Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          i7EO77eC/C//5JexboSXuuJ4WgDOkMGgFVeipBtcK9M=
Subject key identifier:   C5:CC:B9:EB:BE:67:1F:82:8D:AB:96:38:5F:81:2C:25:05:4F:80:52
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       56254CF95BE41047BE06A10B3E8FA5DCF632BA8D
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa
Signing time:             Mon 25 Oct 2021 08:31:00 +0000
ROA not before:           Mon 25 Oct 2021 08:26:00 +0000
ROA not after:            Mon 24 Oct 2022 08:31:00 +0000
asID:                     22773
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:25:4c:f9:5b:e4:10:47:be:06:a1:0b:3e:8f:a5:dc:f6:32:ba:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:00 2021 GMT
            Not After : Oct 24 08:31:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:25:51:1e:1f:7c:7b:aa:76:f7:cf:85:79:a4:
                    02:00:b6:31:83:46:51:b5:55:a4:3f:91:d0:88:a4:
                    58:4d:03:3d:1b:55:f5:d3:cb:44:f0:f7:92:ca:8b:
                    05:72:87:59:04:46:3c:97:ee:8e:74:e2:7b:80:eb:
                    fc:16:56:19:72:9d:f3:d5:00:e8:0b:56:27:72:25:
                    75:66:2f:16:88:cb:73:ad:59:e5:c8:14:80:15:11:
                    07:14:79:de:d2:d3:94:3b:ae:55:ae:b1:19:da:c5:
                    6e:e4:6c:51:75:35:78:33:fd:97:06:fc:8e:42:d4:
                    db:4f:94:2b:e5:01:44:1b:21:75:16:c0:f0:c0:0c:
                    99:a5:94:9e:f5:7c:4e:f8:76:28:50:7d:ed:b0:f3:
                    15:9a:8e:bf:04:25:e7:df:a7:11:39:ff:14:90:fb:
                    bd:4b:fd:84:b1:82:30:46:30:78:bd:79:52:56:99:
                    30:42:0a:45:09:a6:6c:ba:89:3b:d8:43:01:a4:0f:
                    a9:5b:ab:c5:05:71:72:5f:e6:7c:7f:b0:e4:5c:94:
                    8b:cc:c7:76:c6:d5:2c:b9:f7:0e:6a:49:ea:82:00:
                    3c:d8:af:03:94:92:d3:4a:f9:ce:8a:08:a6:a5:0f:
                    c9:85:d6:dd:a6:be:47:21:c2:1b:28:75:b0:27:f9:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CC:B9:EB:BE:67:1F:82:8D:AB:96:38:5F:81:2C:25:05:4F:80:52
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:7e:6f:77:9a:d7:a6:81:3f:05:0b:7c:a4:03:d8:d6:4d:48:
         d8:81:1b:b4:fd:8a:f6:d7:76:59:75:40:e9:6b:b5:c2:9d:e3:
         91:cb:f9:b3:6a:90:ab:bb:60:94:12:ef:6f:db:63:93:5b:71:
         b6:bc:9c:ca:b9:75:9a:54:f6:d1:16:9e:23:1c:cc:4d:67:6d:
         25:22:42:71:71:21:e1:1a:f4:32:28:fa:f9:92:f8:35:f1:aa:
         00:c3:b8:0a:a1:22:5d:7f:01:c8:fa:ef:2d:a4:f0:54:ee:84:
         15:74:08:22:ea:20:13:9d:22:5b:0d:46:39:f8:f3:7a:ac:de:
         1e:a5:cf:0b:da:c1:b0:3f:83:90:2b:44:cc:22:e9:2a:30:a1:
         d9:8f:7e:ba:0b:b7:b4:b5:03:cf:37:3a:56:47:19:ec:e8:b2:
         7e:ce:c2:e6:40:1c:84:ff:09:2e:ec:81:c5:3e:83:71:e8:55:
         78:ac:2e:39:b0:8f:93:2e:a0:66:db:af:83:1a:c1:92:61:8b:
         17:b4:20:8c:a5:85:fe:7a:2e:7c:94:ae:0f:6d:46:3a:55:65:
         36:fb:77:85:44:81:e5:67:e3:55:e8:30:47:41:70:85:9c:ed:
         02:33:9f:0b:ce:55:b0:57:14:9c:a8:df:c3:3c:89:34:73:29:
         d8:f6:45:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org