e8:13:9c:7d:3d:5c:0e:5e:ef:41:ee:21:09:06:6e:
         a3:e0:90:e0:46:9d:43:69:eb:cd:81:04:0f:45:d0:09:9b:25:
         47:c9:16:31:96:48:be:39:6a:4f:05:ed:18:38:64:db:6a:08:
         1f:81:68:96:80:b7:02:2b:96:2a:d2:80:e5:68:c9:31:c7:64:
         16:f1:27:9e:54:3b:76:70:ab:87:cd:8b:dc:11:6a:09:57:a3:
         00:a2:ad:f6:25:ce:f3:51:80:fc:67:3c:7f:51:d0:5a:78:81:
         07:76:47:c6:17:02:63:48:0c:72:a8:cc:ba:e9:8c:71:e4:cc:
         39:42:b3:67:c0:5b:32:51:0e:7c:a4:4f:8a:4c:b6:64:12:f6:
         14:9b:9c:43:46:90:29:35:26:ca:75:73:c7:1a:1b:51:3e:e2:
         50:87:22:d1:f2:a3:e1:d8:f4:45:ca:a9:83:e8:22:8c:0e:53:
         e2:2a:00:e3:ef:cb:1a:df:46:7b:dd:4b:df:86:a9:af:53:84:
         c6:03:af:43:56:72:f9:61:16:a2:bf:b9:10:9f:6f:e8:02:41:
         f5:d9:94:43
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUGaiFnGxugqSO9dQJUad3deCoMeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0MjJCMUE5
QkFGMDZDNjAeFw0yMTEwMjUwODI3MTdaFw0yMjEwMjQwODMyMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTg3OEIzNTY4OUQ2MTU5NzFC
QkJCMkRERDY5MTk2NzNGRDRERDI3MDYwMDE4NzVBMUZFRTMzNzdCQjEwRUJDRjM0
NENGODREMjhENjU2OTM3NkRBRUM3Q0ZDRDY1MkI0RThEQTE0NjkzRENDNjI0MDAz
NTc2NjU0NEI2N0U3MTIzQzU4NjQzRDkwOUMzNzg4Mzk4QkZENzA3Nzg5RDk4NTNC
MDEyMjAyQzQwQTZCRTMwQ0JCQTEzMDBGQzExRjQ0N0EwQTA5MTdBQTYxMEQ1RTI0
QTkxNDg5ODAwOENFMjczNTk2NjgzQ0M4RkExRDJBRkZGRjQ5QjVBMkNFNTIyOTE4
NkNBQUIzMDVGMjhBMkM2NTA3MzZEQjYyOTBBMjQxRDQxOURCNDNFOTJBNEUzNTI2
MEM1RDQ3OTVDMTA4QjIxNjZGNzEyNkNERkE0REVGNzE5RTQwNDE3RkI0NjgyN0Mx
MENBRjVGMTIxMTcwMjIxNTU0OTg3NkI4QkFBMERCNjNFOTY4QkQ5NTA4MUZGMTM1
Q0Q0RUNGNUE4MDVDQ0UwNDIyQUI1RjhBQzQzMkQ1MzdCRDdBMDUzQUJCODgzODk2
NTM5N0FFQ0VCRUQyRDVBMjBCMjVCQzM3QTFERkRCN0JGOEY0MEI5MDM3MEFDOTM1
RkUxMjJGNjU1OEQwNTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6HizVonWFZcbu7Ld1pGWc/1N0nBgAYdaH+4zd7sQ6880TPhNKNZW
k3ba7Hz81lK06NoUaT3MYkADV2ZUS2fnEjxYZD2QnDeIOYv9cHeJ2YU7ASICxApr
4wy7oTAPwR9EegoJF6phDV4kqRSJgAjOJzWWaDzI+h0q//9JtaLOUikYbKqzBfKK
LGUHNttikKJB1BnbQ+kqTjUmDF1HlcEIshZvcSbN+k3vcZ5AQX+0aCfBDK9fEhFw
IhVUmHa4uqDbY+lovZUIH/E1zU7PWoBczgQiq1+KxDLVN716BTq7iDiWU5euzr7S
1aILJbw3od/be/j0C5A3Csk1/hIvZVjQUQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FCAkr+Yy/BHxj9wnzHN1bDoIAHI9MB8GA1UdIwQYMBaAFHgc0qnZ1XLrRQEiqERC
KxqbrwbGMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzEvNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0
MjJCMUE5QkFGMDZDNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMS83ODFDRDJBOUQ5RDU3MkVCNDUw
MTIyQTg0NDQyMkIxQTlCQUYwNkM2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMS8zMTM4MzEyZTM0
MzEyZTMyMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KdMwDQYJKoZIhvcNAQELBQADggEBACVtRn9xIludSpNGTQiVLwVo
oUx0eEzsqbwfnhFjBHsdUZvyER2st+gTnH09XA5e70HuIQkGbqPgkOBGnUNp682B
BA9F0AmbJUfJFjGWSL45ak8F7Rg4ZNtqCB+BaJaAtwIrlirSgOVoyTHHZBbxJ55U
O3Zwq4fNi9wRaglXowCirfYlzvNRgPxnPH9R0Fp4gQd2R8YXAmNIDHKozLrpjHHk
zDlCs2fAWzJRDnykT4pMtmQS9hSbnENGkCk1Jsp1c8caG1E+4lCHItHyo+HY9EXK
qYPoIowOU+IqAOPvyxrfRnvdS9+Gqa9ThMYDr0NWcvlhFqK/uRCfb+gCQfXZlEM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org