Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35362e302f32322d3232203d3e203631333137.roa
File:                     3138352e3137302e35362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          1hqZ5puDmGu9jo3yV8PRdbX3f6HrZhBifh2lu+P3Tt0=
Subject key identifier:   5C:C5:18:89:3E:FE:A7:7A:E0:D6:6B:B1:67:88:94:45:80:17:53:43
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       6D59240CC619EDFDED05D399D60D4D686D487D33
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35362e302f32322d3232203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:55 +0000
ROA not before:           Mon 25 Oct 2021 08:27:55 +0000
ROA not after:            Mon 24 Oct 2022 08:32:55 +0000
asID:                     61317
IP address blocks:        185.170.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:24:0c:c6:19:ed:fd:ed:05:d3:99:d6:0d:4d:68:6d:48:7d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:55 2021 GMT
            Not After : Oct 24 08:32:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:a0:0d:2d:ab:d3:aa:9a:88:35:59:68:a2:
                    87:4b:78:a8:03:ce:48:66:8b:8c:3d:e5:72:0d:03:
                    cf:01:98:3a:e2:d8:8a:8d:95:28:dc:61:d1:c6:d9:
                    e6:20:1d:49:6d:af:3e:84:b3:31:07:8d:f7:d4:52:
                    05:c1:13:f3:a2:2d:47:75:e7:c9:b6:b0:62:3a:9d:
                    9c:68:74:c5:0d:52:f7:8e:d0:12:03:d6:1c:b4:6c:
                    d2:f8:e6:fe:50:ff:16:44:e6:71:ca:09:f9:2a:20:
                    74:de:3b:b2:0c:0e:db:6c:e3:36:be:21:06:76:10:
                    59:d8:7f:00:77:7f:5f:a5:39:94:ff:bc:cc:5c:ca:
                    fa:14:21:07:31:fa:be:94:53:9c:27:38:e6:8d:80:
                    97:b1:92:f4:88:8c:03:68:23:14:64:c0:82:47:43:
                    5c:24:7c:a5:92:bf:8b:3b:4b:54:f3:28:0a:b0:3a:
                    48:f2:8f:55:ae:78:e6:29:65:36:a8:d9:d3:fd:6f:
                    9c:05:ea:62:a4:3b:2b:53:23:5a:d6:c8:94:c0:4f:
                    d1:72:11:83:83:89:17:47:44:0d:91:9c:ea:c7:ba:
                    7f:77:ee:8f:8b:59:8b:82:18:54:f6:6f:86:bb:b8:
                    0e:ed:a3:92:f2:e0:8d:e9:7c:d3:c0:34:23:03:b2:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:18:89:3E:FE:A7:7A:E0:D6:6B:B1:67:88:94:45:80:17:53:43
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:3b:c1:0a:9d:ae:74:4e:18:0d:4a:87:6b:80:b7:fe:20:6a:
         b8:a2:1e:76:9a:51:a1:54:d6:0e:f8:fc:7b:93:b9:22:33:a3:
         67:a6:8f:fe:8e:00:53:e7:91:93:60:26:f9:b3:79:84:f4:28:
         cd:75:4a:07:15:f7:7e:80:1b:5e:e2:34:7c:da:df:58:cf:8c:
         62:32:bb:66:26:73:f9:93:24:2d:c0:04:80:b4:a3:a2:e7:78:
         22:aa:54:da:53:4a:35:4d:92:6b:4c:d2:1b:4d:fd:d7:26:67:
         ab:06:2d:4e:5d:55:6b:cd:a5:b0:41:f2:6d:67:f8:01:f5:61:
         64:da:e6:3f:2f:d3:f2:73:28:48:d2:f2:70:ec:c1:1e:70:c5:
         cb:ba:c0:8e:29:db:39:56:44:74:64:16:c2:2b:bb:c7:1b:45:
         ef:55:4c:46:3d:8e:bc:72:a2:53:61:1e:88:aa:99:01:5f:23:
         4e:4b:a1:11:be:2b:f2:16:e5:51:63:bb:ef:43:62:3b:78:86:
         37:95:cf:71:b7:cb:1a:31:55:6a:2a:37:83:06:41:e3:34:5a:
         b0:41:60:88:10:60:e9:7e:3b:81:b5:4b:e1:40:17:ef:5b:37:
         4a:ae:a0:06:c5:13:15:1a:9f:d5:81:13:ba:65:3b:00:d8:f0:
         ea:a8:83:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org