Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32342d3234203d3e20323037333236.roa
File:                     3138312e34312e3139322e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          RoetgBKAPTAeJeetsEqaNGKu1mSS49OAUTBzWE1UhQ0=
Subject key identifier:   08:69:D5:5F:32:A7:98:EA:0B:3E:F6:98:74:D9:3C:07:DF:2F:6D:00
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       6837BB4139873211CC38658212ACD7414AAD91BE
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32342d3234203d3e20323037333236.roa
Signing time:             Thu 17 Feb 2022 11:45:07 +0000
ROA not before:           Thu 17 Feb 2022 11:40:07 +0000
ROA not after:            Thu 16 Feb 2023 11:45:07 +0000
asID:                     207326
IP address blocks:        181.41.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:37:bb:41:39:87:32:11:cc:38:65:82:12:ac:d7:41:4a:ad:91:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:07 2022 GMT
            Not After : Feb 16 11:45:07 2023 GMT
        Subject: CN=3082010A0282010100D12E58377F3D04B8B170DBD4B5C4E8B19DCF1077177C82F5399A1A67C64ADB15563F3D54D0E2C4DBC837920BDE68F5CF0D0D8A3FDCB6A2A17C3BD58F41270CB2471AA1FDC1AB47B8DD23680DDAA773A1F99C7BC3CECA5E614164056BF312E87BEB7AA4C1B89809BD08AE5BB91FF705C5227A8A416FB449B2DAB35C3731CD51499580391579E5AD284A7A4FF0E36FFE18E7E3A6033DE5491A25174494FA996E74C5717592D46BCA339A81A331FCDAA230761A7C522D4188E2563B36A68C69023C51647C0324F2F1A02693ED3238E53D1E1309AEB2FCFE2C644CB9D000080C85D6CD95855E27B1C89E7502011E6367CA76B6F3B7E1E6DAB7ED48B9191CBB62105B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:58:37:7f:3d:04:b8:b1:70:db:d4:b5:c4:
                    e8:b1:9d:cf:10:77:17:7c:82:f5:39:9a:1a:67:c6:
                    4a:db:15:56:3f:3d:54:d0:e2:c4:db:c8:37:92:0b:
                    de:68:f5:cf:0d:0d:8a:3f:dc:b6:a2:a1:7c:3b:d5:
                    8f:41:27:0c:b2:47:1a:a1:fd:c1:ab:47:b8:dd:23:
                    68:0d:da:a7:73:a1:f9:9c:7b:c3:ce:ca:5e:61:41:
                    64:05:6b:f3:12:e8:7b:eb:7a:a4:c1:b8:98:09:bd:
                    08:ae:5b:b9:1f:f7:05:c5:22:7a:8a:41:6f:b4:49:
                    b2:da:b3:5c:37:31:cd:51:49:95:80:39:15:79:e5:
                    ad:28:4a:7a:4f:f0:e3:6f:fe:18:e7:e3:a6:03:3d:
                    e5:49:1a:25:17:44:94:fa:99:6e:74:c5:71:75:92:
                    d4:6b:ca:33:9a:81:a3:31:fc:da:a2:30:76:1a:7c:
                    52:2d:41:88:e2:56:3b:36:a6:8c:69:02:3c:51:64:
                    7c:03:24:f2:f1:a0:26:93:ed:32:38:e5:3d:1e:13:
                    09:ae:b2:fc:fe:2c:64:4c:b9:d0:00:08:0c:85:d6:
                    cd:95:85:5e:27:b1:c8:9e:75:02:01:1e:63:67:ca:
                    76:b6:f3:b7:e1:e6:da:b7:ed:48:b9:19:1c:bb:62:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:69:D5:5F:32:A7:98:EA:0B:3E:F6:98:74:D9:3C:07:DF:2F:6D:00
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:2a:21:60:bd:d1:fa:16:9c:6b:fa:92:ba:c2:eb:b5:b5:
         c7:38:d1:62:4e:f8:2b:1c:62:95:39:e2:0e:c3:c1:0e:76:d8:
         aa:ef:13:57:46:70:87:7f:32:be:1a:8f:ef:50:9d:91:e5:e1:
         eb:82:79:83:29:d9:5a:2e:01:a4:00:eb:64:46:14:3e:42:88:
         08:9c:f9:55:ee:5c:11:1e:42:25:a8:5c:16:27:68:dd:23:06:
         6f:76:35:86:af:9f:a0:5f:ff:1c:2b:f6:37:cf:af:91:c6:7e:
         50:df:0c:26:dd:28:d7:d9:e2:33:b0:bc:cb:4f:da:ff:af:ea:
         b2:7e:2a:b9:ed:6d:1b:b3:30:83:02:97:99:7e:38:ba:d8:4e:
         02:fe:71:8e:32:c3:13:bb:41:6d:5d:c7:6b:ac:e1:05:16:f5:
         fb:b5:ba:44:38:ac:c3:6f:9b:db:07:0e:73:37:2a:11:42:78:
         9c:2b:14:45:a6:75:c7:42:1f:b1:bd:e7:c2:30:10:36:27:22:
         c6:38:68:99:9c:08:1f:aa:fa:79:24:26:27:2b:c0:97:c9:89:
         5a:9f:bf:88:90:92:f3:7b:3b:10:fc:dc:ba:94:08:8c:18:5d:
         bd:e3:5b:3e:bc:69:85:21:25:2d:8a:06:7d:1c:a9:9f:3e:da:
         48:21:34:a1
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUaDe7QTmHMhHMOGWCEqzXQUqtkb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjAyMTcxMTQwMDdaFw0yMzAyMTYxMTQ1MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDEyRTU4Mzc3RjNEMDRCOEIx
NzBEQkQ0QjVDNEU4QjE5RENGMTA3NzE3N0M4MkY1Mzk5QTFBNjdDNjRBREIxNTU2
M0YzRDU0RDBFMkM0REJDODM3OTIwQkRFNjhGNUNGMEQwRDhBM0ZEQ0I2QTJBMTdD
M0JENThGNDEyNzBDQjI0NzFBQTFGREMxQUI0N0I4REQyMzY4MEREQUE3NzNBMUY5
OUM3QkMzQ0VDQTVFNjE0MTY0MDU2QkYzMTJFODdCRUI3QUE0QzFCODk4MDlCRDA4
QUU1QkI5MUZGNzA1QzUyMjdBOEE0MTZGQjQ0OUIyREFCMzVDMzczMUNENTE0OTk1
ODAzOTE1NzlFNUFEMjg0QTdBNEZGMEUzNkZGRTE4RTdFM0E2MDMzREU1NDkxQTI1
MTc0NDk0RkE5OTZFNzRDNTcxNzU5MkQ0NkJDQTMzOUE4MUEzMzFGQ0RBQTIzMDc2
MUE3QzUyMkQ0MTg4RTI1NjNCMzZBNjhDNjkwMjNDNTE2NDdDMDMyNEYyRjFBMDI2
OTNFRDMyMzhFNTNEMUUxMzA5QUVCMkZDRkUyQzY0NENCOUQwMDAwODBDODVENkNE
OTU4NTVFMjdCMUM4OUU3NTAyMDExRTYzNjdDQTc2QjZGM0I3RTFFNkRBQjdFRDQ4
QjkxOTFDQkI2MjEwNUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0S5YN389BLixcNvUtcTosZ3PEHcXfIL1OZoaZ8ZK2xVWPz1U0OLE
28g3kgveaPXPDQ2KP9y2oqF8O9WPQScMskcaof3Bq0e43SNoDdqnc6H5nHvDzspe
YUFkBWvzEuh763qkwbiYCb0Irlu5H/cFxSJ6ikFvtEmy2rNcNzHNUUmVgDkVeeWt
KEp6T/Djb/4Y5+OmAz3lSRolF0SU+pludMVxdZLUa8ozmoGjMfzaojB2GnxSLUGI
4lY7NqaMaQI8UWR8AyTy8aAmk+0yOOU9HhMJrrL8/ixkTLnQAAgMhdbNlYVeJ7HI
nnUCAR5jZ8p2tvO34ebat+1IuRkcu2IQWwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FAhp1V8yp5jqCz72mHTZPAffL20AMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzEyZTM0
MzEyZTMxMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMzMzIzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEALUpwDANBgkqhkiG9w0BAQsFAAOCAQEAIuAqIWC90foWnGv6krrC
67W1xzjRYk74KxxilTniDsPBDnbYqu8TV0Zwh38yvhqP71CdkeXh64J5gynZWi4B
pADrZEYUPkKICJz5Ve5cER5CJahcFido3SMGb3Y1hq+foF//HCv2N8+vkcZ+UN8M
Jt0o19niM7C8y0/a/6/qsn4que1tG7MwgwKXmX44uthOAv5xjjLDE7tBbV3Ha6zh
BRb1+7W6RDisw2+b2wcOczcqEUJ4nCsURaZ1x0Ifsb3nwjAQNicixjhomZwIH6r6
eSQmJyvAl8mJWp+/iJCS83s7EPzcupQIjBhdveNbPrxphSElLYoGfRypnz7aSCE0
oQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org