Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139342e302f32342d3234203d3e203433333530.roa
File:                     3138312e34312e3139342e302f32342d3234203d3e203433333530.roa (raw, json)
Hash identifier:          hkFM1bpNBx8j5Ee18iHpBbBZ7oC+qnBT9xTBm2C4o5Y=
Subject key identifier:   43:16:DF:CD:FA:D9:6A:35:D0:34:98:81:C6:06:01:F6:6E:69:DF:05
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       7C419A23D5D609BFD07BDF15DBB87A776AA0C568
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139342e302f32342d3234203d3e203433333530.roa
Signing time:             Sun 06 Mar 2022 06:53:26 +0000
ROA not before:           Sun 06 Mar 2022 06:48:26 +0000
ROA not after:            Sun 05 Mar 2023 06:53:26 +0000
asID:                     43350
IP address blocks:        181.41.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:41:9a:23:d5:d6:09:bf:d0:7b:df:15:db:b8:7a:77:6a:a0:c5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Mar  6 06:48:26 2022 GMT
            Not After : Mar  5 06:53:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:e6:f1:f1:07:c6:6d:87:09:b7:35:26:24:
                    2b:13:e7:23:c5:f8:b0:19:ca:05:08:0f:19:18:06:
                    03:b3:41:1a:d2:c7:75:7e:e3:69:e1:26:31:34:51:
                    14:e1:6b:a0:86:e0:d8:e6:ab:b8:ed:86:8e:b8:7c:
                    ff:28:af:e4:4f:ce:02:33:db:9b:87:c7:cf:07:28:
                    36:c6:c9:f8:b9:1b:22:be:30:ea:0f:81:8e:ce:5b:
                    c7:56:c6:4e:ad:9b:98:56:da:1b:9a:94:8e:27:04:
                    87:ce:33:45:8f:45:0b:1f:00:fb:44:f1:7d:af:6d:
                    99:4f:b7:af:ad:e3:9a:5b:d1:78:e7:13:92:e8:60:
                    5f:ce:e9:60:c4:00:2e:e9:b9:ae:44:71:6f:a6:d5:
                    e5:bb:9c:e9:be:69:ea:ed:73:d8:d7:3c:44:13:98:
                    4a:06:62:fd:d9:12:c8:86:82:d6:5a:8a:d8:d0:b5:
                    e4:e4:51:7d:b5:5f:ce:45:02:77:de:76:9c:26:5f:
                    49:8d:ca:d6:4c:92:b2:d9:70:29:87:77:5b:33:eb:
                    35:b1:69:03:0d:94:4d:7c:dc:e0:55:d0:d3:82:4f:
                    1c:55:a7:4b:ef:13:58:63:dc:e8:46:ba:3c:85:9b:
                    c2:2a:e9:15:aa:87:98:d5:22:ba:0a:79:ff:a6:b6:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:DF:CD:FA:D9:6A:35:D0:34:98:81:C6:06:01:F6:6E:69:DF:05
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139342e302f32342d3234203d3e203433333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:dd:ec:07:64:a7:ff:35:ac:2b:80:c7:69:6e:35:98:f7:
         70:1b:03:cd:52:b4:9a:53:37:6b:9e:ae:b7:c0:7e:89:6c:cc:
         bf:89:67:d5:40:fa:8e:4e:4d:99:90:8d:6f:5d:33:5f:b6:27:
         48:56:f5:18:82:cf:b6:08:1e:c9:48:ab:e2:e7:6c:3f:c6:35:
         4e:05:44:d9:1e:61:d4:da:ef:e3:fa:f4:8b:b0:ac:da:2a:ee:
         b3:c3:46:80:25:44:f1:cd:10:27:ca:70:03:10:d5:cf:da:a7:
         b4:c4:aa:14:ee:e2:be:bb:62:c1:47:fa:0b:f7:49:49:93:53:
         cf:f1:c8:a8:d3:b5:73:4e:ea:43:e3:53:05:b1:f2:ff:de:ca:
         49:17:d1:9f:d9:32:51:b1:47:16:9e:40:9b:85:f8:9a:eb:0e:
         80:1a:61:8a:f7:aa:68:0b:15:b2:cb:29:47:2f:fe:5b:3b:f6:
         a2:5b:bd:d4:9b:0b:fc:16:84:0f:c4:c6:93:5c:34:b2:f6:50:
         34:bf:12:b1:11:62:1d:74:4e:45:f5:ed:23:63:03:6e:15:87:
         22:a0:27:b2:ac:f0:b3:d5:38:0c:24:89:d7:1f:03:83:8e:d5:
         6d:7a:8f:06:c4:73:b4:d3:86:c4:4b:10:3b:7a:6c:95:76:1e:
         ab:32:e7:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org