Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139352e302f32342d3234203d3e20323037333236.roa
File:                     3138312e34312e3139352e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          8e/cfTdvuNPeB5uOBmUygWUwZCGq3UCFI/X+SAFRlIk=
Subject key identifier:   FA:78:AC:E6:DA:00:BC:91:B5:64:35:D0:46:2A:9A:00:11:25:CA:A7
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       611861972E09809A78E7B77C62C7D548E3556398
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139352e302f32342d3234203d3e20323037333236.roa
Signing time:             Thu 17 Feb 2022 11:45:07 +0000
ROA not before:           Thu 17 Feb 2022 11:40:07 +0000
ROA not after:            Thu 16 Feb 2023 11:45:07 +0000
asID:                     207326
IP address blocks:        181.41.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:18:61:97:2e:09:80:9a:78:e7:b7:7c:62:c7:d5:48:e3:55:63:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:07 2022 GMT
            Not After : Feb 16 11:45:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:1b:16:47:c0:6c:8a:60:fa:43:64:c7:0d:
                    23:80:bd:8c:64:43:58:95:9f:20:f1:71:c3:23:72:
                    ad:1b:55:04:c1:a9:3d:98:b4:03:50:9f:cb:3a:10:
                    e5:80:1f:ca:df:e2:8f:56:45:f8:f6:24:01:6d:b4:
                    39:4b:90:cd:dd:ad:f2:1b:dd:06:28:6a:14:87:70:
                    a0:29:9c:fe:80:01:d9:bf:a0:33:8d:1f:a0:a1:d5:
                    50:37:14:f8:d4:b3:e3:bc:10:9e:d6:ee:8d:20:89:
                    94:b5:07:d0:c4:0e:1a:d5:62:d8:63:20:19:1a:b8:
                    c8:ff:46:eb:e9:b8:84:a8:0c:84:ba:f6:b0:b9:aa:
                    2e:51:c1:db:6e:44:2e:ec:6a:3a:fc:d3:c2:9d:49:
                    1c:cd:c3:85:cb:f3:27:87:f3:cc:30:ff:3f:d1:39:
                    4a:e4:98:08:27:3f:8d:de:ac:73:31:2a:56:34:fe:
                    89:fc:bf:56:35:3a:5c:54:8c:1b:e0:79:95:ea:12:
                    77:d1:df:82:76:f2:27:1d:31:1c:78:b0:ac:77:33:
                    c6:09:94:b3:62:f5:08:ae:1e:8d:17:3c:c2:60:32:
                    36:ae:44:5b:fb:65:19:05:fb:8d:74:d8:1f:e2:14:
                    3c:e1:fe:d5:e4:fc:50:6b:80:b6:1b:60:2b:b5:02:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:AC:E6:DA:00:BC:91:B5:64:35:D0:46:2A:9A:00:11:25:CA:A7
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139352e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:23:5d:94:f4:a0:f2:76:68:5e:71:67:87:6a:ba:e2:a2:
         e5:b1:b9:0f:b5:be:84:52:59:06:70:d6:2d:54:5b:d1:f0:cd:
         88:44:3a:fb:d1:7b:c6:91:e9:38:c5:00:7c:54:63:97:7d:c0:
         a6:0c:f1:73:35:9e:a4:6f:f3:f8:ef:c9:85:2f:30:03:82:99:
         95:06:74:f3:08:f5:94:66:27:5a:9f:3e:b7:67:de:08:34:c9:
         e9:64:c3:9a:e4:65:f7:2f:d7:a0:8c:4e:e2:4f:2f:e6:40:a6:
         4e:5d:8c:0c:1b:4c:57:8c:9b:92:99:fc:e3:0d:1c:44:e1:68:
         92:0d:53:dc:5e:d8:79:15:4d:e0:b6:af:af:6b:94:f1:0f:64:
         92:f0:9c:ab:5c:ef:cb:9b:5a:cf:f0:6e:1c:26:5f:a5:f1:9e:
         a8:ac:f0:75:33:a5:51:5e:19:79:bc:00:ff:3a:3f:64:60:da:
         c7:73:d5:fb:fb:de:ee:cf:ea:98:7a:b9:9a:4e:2b:e0:f7:98:
         84:d4:bd:8a:a4:f4:8f:bc:33:0d:ee:b3:89:a5:1b:a4:d0:8b:
         e3:13:fe:ea:93:a7:ae:cb:d2:e2:29:13:a6:1c:d0:c5:cd:ee:
         df:c6:7d:38:23:87:89:90:22:fd:28:18:e4:1a:76:b0:61:3d:
         72:4a:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org