Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0LRPMF1dne9uo6U2ve7ZJ0knMls9UOcthjMW9Vfh2zs=
Subject key identifier:   24:B4:97:3E:A8:24:9B:02:61:3D:62:F9:39:46:A1:F0:6A:6F:95:30
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       5F78AFD4A6FB232FAA56C0046094437D3A98C480
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:07 +0000
ROA not before:           Thu 17 Feb 2022 11:40:07 +0000
ROA not after:            Thu 16 Feb 2023 11:45:07 +0000
asID:                     61317
IP address blocks:        181.41.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:78:af:d4:a6:fb:23:2f:aa:56:c0:04:60:94:43:7d:3a:98:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:07 2022 GMT
            Not After : Feb 16 11:45:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:eb:c0:a9:94:7f:bc:95:ce:26:15:1f:fb:
                    96:f5:dd:7c:4f:13:5e:dd:1d:34:a0:1d:7d:1c:b2:
                    73:7c:05:cd:b1:3d:63:46:6b:c7:ae:33:5a:b2:9f:
                    aa:6f:4f:d3:6e:c8:92:5d:82:2d:a5:58:ae:a0:c3:
                    6a:38:fa:09:4f:2a:a5:6c:b6:0b:d2:88:87:a6:9c:
                    93:64:b7:b0:e4:98:8c:3c:37:ac:6f:91:08:f9:9d:
                    de:ae:27:f9:e7:63:be:40:6d:47:16:ac:f5:99:46:
                    9d:2b:e2:50:48:7e:bd:bc:6e:53:3d:5e:96:fa:e1:
                    5f:13:3a:3c:52:61:e1:66:c8:a8:54:51:80:68:b8:
                    d5:36:08:ea:d1:f0:f6:e5:5f:b7:5c:2d:3c:e7:27:
                    ea:81:36:ca:b5:e0:2f:d7:ce:66:a4:53:2c:34:b4:
                    d4:ed:16:fd:d2:59:9b:40:81:d1:73:11:34:0e:b4:
                    eb:c7:7a:0c:3a:a5:3a:54:2f:5c:7e:eb:da:b3:0d:
                    6a:e6:d5:42:61:64:17:98:e3:a1:76:62:8c:c8:52:
                    6f:99:40:1d:a8:97:4d:25:6e:8a:53:62:8d:ae:26:
                    11:ed:45:0a:40:f7:2d:27:8f:a8:bc:3f:9e:c6:fc:
                    28:31:4a:52:1b:c5:1d:0d:72:bd:08:ce:8f:63:62:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B4:97:3E:A8:24:9B:02:61:3D:62:F9:39:46:A1:F0:6A:6F:95:30
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:64:5f:c4:4a:e2:f5:d3:c3:75:a7:e5:9d:13:d4:65:fd:3a:
         23:25:8b:29:93:4a:b3:1a:aa:b8:5c:f1:49:5d:02:ca:ef:4d:
         7a:16:3a:a8:10:0c:8c:c0:7c:48:2a:6b:49:8b:9a:6a:fd:ad:
         0a:80:ea:ff:1c:25:a2:4a:79:6d:0d:02:bb:86:20:0b:30:4b:
         bc:75:9b:7e:5f:28:c6:04:ab:17:ea:c6:cb:94:5b:47:95:ab:
         ab:fc:3f:ae:ab:38:ca:07:d7:fe:fe:cb:a0:65:d2:59:6c:53:
         c0:90:ff:c5:6b:9b:8b:8b:b0:4e:f4:68:d4:8e:cc:2e:37:41:
         18:d2:c9:ab:a6:34:69:87:bc:33:aa:a1:37:56:0b:2a:47:82:
         51:b3:df:0b:78:2a:3e:ae:e4:4f:90:e6:21:ee:d9:44:a4:3b:
         6b:92:cf:66:53:a4:ae:40:d9:a1:67:7b:a5:5f:38:bf:8a:66:
         9e:59:73:06:3f:cd:99:41:f7:32:b2:7f:71:2a:d8:5d:37:bf:
         0a:37:c3:e0:ee:24:0e:96:6c:ab:4b:be:dc:ae:ff:ad:57:0d:
         09:94:cb:37:e0:30:66:ef:e1:e0:d9:45:01:21:11:68:28:57:
         52:90:da:cc:e7:04:d3:51:b0:20:dc:9c:a3:8f:dc:e0:29:f3:
         8d:99:3c:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org