Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139352e302f32342d3234203d3e203430363736.roa
File:                     3138312e34312e3139352e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          6jm7bGPKW/DOWXczPOCyJvkSPRTQVyxaR17xLQYhZc4=
Subject key identifier:   91:79:DD:D6:BA:B4:73:93:11:9D:E2:F1:9B:8E:2B:CC:F7:E7:8B:69
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       7FED2D3528AAEB7137456FC9158ADF3B890D12FC
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139352e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 14 Mar 2022 10:55:07 +0000
ROA not before:           Mon 14 Mar 2022 10:50:07 +0000
ROA not after:            Mon 13 Mar 2023 10:55:07 +0000
asID:                     40676
IP address blocks:        181.41.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ed:2d:35:28:aa:eb:71:37:45:6f:c9:15:8a:df:3b:89:0d:12:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Mar 14 10:50:07 2022 GMT
            Not After : Mar 13 10:55:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:49:4d:cd:af:72:de:4e:ec:5d:fc:4e:2e:
                    de:22:dd:e0:87:8d:4a:16:fd:33:7f:19:1a:48:89:
                    4c:8a:d8:51:0b:07:2a:6d:63:d9:fe:da:49:25:fa:
                    5b:6f:67:97:3d:05:77:f0:b9:2d:b6:12:db:56:e0:
                    1d:50:5e:d0:28:31:b5:2b:3c:e3:47:18:f3:bf:3c:
                    e4:75:cc:4b:b0:81:2d:2d:51:60:0f:93:67:b1:c4:
                    82:ba:b1:80:8f:56:9c:1a:14:b5:3c:64:9f:24:87:
                    5e:1a:69:60:80:6b:9e:61:c6:ae:9c:47:4f:06:b0:
                    f2:b4:ed:18:79:4c:d8:c4:0d:50:2e:5e:6a:96:9e:
                    b2:ea:b9:6b:6a:c4:97:83:42:47:78:47:10:d8:ec:
                    85:0c:15:de:7c:d0:89:57:44:05:ad:d6:1a:5b:bd:
                    6e:e5:e0:26:48:b9:43:db:86:c2:3b:f4:36:3c:4e:
                    e0:ef:60:37:e4:f6:6f:7d:a5:0b:17:01:fa:b4:83:
                    6a:74:02:fd:1b:98:23:91:eb:e1:86:9e:04:2b:d9:
                    31:59:23:bd:6f:ab:67:de:8e:c1:3b:8d:7a:eb:ed:
                    04:75:22:8b:03:fd:0e:b5:f4:c1:7e:87:14:b2:54:
                    98:24:b0:50:32:e8:5f:d0:8e:31:24:b5:3e:27:0e:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:79:DD:D6:BA:B4:73:93:11:9D:E2:F1:9B:8E:2B:CC:F7:E7:8B:69
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139352e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:c1:b5:b4:e5:9d:8d:33:a4:e1:2c:db:77:bd:03:00:90:
         c5:45:41:7c:3a:e2:db:d4:cc:a0:32:8b:87:75:f4:58:6e:f6:
         20:c8:e7:80:08:53:29:bd:14:54:17:f1:7b:3d:04:36:11:d0:
         10:f5:d9:35:86:b6:ee:d3:e1:a1:58:5d:47:79:7d:d3:d5:e3:
         e2:5f:30:4b:fc:ae:17:3c:ea:94:de:0b:d4:60:b2:bd:5e:cf:
         6d:10:6f:3d:8e:d3:3f:68:b6:7b:72:93:a4:2e:29:d1:78:69:
         77:d1:b3:19:1e:86:51:35:34:ed:79:50:93:c5:c1:2a:22:1a:
         73:ea:37:b4:90:3e:c8:e0:b0:99:4c:fe:7a:6c:57:35:6a:86:
         fb:1c:c9:6d:88:2c:0b:8c:37:de:7c:71:c2:42:f2:65:73:6f:
         38:c8:4f:b5:23:c0:fd:72:f0:3d:50:76:bb:03:23:8f:48:db:
         78:ab:9c:3d:72:d0:58:1e:d1:fd:4c:bf:6d:de:cf:0d:58:33:
         ef:b7:b3:be:e5:aa:a8:72:7f:61:54:db:92:a2:75:b5:de:38:
         6f:9f:7e:ca:62:6f:fc:80:ea:0b:7c:08:08:00:16:44:3c:2c:
         d8:5b:a7:4e:9a:d9:57:0d:15:06:7b:72:1a:30:6b:77:db:0b:
         33:90:f1:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org