Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa
File:                     3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          eC/zDgeAI8xsN85L6RhdpSCiixKWELrH0taj2q+9t0o=
Subject key identifier:   7D:41:69:DF:E3:F9:23:2D:0E:17:18:A6:AE:2E:26:14:15:35:EB:55
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       0787C714E17F871BCAC96EF5E9A1C20BFE05BE84
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa
Signing time:             Mon 25 Oct 2021 08:33:17 +0000
ROA not before:           Mon 25 Oct 2021 08:28:17 +0000
ROA not after:            Mon 24 Oct 2022 08:33:17 +0000
asID:                     397423
IP address blocks:        185.170.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:87:c7:14:e1:7f:87:1b:ca:c9:6e:f5:e9:a1:c2:0b:fe:05:be:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:28:17 2021 GMT
            Not After : Oct 24 08:33:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:df:3a:c7:c9:b4:25:f8:13:eb:60:18:f3:
                    2c:17:28:48:12:13:2a:ba:7a:87:bd:b2:e9:61:8d:
                    93:18:33:4b:cc:ba:ea:5f:27:be:b6:08:74:1e:1e:
                    40:9e:23:e6:95:0e:e6:03:13:25:62:03:7d:25:64:
                    bd:a1:4a:69:40:0b:cd:79:83:54:24:1e:20:11:3f:
                    f7:a2:08:33:3b:c8:86:b0:b0:a7:d6:3b:52:51:72:
                    83:d3:d4:93:00:68:f3:b5:92:d3:f0:fa:a2:96:6a:
                    3b:a6:21:4a:ae:2c:54:15:7a:5e:83:e5:d5:1f:e8:
                    28:22:aa:56:c9:68:9c:e9:1d:88:2a:cf:ca:63:ab:
                    07:3f:2e:d0:2e:c7:0a:cf:52:a0:2c:aa:6f:69:c9:
                    e2:f4:f0:7c:b8:e6:a5:c2:fc:9f:27:1e:41:5b:6e:
                    32:04:b6:b8:00:ae:3d:ba:94:fb:8c:a1:bd:e1:35:
                    39:a3:2b:25:72:ef:e9:9a:86:2b:8b:15:f1:fb:0d:
                    6c:69:bb:83:8e:54:d7:ed:bb:be:4e:e5:8f:3a:9d:
                    c3:0c:8e:83:f3:3e:20:03:4e:ca:3b:c9:a8:0f:38:
                    50:bd:d0:34:17:85:c0:65:c5:67:9c:7f:54:c8:d2:
                    12:00:e9:f5:fd:14:ef:09:12:92:67:98:ed:be:45:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:69:DF:E3:F9:23:2D:0E:17:18:A6:AE:2E:26:14:15:35:EB:55
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:dd:6f:a7:ae:f9:91:d6:e3:69:f0:15:41:fa:59:e8:35:e3:
         6d:70:7b:57:1a:56:fe:05:6d:df:4b:c1:b7:d9:ad:01:0b:83:
         23:48:ae:31:94:1a:4d:f1:1a:e0:b2:14:a5:f2:c5:92:8c:31:
         1a:de:a9:b5:0e:27:1e:cd:7e:ed:7d:84:29:36:99:e6:b5:b1:
         18:ec:76:f0:a5:4d:5d:e4:8d:a0:ce:1e:e7:cc:1a:7f:40:be:
         4d:4d:ee:3c:63:51:47:83:c2:0b:3c:ed:f2:d3:51:81:8c:72:
         59:0d:69:51:34:12:d6:d5:86:1a:a3:84:f3:f4:4d:44:f7:f2:
         1a:ef:3e:79:01:26:fd:6c:a7:d6:1f:2f:81:92:a0:01:a8:7b:
         81:3f:24:b3:2b:4b:73:af:f9:4f:36:f2:b0:2c:f9:2e:bf:f6:
         5d:43:34:6c:11:ad:b0:59:ad:44:90:d3:6b:15:72:9e:0b:96:
         72:1d:7d:2d:c4:3f:59:01:c3:8b:ee:cc:38:18:1a:dc:fe:b2:
         04:c3:2a:83:fb:c8:86:f3:0b:83:44:e0:de:cf:93:a4:39:8b:
         58:51:47:72:2a:c0:58:23:a8:2e:fe:84:7b:ba:2e:d1:01:45:
         ed:c1:15:bd:d3:0b:2d:8c:28:36:fe:66:af:38:05:5e:68:b2:
         79:c6:0e:f0
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUB4fHFOF/hxvKyW716aHCC/4FvoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0MjJCMUE5
QkFGMDZDNjAeFw0yMTEwMjUwODI4MTdaFw0yMjEwMjQwODMzMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNDOERGM0FDN0M5QjQyNUY4
MTNFQjYwMThGMzJDMTcyODQ4MTIxMzJBQkE3QTg3QkRCMkU5NjE4RDkzMTgzMzRC
Q0NCQUVBNUYyN0JFQjYwODc0MUUxRTQwOUUyM0U2OTUwRUU2MDMxMzI1NjIwMzdE
MjU2NEJEQTE0QTY5NDAwQkNENzk4MzU0MjQxRTIwMTEzRkY3QTIwODMzM0JDODg2
QjBCMEE3RDYzQjUyNTE3MjgzRDNENDkzMDA2OEYzQjU5MkQzRjBGQUEyOTY2QTNC
QTYyMTRBQUUyQzU0MTU3QTVFODNFNUQ1MUZFODI4MjJBQTU2Qzk2ODlDRTkxRDg4
MkFDRkNBNjNBQjA3M0YyRUQwMkVDNzBBQ0Y1MkEwMkNBQTZGNjlDOUUyRjRGMDdD
QjhFNkE1QzJGQzlGMjcxRTQxNUI2RTMyMDRCNkI4MDBBRTNEQkE5NEZCOENBMUJE
RTEzNTM5QTMyQjI1NzJFRkU5OUE4NjJCOEIxNUYxRkIwRDZDNjlCQjgzOEU1NEQ3
RURCQkJFNEVFNThGM0E5REMzMEM4RTgzRjMzRTIwMDM0RUNBM0JDOUE4MEYzODUw
QkREMDM0MTc4NUMwNjVDNTY3OUM3RjU0QzhEMjEyMDBFOUY1RkQxNEVGMDkxMjky
Njc5OEVEQkU0NTQxNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs8jfOsfJtCX4E+tgGPMsFyhIEhMqunqHvbLpYY2TGDNLzLrqXye+
tgh0Hh5AniPmlQ7mAxMlYgN9JWS9oUppQAvNeYNUJB4gET/3oggzO8iGsLCn1jtS
UXKD09STAGjztZLT8Pqilmo7piFKrixUFXpeg+XVH+goIqpWyWic6R2IKs/KY6sH
Py7QLscKz1KgLKpvacni9PB8uOalwvyfJx5BW24yBLa4AK49upT7jKG94TU5oysl
cu/pmoYrixXx+w1sabuDjlTX7bu+TuWPOp3DDI6D8z4gA07KO8moDzhQvdA0F4XA
ZcVnnH9UyNISAOn1/RTvCRKSZ5jtvkVBbQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FH1Bad/j+SMtDhcYpq4uJhQVNetVMB8GA1UdIwQYMBaAFHgc0qnZ1XLrRQEiqERC
KxqbrwbGMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzEvNzgxQ0QyQTlEOUQ1NzJFQjQ1MDEyMkE4NDQ0
MjJCMUE5QkFGMDZDNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMS83ODFDRDJBOUQ5RDU3MkVCNDUw
MTIyQTg0NDQyMkIxQTlCQUYwNkM2LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMS8zMTM4MzUyZTMx
MzczMDJlMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM0MzIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEALmqOTANBgkqhkiG9w0BAQsFAAOCAQEAMd1vp675kdbjafAVQfpZ
6DXjbXB7VxpW/gVt30vBt9mtAQuDI0iuMZQaTfEa4LIUpfLFkowxGt6ptQ4nHs1+
7X2EKTaZ5rWxGOx28KVNXeSNoM4e58waf0C+TU3uPGNRR4PCCzzt8tNRgYxyWQ1p
UTQS1tWGGqOE8/RNRPfyGu8+eQEm/Wyn1h8vgZKgAah7gT8ksytLc6/5TzbysCz5
Lr/2XUM0bBGtsFmtRJDTaxVynguWch19LcQ/WQHDi+7MOBga3P6yBMMqg/vIhvML
g0Tg3s+TpDmLWFFHcirAWCOoLv6Ee7ou0QFF7cEVvdMLLYwoNv5mrzgFXmiyecYO
8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org