Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          OBGYRnvXHr+0c/CjQ6YSTOjfo3sCZGoyvoYHbK+8Rws=
Subject key identifier:   08:C7:4F:CA:9D:49:DE:2A:88:26:C8:A5:DE:B7:B1:2A:1F:C4:DF:1A
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       572096D67F9A61441AD69CA9FF4ADA456CAB4E7D
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        181.41.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:20:96:d6:7f:9a:61:44:1a:d6:9c:a9:ff:4a:da:45:6c:ab:4e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:67:a3:84:82:ae:b2:ea:51:e5:b2:ea:09:
                    88:c3:76:b3:da:19:37:05:82:63:49:06:4e:ed:87:
                    e0:48:97:37:98:95:c5:aa:ca:6d:da:a7:4d:59:ac:
                    08:90:38:5d:6e:cb:f0:52:b1:c6:80:57:d8:96:00:
                    97:bf:0f:d5:15:1e:e8:99:d9:ba:60:16:72:db:b3:
                    07:39:52:87:6a:06:be:f9:c6:d2:df:50:80:0f:41:
                    55:65:34:23:09:8d:12:47:7e:87:4e:5d:9d:d4:e7:
                    ce:6e:98:a7:01:b2:e7:83:9c:3c:8c:2f:48:87:3d:
                    a8:3d:58:95:46:7d:8e:50:43:00:83:42:82:44:18:
                    0f:7e:63:19:a9:06:d4:57:24:29:5f:3c:3f:1f:84:
                    f5:26:77:41:fb:39:6a:ea:42:38:92:25:6d:ff:9e:
                    7f:0c:4b:2b:0a:d4:06:88:0c:a9:d6:b9:d0:9e:ec:
                    16:5c:9b:a3:32:ae:f9:85:30:d1:38:ec:71:db:80:
                    df:ad:f2:4e:77:6e:2a:24:5a:49:ec:92:a4:55:e9:
                    37:bf:60:bf:e0:fc:a7:59:b4:ae:e1:8b:c6:19:16:
                    8c:8c:83:b9:96:be:90:6d:e9:5c:c0:bf:4a:b1:11:
                    a8:87:49:8a:02:7b:e6:76:34:48:91:b2:e1:26:98:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C7:4F:CA:9D:49:DE:2A:88:26:C8:A5:DE:B7:B1:2A:1F:C4:DF:1A
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:69:55:04:92:58:50:ed:3a:d2:bc:5e:cd:22:d6:8f:d4:a1:
         a8:47:f0:0a:e1:10:ba:d5:87:88:2c:8d:60:ab:c4:62:03:61:
         18:f2:b9:9f:52:7b:6f:c9:d3:de:3b:94:ec:f1:2a:f1:2c:da:
         bc:0a:7d:c5:2d:ee:f6:ce:03:4d:16:6d:e0:de:e0:8d:54:5c:
         8c:b2:85:24:2a:a8:96:d6:4b:20:92:f1:b9:8d:f6:07:d9:e0:
         d8:99:b3:4f:9d:d6:65:61:cf:b8:b4:f8:17:ce:cf:1b:83:4b:
         44:2a:1f:2d:ec:f1:97:a5:18:6e:0b:56:a0:38:aa:ed:14:59:
         52:3b:8d:1f:c9:54:81:3d:80:ec:93:a8:62:e8:45:e7:f9:0a:
         d4:70:36:30:8d:f7:f7:46:05:cf:d7:2e:c1:16:2a:78:4e:b3:
         f0:6a:a6:b9:f1:4e:76:98:2d:f6:07:16:9b:91:cc:c1:52:1c:
         e7:8a:47:39:4d:c7:23:05:db:bf:6d:9d:63:e0:e3:ca:5e:51:
         d1:a4:33:3a:d0:e4:d9:ce:08:10:65:29:08:6c:35:6b:4f:89:
         c4:5c:c8:46:00:5b:26:52:ca:72:ee:8a:a9:d4:23:1b:2c:60:
         54:c2:61:df:44:09:cf:a6:8a:26:b0:25:d4:05:73:dc:da:67:
         27:75:85:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org