Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137302e35362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          BRwffqrW6ipIK+AayXM+zLm98tp+gSkknRNBfbR0uNA=
Subject key identifier:   33:DC:0F:97:54:55:40:67:10:76:4D:92:16:4F:AC:BD:AA:A8:79:4A
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       28A08E2EE8FA5B6086E8336E3541D6CFB5A9F48C
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:59 +0000
ROA not before:           Mon 25 Oct 2021 08:27:59 +0000
ROA not after:            Mon 24 Oct 2022 08:32:59 +0000
asID:                     61317
IP address blocks:        185.170.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a0:8e:2e:e8:fa:5b:60:86:e8:33:6e:35:41:d6:cf:b5:a9:f4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:59 2021 GMT
            Not After : Oct 24 08:32:59 2022 GMT
        Subject: CN=3082010A0282010100D65FAA06A254FB8CEF7047A0E89BE4EE4E8E52FDD215AFAE2737741597FCE1AA4DADF9A7C957275144063234E5296C14B866E07A9A65CE563B198FBB24028E9A52E1CB81E4E38548C4C691B4B33D25358A2673D4FFB2C3B540E286B1E94F316B488D7642A5BCEC5CD5027858C4007A653557ADE429E4DC0DC039811A7082243D06FF4249E2399106A6DC176F83AB9D4B25C3AB4A8F35969CA65B81FF52E8FFC4165015C04A63D162F1B6429BFA257F634C941CDEFE09892460B287878404C70D6CE74F84E2FF3EABFE81B1245367BA470B21402152A12D0E208AEE7C5E77BC254EF9CEEF6C951F787733A25DFAD371D4C74BCAB4C88CE9B339EC5227CF141F210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:aa:06:a2:54:fb:8c:ef:70:47:a0:e8:9b:
                    e4:ee:4e:8e:52:fd:d2:15:af:ae:27:37:74:15:97:
                    fc:e1:aa:4d:ad:f9:a7:c9:57:27:51:44:06:32:34:
                    e5:29:6c:14:b8:66:e0:7a:9a:65:ce:56:3b:19:8f:
                    bb:24:02:8e:9a:52:e1:cb:81:e4:e3:85:48:c4:c6:
                    91:b4:b3:3d:25:35:8a:26:73:d4:ff:b2:c3:b5:40:
                    e2:86:b1:e9:4f:31:6b:48:8d:76:42:a5:bc:ec:5c:
                    d5:02:78:58:c4:00:7a:65:35:57:ad:e4:29:e4:dc:
                    0d:c0:39:81:1a:70:82:24:3d:06:ff:42:49:e2:39:
                    91:06:a6:dc:17:6f:83:ab:9d:4b:25:c3:ab:4a:8f:
                    35:96:9c:a6:5b:81:ff:52:e8:ff:c4:16:50:15:c0:
                    4a:63:d1:62:f1:b6:42:9b:fa:25:7f:63:4c:94:1c:
                    de:fe:09:89:24:60:b2:87:87:84:04:c7:0d:6c:e7:
                    4f:84:e2:ff:3e:ab:fe:81:b1:24:53:67:ba:47:0b:
                    21:40:21:52:a1:2d:0e:20:8a:ee:7c:5e:77:bc:25:
                    4e:f9:ce:ef:6c:95:1f:78:77:33:a2:5d:fa:d3:71:
                    d4:c7:4b:ca:b4:c8:8c:e9:b3:39:ec:52:27:cf:14:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:0F:97:54:55:40:67:10:76:4D:92:16:4F:AC:BD:AA:A8:79:4A
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:2f:c4:e4:0e:1a:bb:a9:4b:0f:f7:e7:a5:4c:69:2f:5e:10:
         b4:01:80:62:28:d0:a0:9d:9f:bf:5f:b3:0b:dc:dd:ba:c0:c8:
         4c:9b:6a:52:a1:d7:0c:69:dd:bc:47:dd:e5:5a:eb:ab:2d:ac:
         73:83:75:d3:20:a2:74:9e:07:a3:29:cf:f2:c6:26:f1:23:88:
         65:75:9e:be:24:f4:fb:25:9d:dc:b5:9f:5e:47:e1:c6:de:89:
         71:ec:b9:30:43:05:b0:2f:17:35:e7:b3:1f:b9:7d:e1:bf:7c:
         7d:0a:83:9a:78:a7:9a:0f:28:5f:f0:31:73:78:6d:4c:38:76:
         01:70:1e:76:a1:76:40:65:a7:9d:93:30:83:dd:66:6b:be:cf:
         0e:c1:bf:36:7c:21:69:2a:64:87:c3:09:e0:8a:f2:f9:fd:f9:
         8a:0c:1f:18:b7:5b:07:80:82:2e:be:fb:04:d3:34:70:35:98:
         21:c5:5f:e4:e4:fb:6e:b1:8b:64:80:aa:30:8e:c8:5b:61:6d:
         ca:e3:f6:b1:a6:44:25:4e:01:d7:6f:de:a0:35:6b:47:0d:a5:
         a4:1d:70:7c:ca:39:f0:8b:a5:62:48:b7:64:f5:ce:a7:39:c1:
         72:43:cd:d0:8b:e6:11:55:3f:7c:36:78:50:82:44:eb:c4:86:
         fd:cc:9b:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org