Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          S2ZjwtUh4+/ur2v6Pv8Nw35/ws/4flDNKfTYs4BbfIE=
Subject key identifier:   A9:06:30:3F:1A:28:C5:7E:98:40:7B:49:2B:70:B0:66:2F:B0:8C:22
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       3D46CCCA83137E267A83971511F3907F59F7A483
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:07 +0000
ROA not before:           Thu 17 Feb 2022 11:40:07 +0000
ROA not after:            Thu 16 Feb 2023 11:45:07 +0000
asID:                     61317
IP address blocks:        181.41.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:46:cc:ca:83:13:7e:26:7a:83:97:15:11:f3:90:7f:59:f7:a4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:07 2022 GMT
            Not After : Feb 16 11:45:07 2023 GMT
        Subject: CN=3082010A0282010100CB0D5C17F340785C641D22188D778788E36FC1085303D37C41F33AAE1A44B66E465AB7F2AE05EBDD3491C7965808665755ECDE2BF0399409C6EB7EA4CB465C607673816B7CEC690DB12028857BEDB8DBE614E735BA3F8F858353A9AEFFD286ECD93537EE5F8E39FDAF73EF8D9D9641D72D16190B73BB56BD256E52CBAB6A22D732E817BB6E829BA0620F8091BA5F0536009666B357C33827B16ACD901EC0E97A73A12C149A0696C05433D6280901E9D65186DF2389746B7137DC76EFE2248CFAB9E59A5455CE521BC5F7A8A2350EDF29D37D5390346169DE69455EF34E5FC8BD7DB0F25F13F6BDD2036B0C009C1CA3905A51E3A8111980A3A22E4937E2F685D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:5c:17:f3:40:78:5c:64:1d:22:18:8d:77:
                    87:88:e3:6f:c1:08:53:03:d3:7c:41:f3:3a:ae:1a:
                    44:b6:6e:46:5a:b7:f2:ae:05:eb:dd:34:91:c7:96:
                    58:08:66:57:55:ec:de:2b:f0:39:94:09:c6:eb:7e:
                    a4:cb:46:5c:60:76:73:81:6b:7c:ec:69:0d:b1:20:
                    28:85:7b:ed:b8:db:e6:14:e7:35:ba:3f:8f:85:83:
                    53:a9:ae:ff:d2:86:ec:d9:35:37:ee:5f:8e:39:fd:
                    af:73:ef:8d:9d:96:41:d7:2d:16:19:0b:73:bb:56:
                    bd:25:6e:52:cb:ab:6a:22:d7:32:e8:17:bb:6e:82:
                    9b:a0:62:0f:80:91:ba:5f:05:36:00:96:66:b3:57:
                    c3:38:27:b1:6a:cd:90:1e:c0:e9:7a:73:a1:2c:14:
                    9a:06:96:c0:54:33:d6:28:09:01:e9:d6:51:86:df:
                    23:89:74:6b:71:37:dc:76:ef:e2:24:8c:fa:b9:e5:
                    9a:54:55:ce:52:1b:c5:f7:a8:a2:35:0e:df:29:d3:
                    7d:53:90:34:61:69:de:69:45:5e:f3:4e:5f:c8:bd:
                    7d:b0:f2:5f:13:f6:bd:d2:03:6b:0c:00:9c:1c:a3:
                    90:5a:51:e3:a8:11:19:80:a3:a2:2e:49:37:e2:f6:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:30:3F:1A:28:C5:7E:98:40:7B:49:2B:70:B0:66:2F:B0:8C:22
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:6a:de:5c:06:7a:bf:fa:38:97:c2:f7:6b:80:d5:e6:aa:c2:
         5f:9d:9c:f8:b5:13:41:77:67:aa:3c:0f:f8:05:c8:e5:bc:ef:
         7d:57:18:b9:6e:99:ff:aa:7a:5b:31:38:e3:73:e0:2c:ac:42:
         66:03:96:05:85:85:dd:72:38:fb:7e:34:06:2d:00:cb:aa:1d:
         71:2b:89:95:87:a6:26:56:fb:eb:f5:a9:e9:7f:3b:d2:7b:09:
         39:f3:fb:d4:40:12:08:2f:c8:f9:64:0a:ec:2e:74:af:29:ea:
         33:64:f4:53:c8:65:9a:b7:f7:25:1e:57:3d:91:5c:58:04:03:
         5d:9a:a5:03:77:55:13:bb:18:73:16:be:1e:0b:b5:80:89:ee:
         49:4e:4e:73:6d:44:d0:2d:81:e2:9a:a2:f6:ef:a4:07:dd:30:
         b9:1c:c3:85:b6:f3:c2:91:6b:77:6c:df:cc:cf:b9:48:0b:64:
         8b:43:42:61:e9:bf:e5:32:a9:20:66:b4:6f:2e:a3:68:6f:35:
         fc:a5:f0:4f:58:d1:ea:7a:70:0b:d0:f7:c0:2e:47:24:62:27:
         cb:0f:f5:46:00:f8:ff:03:c9:a6:ae:37:13:68:31:52:cb:ef:
         92:05:5e:7c:19:28:1b:54:a5:9a:2b:15:d4:ee:4e:41:3f:e7:
         ee:36:9b:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org