Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa
File:                     3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          JwKwyc3cEJQMcpc30rskCltoTrsjmxfTuiAvhQBUtxc=
Subject key identifier:   72:3E:CF:06:EB:55:32:FF:75:8F:3F:B1:8D:AD:87:C5:87:13:1D:8C
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       0F546CEDC892496389C264FD78183436F2046DEC
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa
Signing time:             Mon 25 Oct 2021 08:33:13 +0000
ROA not before:           Mon 25 Oct 2021 08:28:13 +0000
ROA not after:            Mon 24 Oct 2022 08:33:13 +0000
asID:                     397373
IP address blocks:        181.41.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:54:6c:ed:c8:92:49:63:89:c2:64:fd:78:18:34:36:f2:04:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:28:13 2021 GMT
            Not After : Oct 24 08:33:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:91:43:dd:ed:5c:40:df:cc:f1:b0:0a:1b:
                    44:d7:17:0e:44:74:43:4f:6c:a4:5f:fe:58:8d:9b:
                    36:c4:32:ef:bc:ce:a0:fc:34:88:b2:fc:69:6d:9f:
                    30:bc:fa:61:b5:7a:d5:4e:cd:f4:42:8b:01:f1:bb:
                    4e:7e:f1:ae:0a:1c:d1:08:31:84:e0:a8:00:b8:ac:
                    ce:a9:15:db:80:86:8f:3a:1d:5c:ef:1a:2b:4f:81:
                    eb:4d:71:ec:21:c9:f4:44:d8:9b:7d:b5:48:56:13:
                    59:a5:a8:2f:f6:2e:34:1f:79:09:81:61:02:c4:65:
                    90:8e:3e:8c:6a:a3:07:1c:d3:38:8d:7b:3b:fa:82:
                    72:d9:d6:8d:f4:b0:07:a4:02:b6:ea:a8:6a:d4:b8:
                    9c:ee:05:7d:ed:ab:0d:b8:9e:9e:de:19:7d:2f:c1:
                    d7:8e:e6:51:ee:ef:a3:e7:1e:0f:c2:da:b7:db:63:
                    49:06:b2:55:ca:5a:ae:39:70:2c:7b:f6:86:9d:d1:
                    da:17:53:37:fa:d9:d1:de:3b:49:0b:f2:51:c7:7f:
                    4f:97:5f:cd:ec:e2:3e:14:8b:e3:1b:62:c6:28:91:
                    f9:a4:8f:53:d2:8d:d2:0e:6e:0d:3c:65:f5:ce:33:
                    9d:b9:82:c0:22:e4:7b:31:ed:fd:67:d8:ea:f0:41:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:CF:06:EB:55:32:FF:75:8F:3F:B1:8D:AD:87:C5:87:13:1D:8C
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:22:c9:f7:a8:1d:80:e0:cb:f8:59:62:f1:54:6e:07:38:a7:
         51:7d:14:72:6e:05:9a:1a:da:d6:e8:6f:60:3c:fb:fe:75:92:
         e7:b1:70:9b:61:ec:a3:65:15:b6:08:73:07:c2:5b:08:c8:3c:
         c9:6b:9f:a0:4c:91:66:7f:a9:e7:20:64:79:24:13:27:9e:64:
         d5:6c:36:fc:f4:b4:44:cc:99:c5:00:ad:d7:5a:b9:58:0a:3b:
         9c:4f:77:ff:c9:05:bb:76:a6:f2:6b:e0:ac:b5:c1:e7:29:42:
         4d:fd:cd:39:eb:5b:c6:bc:19:5e:08:ff:cb:a2:76:46:02:61:
         8a:a5:b5:26:37:cb:e4:16:e4:62:a0:0c:f8:69:df:a3:ff:67:
         c1:72:90:26:17:30:91:ea:f0:7e:44:c7:31:55:4d:05:6d:18:
         d1:d6:f6:49:36:f5:ae:cb:58:f4:80:0c:0a:6a:16:36:ee:fa:
         a4:2a:ab:a8:71:eb:b6:6f:37:0c:c4:71:0a:cb:56:3b:30:ca:
         fc:bc:b6:a4:f2:b1:1c:4b:55:0e:ec:35:9f:b4:77:22:a0:07:
         b2:79:ac:1b:e2:e8:29:4e:f0:9d:2c:8b:b4:b6:13:b1:3d:50:
         df:7a:10:bf:8a:5d:2d:15:4a:1c:89:93:85:38:9b:01:bf:09:
         8d:95:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org