Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa
File:                     3138312e34312e3231382e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          P7AXZn3JynvJX5FPukeHNISc3xre4PHfTu0zMLyK2yc=
Subject key identifier:   F0:92:CC:B6:2A:FB:2C:CF:B6:48:C9:A4:C3:2C:DA:4B:89:ED:1C:1A
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       6B208F1D4FD12440C7B5AD502687A1EC3D283DAE
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa
Signing time:             Mon 25 Oct 2021 08:31:02 +0000
ROA not before:           Mon 25 Oct 2021 08:26:02 +0000
ROA not after:            Mon 24 Oct 2022 08:31:02 +0000
asID:                     22773
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:20:8f:1d:4f:d1:24:40:c7:b5:ad:50:26:87:a1:ec:3d:28:3d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:02 2021 GMT
            Not After : Oct 24 08:31:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:84:7a:b2:f3:c0:65:b0:e1:60:8b:3d:71:
                    6a:00:20:c3:f3:88:9b:13:f4:36:73:c5:73:2d:79:
                    ae:da:3a:12:af:13:a3:6d:c4:01:31:cd:cb:c3:cf:
                    8e:f6:f5:16:fe:58:84:16:29:bf:28:12:bd:06:89:
                    e3:6c:7f:44:40:19:63:07:59:bc:08:b5:7b:6f:41:
                    8f:44:76:17:39:42:83:a3:88:ba:5f:13:9d:45:aa:
                    04:3e:cb:0b:7b:1f:a7:77:ea:42:30:5c:ac:5a:68:
                    c2:1f:7b:05:e7:b8:a2:46:21:2b:b4:f6:ae:42:18:
                    8d:8b:4a:1c:68:b5:ea:fa:f6:35:5b:9d:4d:95:2d:
                    20:d6:2d:6e:af:cd:d6:4b:08:21:b1:3a:2d:24:32:
                    65:a1:87:70:84:5b:9c:1c:50:06:01:3d:c6:f8:7e:
                    0d:51:dc:bd:c2:72:4c:37:d9:43:4f:d7:9b:20:8b:
                    fb:6e:3e:86:3f:e6:12:5d:31:67:20:8b:26:35:af:
                    6e:a3:4e:7e:ba:e9:71:30:54:94:e2:cb:49:5b:a8:
                    04:31:2f:54:30:e1:9c:19:d1:67:7f:95:67:01:c6:
                    87:22:43:da:37:4d:b3:31:6c:49:72:a2:1d:1d:25:
                    9f:31:3c:ca:32:01:b4:f5:a3:e9:3d:e1:e2:1b:26:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:92:CC:B6:2A:FB:2C:CF:B6:48:C9:A4:C3:2C:DA:4B:89:ED:1C:1A
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:8c:40:7a:ab:13:12:d3:e4:e4:56:dd:05:e8:b5:a6:fc:6f:
         22:08:bb:d3:55:ad:93:0d:dd:8e:7a:f7:51:b0:7d:6d:b8:df:
         88:63:8b:7e:d0:9a:5e:96:d6:d2:a4:1c:dd:3f:89:4f:1b:11:
         6b:4e:aa:ee:2f:13:e5:8d:8f:1b:98:80:22:84:9f:ee:7a:20:
         1f:bf:4f:50:95:4a:9a:af:0b:54:a6:0d:7a:bd:8e:28:78:63:
         5c:bb:6d:d9:63:67:e2:55:70:46:47:a4:0c:ea:eb:7b:35:36:
         63:22:a7:6a:93:59:bd:9e:8e:85:bc:16:c6:93:d0:24:78:d0:
         ec:f2:48:12:3c:c0:ec:53:16:c6:5a:46:8b:bd:a0:69:d2:75:
         74:b2:e8:ac:a7:26:3c:1e:b1:fe:1f:ac:13:c1:31:6f:06:a6:
         15:8d:4e:25:d1:09:3e:0b:9b:c8:a2:b5:7b:c8:82:36:49:7e:
         65:43:20:2f:22:6a:75:6a:79:aa:04:c4:17:c0:f3:7a:fc:85:
         de:d1:12:96:30:1d:47:3b:3e:86:b5:88:5f:32:d4:9e:75:8a:
         fa:31:66:40:fc:b8:73:98:f3:9b:22:85:72:78:67:82:f9:68:
         87:4c:4c:61:65:09:71:26:ca:5b:b2:31:f9:75:52:b3:48:13:
         34:42:88:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org