Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          kAUQv4dka57HpwnmZnpn3SQDOmVRgs5B2E1BBac+aAA=
Subject key identifier:   0B:EC:D8:ED:DA:BD:64:33:B7:83:26:4C:8E:2E:45:41:1C:4A:D5:57
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       0FA84A552AAEA85235C7C5534252A0CAD995B720
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        181.41.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a8:4a:55:2a:ae:a8:52:35:c7:c5:53:42:52:a0:ca:d9:95:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:98:66:87:6a:38:fe:99:fb:2a:cb:2e:72:
                    5d:14:9c:14:af:e9:0f:cf:9e:15:8c:88:a9:b6:48:
                    e2:91:c4:79:c7:3e:0e:e1:d1:b3:ec:a4:fa:85:74:
                    e3:40:ec:aa:e7:a2:af:ee:4d:25:4d:9b:aa:5e:6d:
                    c6:7d:2c:fd:04:22:b2:a6:b0:60:ca:84:27:37:19:
                    77:60:46:81:5d:c1:89:83:85:fe:17:c3:a6:af:24:
                    6a:8d:94:1e:af:e9:23:f6:b2:7d:40:26:50:5f:e1:
                    51:3f:75:f5:32:96:3f:94:d8:3d:40:7f:38:a0:f0:
                    c4:78:c3:e8:73:0e:a6:14:8c:eb:75:14:a4:3b:d2:
                    56:4a:82:6d:5b:e6:24:2f:31:4e:05:d2:5c:0c:e0:
                    9f:dc:a6:13:0c:8d:f6:4f:37:e3:4f:8c:88:d8:ba:
                    94:fd:37:2e:1a:6b:1e:4f:53:88:c5:46:c4:3c:18:
                    72:c1:f3:59:3b:be:ad:b9:cb:8f:0e:f9:6b:ef:b9:
                    e4:3e:cf:16:f7:bd:7b:be:1e:0d:a9:5d:1e:4d:fa:
                    e7:06:c4:78:b7:28:e2:b7:62:72:0f:ce:30:95:c0:
                    61:df:64:19:79:82:51:22:8b:07:56:17:3a:7f:28:
                    58:a0:ee:6d:98:ea:29:ba:7f:db:90:9e:30:c5:49:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:D8:ED:DA:BD:64:33:B7:83:26:4C:8E:2E:45:41:1C:4A:D5:57
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:ad:0f:6e:45:e8:55:04:7f:de:5b:bc:46:7c:b3:23:b9:
         ba:4b:3f:58:0d:bf:14:f7:dd:1b:2a:71:d8:71:95:99:73:c7:
         3d:49:0f:5a:6e:dd:f4:3d:aa:83:a8:f9:be:87:e8:9f:6c:b4:
         d2:f7:9e:54:9b:8b:cc:bc:9c:ab:5d:25:28:a8:93:d1:ac:52:
         58:97:75:a1:22:39:55:ff:da:3d:3f:f4:ed:7b:32:3d:8a:6c:
         14:81:1b:ed:33:69:4b:7a:d6:f3:85:6f:b6:67:69:08:6d:74:
         99:c5:ff:56:fc:98:69:6e:9d:a6:00:bf:d9:6d:87:e5:a1:61:
         36:28:56:1e:ea:f3:a9:18:ac:be:f6:c4:0b:c2:7c:32:c8:8e:
         23:53:c4:91:27:5a:9d:38:92:d3:05:4c:4e:d3:12:0f:c5:99:
         8b:cf:d6:18:c6:8e:e8:88:a0:b5:86:9a:b2:ce:9a:76:76:8e:
         9e:79:bc:04:d0:7f:29:bd:c3:74:ee:1f:68:05:48:25:d9:35:
         5e:98:e8:13:48:33:90:2c:c1:97:08:e6:a1:4f:8f:5f:72:c0:
         16:85:98:63:e4:04:a9:9d:7c:22:bb:db:a9:c3:1b:a9:0e:fe:
         1c:07:33:59:ea:18:43:2d:84:26:5f:40:b3:69:8f:de:ad:c6:
         60:31:28:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org