Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231352e302f32342d3234203d3e203430363736.roa
File:                     3138312e34312e3231352e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          cYjcbvi8xWbWYAuFVX/o+K1KDgFsdlAOrld5+2LOOZg=
Subject key identifier:   65:C9:64:0F:06:73:BE:52:49:02:EB:D9:44:FF:D4:D2:88:BE:8B:EE
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       1778E92C776745F5397FDD3102B52392037C7E5E
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231352e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 25 Oct 2021 08:31:09 +0000
ROA not before:           Mon 25 Oct 2021 08:26:09 +0000
ROA not after:            Mon 24 Oct 2022 08:31:09 +0000
asID:                     40676
IP address blocks:        181.41.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:78:e9:2c:77:67:45:f5:39:7f:dd:31:02:b5:23:92:03:7c:7e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:09 2021 GMT
            Not After : Oct 24 08:31:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:05:da:81:90:2e:7c:42:8e:67:67:bf:40:
                    4c:3c:07:99:5c:a3:91:b5:6a:f1:29:f0:10:74:a4:
                    13:cc:a4:ff:9d:64:dc:20:2a:7b:91:ec:ea:9b:32:
                    8b:f3:c1:9e:15:45:82:3f:95:f2:b5:cf:1a:89:26:
                    d0:00:fd:bb:54:ac:a1:19:d6:2b:2f:c7:53:9d:4a:
                    83:6d:80:00:d0:fe:a7:5a:fd:6f:93:42:7f:af:47:
                    ad:a6:88:96:03:dd:a8:06:48:d0:ba:c8:d6:eb:9b:
                    3d:23:bd:b9:d7:21:af:25:9d:87:b8:2a:ec:f0:c5:
                    61:ac:06:be:50:8f:dd:8b:c2:af:5c:03:e2:61:1d:
                    9b:9c:3f:79:1c:ee:18:c8:fc:1f:d0:e9:91:f9:1d:
                    64:0e:83:de:81:bf:46:57:93:3f:4c:49:bc:da:24:
                    81:41:34:01:61:b5:0d:d0:f5:a7:44:4a:6a:23:87:
                    7f:f9:5f:9c:a2:ea:30:d9:48:75:a8:43:d0:d2:44:
                    d4:3a:a8:ee:5b:8d:be:e7:8d:5c:65:cf:4b:70:b5:
                    7d:65:08:3f:24:fa:21:b8:0f:10:7f:ea:8a:66:e3:
                    c4:81:83:38:35:f2:65:15:ec:c1:30:1a:c5:35:2c:
                    98:6f:25:1d:e7:d4:3b:16:aa:c8:6d:e2:f8:06:9d:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:64:0F:06:73:BE:52:49:02:EB:D9:44:FF:D4:D2:88:BE:8B:EE
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231352e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:97:6a:cb:09:92:1e:c7:ea:00:d3:c4:8a:fe:71:0a:f5:
         10:3c:f5:78:78:46:8d:dc:c6:21:89:f5:af:63:90:ea:83:4c:
         30:f8:68:12:95:a3:9a:a7:cb:14:ef:4a:d1:06:47:b8:00:ef:
         5a:fa:60:3f:85:07:9e:0d:12:ce:99:93:f5:2b:31:32:27:3b:
         d8:61:a1:31:f5:0d:6d:6c:57:6d:5f:d1:bd:15:20:9d:2c:bf:
         db:d3:fe:cf:3a:58:65:fb:5f:17:60:47:d1:fb:00:d6:d6:a6:
         59:ce:4a:d9:d3:be:81:04:57:42:27:df:3e:b0:d0:07:cb:c0:
         fd:30:ed:f4:9b:fb:08:b2:d2:bd:9f:0b:f3:9e:57:3d:90:fc:
         ec:e0:05:d3:a0:03:5f:7d:63:85:f7:ec:cf:33:b1:4e:d9:cd:
         f4:e5:fa:7f:d2:55:98:af:7f:d4:ab:15:56:0e:cf:e5:35:ba:
         ea:d7:8c:fd:68:1c:5e:7f:c0:41:cc:74:0f:8f:ec:21:c8:88:
         b2:29:0d:c7:0c:9d:fe:0b:fa:8b:dd:22:db:fa:00:cf:fd:7e:
         b1:c0:9e:5f:ea:f8:5f:c6:18:15:ce:a3:a0:e7:f8:d2:e3:56:
         07:a0:cd:bd:52:75:38:a3:c9:59:b3:c5:52:5c:fd:68:1b:53:
         1a:ce:f3:e5
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUF3jpLHdnRfU5f90xArUjkgN8fl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0MjJCMUE5
QkFGMDZDNjAeFw0yMTEwMjUwODI2MDlaFw0yMjEwMjQwODMxMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU3MjA1REE4MTkwMkU3QzQy
OEU2NzY3QkY0MDRDM0MwNzk5NUNBMzkxQjU2QUYxMjlGMDEwNzRBNDEzQ0NBNEZG
OUQ2NERDMjAyQTdCOTFFQ0VBOUIzMjhCRjNDMTlFMTU0NTgyM0Y5NUYyQjVDRjFB
ODkyNkQwMDBGREJCNTRBQ0ExMTlENjJCMkZDNzUzOUQ0QTgzNkQ4MDAwRDBGRUE3
NUFGRDZGOTM0MjdGQUY0N0FEQTY4ODk2MDNEREE4MDY0OEQwQkFDOEQ2RUI5QjNE
MjNCREI5RDcyMUFGMjU5RDg3QjgyQUVDRjBDNTYxQUMwNkJFNTA4RkREOEJDMkFG
NUMwM0UyNjExRDlCOUMzRjc5MUNFRTE4QzhGQzFGRDBFOTkxRjkxRDY0MEU4M0RF
ODFCRjQ2NTc5MzNGNEM0OUJDREEyNDgxNDEzNDAxNjFCNTBERDBGNUE3NDQ0QTZB
MjM4NzdGRjk1RjlDQTJFQTMwRDk0ODc1QTg0M0QwRDI0NEQ0M0FBOEVFNUI4REJF
RTc4RDVDNjVDRjRCNzBCNTdENjUwODNGMjRGQTIxQjgwRjEwN0ZFQThBNjZFM0M0
ODE4MzM4MzVGMjY1MTVFQ0MxMzAxQUM1MzUyQzk4NkYyNTFERTdENDNCMTZBQUM4
NkRFMkY4MDY5RDExREYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvnIF2oGQLnxCjmdnv0BMPAeZXKORtWrxKfAQdKQTzKT/nWTcICp7
kezqmzKL88GeFUWCP5Xytc8aiSbQAP27VKyhGdYrL8dTnUqDbYAA0P6nWv1vk0J/
r0etpoiWA92oBkjQusjW65s9I7251yGvJZ2HuCrs8MVhrAa+UI/di8KvXAPiYR2b
nD95HO4YyPwf0OmR+R1kDoPegb9GV5M/TEm82iSBQTQBYbUN0PWnREpqI4d/+V+c
ouow2Uh1qEPQ0kTUOqjuW42+541cZc9LcLV9ZQg/JPohuA8Qf+qKZuPEgYM4NfJl
FezBMBrFNSyYbyUd59Q7FqrIbeL4Bp0R3wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FGXJZA8Gc75SSQLr2UT/1NKIvovuMB8GA1UdIwQYMBaAFHgc0qnZ1XLrRQEiqERC
KxqbrwbGMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzEvNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0
MjJCMUE5QkFGMDZDNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMS83ODFDRDJBOUQ5RDU3MkVCNDUw
MTIyQTg0NDQyMkIxQTlCQUYwNkM2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMS8zMTM4MzEyZTM0
MzEyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzNjM3MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KdcwDQYJKoZIhvcNAQELBQADggEBADrVl2rLCZIex+oA08SK/nEK
9RA89Xh4Ro3cxiGJ9a9jkOqDTDD4aBKVo5qnyxTvStEGR7gA71r6YD+FB54NEs6Z
k/UrMTInO9hhoTH1DW1sV21f0b0VIJ0sv9vT/s86WGX7XxdgR9H7ANbWplnOStnT
voEEV0In3z6w0AfLwP0w7fSb+wiy0r2fC/OeVz2Q/OzgBdOgA199Y4X37M8zsU7Z
zfTl+n/SVZivf9SrFVYOz+U1uurXjP1oHF5/wEHMdA+P7CHIiLIpDccMnf4L+ovd
Itv6AM/9frHAnl/q+F/GGBXOo6Dn+NLjVgegzb1SdTijyVmzxVJc/WgbUxrO8+U=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org