Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa
File:                     3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          H9YQ3JioMgyz8/nE+09pXLYA9NJG+dMqs07UEnGoV00=
Subject key identifier:   08:79:AB:36:51:0A:FD:69:6E:F9:BA:0E:3F:A9:7E:BB:B2:2A:E3:26
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       22A31CBA0A78F770C120559A3CEAE972143D246A
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:52 +0000
ROA not before:           Mon 25 Oct 2021 08:27:52 +0000
ROA not after:            Mon 24 Oct 2022 08:32:52 +0000
asID:                     61317
IP address blocks:        185.135.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a3:1c:ba:0a:78:f7:70:c1:20:55:9a:3c:ea:e9:72:14:3d:24:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:52 2021 GMT
            Not After : Oct 24 08:32:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:f6:61:f1:b8:86:9f:1e:45:73:6e:79:90:
                    8e:e1:3e:71:38:e5:85:c3:f2:e2:5d:21:7e:54:9b:
                    83:af:7d:4d:31:a0:0c:e5:2f:10:f5:ba:15:fe:ad:
                    0c:3a:03:49:0d:48:e6:e5:c9:4d:76:23:4b:50:35:
                    6c:63:ca:89:80:09:6d:bd:c4:9b:0e:8a:f6:19:52:
                    41:07:45:86:51:95:02:1b:3d:c1:cc:43:33:f9:2b:
                    46:09:1d:ad:11:7a:b0:8a:02:60:89:71:2f:ce:a1:
                    4b:73:67:87:15:df:50:74:71:53:f7:f6:ef:9b:71:
                    b2:74:31:f9:ec:ba:15:e4:37:6a:ae:8a:64:68:c6:
                    ce:fb:ae:9d:b6:8e:b6:21:52:25:60:ef:c5:f4:bd:
                    e1:a1:b8:87:2c:7e:50:dd:2c:79:75:b6:96:92:f5:
                    38:43:ec:96:c8:29:23:77:a4:c8:81:9a:f9:06:66:
                    9e:c0:39:5d:f8:4d:f6:c0:c9:2d:5a:21:57:52:d9:
                    81:32:b7:e9:7d:79:95:d9:17:07:28:a4:7d:98:6d:
                    bc:00:03:d7:64:b8:f8:97:cd:d7:be:5c:02:20:ad:
                    b6:84:9e:14:cd:b8:94:0d:43:09:9c:a3:59:d1:c9:
                    f2:8a:fd:10:ab:e8:95:2a:40:d4:09:f2:15:93:7c:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:79:AB:36:51:0A:FD:69:6E:F9:BA:0E:3F:A9:7E:BB:B2:2A:E3:26
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:01:67:02:37:8d:bb:c8:e0:dd:42:06:f3:81:4e:90:9c:
         88:52:dc:a2:e8:f6:71:a2:95:d2:b1:0d:56:8a:6e:77:59:de:
         d5:4c:ae:94:be:e6:a1:55:b5:bd:e7:9d:d0:91:53:f2:52:e0:
         b8:8a:45:e1:c7:ae:17:d3:b2:e7:90:c5:c2:63:72:11:aa:f8:
         38:b2:a4:72:55:ce:32:23:29:9a:a7:dc:39:37:df:39:56:ea:
         e0:c0:80:f0:9f:97:db:36:cf:e7:2f:ce:5b:e6:c6:5f:1d:72:
         43:92:63:8c:27:ef:15:80:f2:05:d4:16:82:32:87:6d:bb:86:
         28:9a:e2:c6:60:2d:7f:dd:54:56:7d:1e:ca:7a:67:27:f8:8b:
         e5:89:79:54:b5:1f:59:52:01:1d:ef:de:c1:91:93:c9:d2:f4:
         3b:e1:cc:a9:6d:96:8c:fe:62:d4:d3:ed:e1:5b:41:81:72:98:
         f5:4b:ad:ac:06:22:0c:e9:a7:8b:df:7b:e2:2b:ae:68:35:bd:
         da:ca:64:d7:c0:b3:5d:ab:50:76:bb:b7:b4:8a:25:56:c2:10:
         6b:05:25:59:54:43:79:bd:1d:bc:99:27:4e:59:e1:be:18:60:
         24:d2:30:a6:51:ee:56:4c:a5:dd:7d:43:2d:5f:22:71:c3:55:
         d1:e9:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org