Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa
File:                     3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          nsBWJrppK/hpMBcOFYfCHG1uYvzR/o/4HS7nAUPfG2U=
Subject key identifier:   10:50:1C:A3:15:AA:9D:7B:E4:15:5A:1E:6D:F5:52:18:F9:E7:C6:CC
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       4ADEC2F1C1DD4812D8AB3C7265A83C146FAC74F0
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     270564
IP address blocks:        181.41.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:c2:f1:c1:dd:48:12:d8:ab:3c:72:65:a8:3c:14:6f:ac:74:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:f3:34:cc:ea:39:94:56:ca:5c:e0:f9:39:
                    06:5a:39:9e:76:0f:04:ae:d8:f8:4a:31:81:41:1b:
                    70:b3:96:c5:e5:90:e5:10:79:0a:64:d1:02:1a:ff:
                    67:18:fa:3a:e7:52:84:26:86:7e:8a:f9:88:cd:a6:
                    fd:72:3f:44:3e:49:40:50:5c:c6:1f:26:1c:be:63:
                    9e:09:70:c8:63:33:55:86:5a:e9:d2:fe:e9:ff:fc:
                    fa:d7:e8:e8:12:47:bc:91:4b:49:c9:a1:8e:7b:d4:
                    bd:44:77:45:7d:ea:08:d8:e0:d4:41:d7:df:48:b1:
                    55:68:c1:a8:28:80:05:3f:ca:da:9d:fe:8d:ef:7a:
                    5d:af:67:93:6b:a4:96:4f:5d:19:6e:79:a6:6b:2d:
                    ee:ec:e0:8e:b0:87:ff:62:fc:80:94:f5:7e:b2:14:
                    67:12:89:32:b5:d7:2c:ea:8b:f4:ee:9c:3e:b9:71:
                    48:37:2b:61:59:dc:e4:ea:e1:68:ca:b8:03:73:25:
                    24:35:7c:de:95:87:ad:7b:e1:c3:9a:88:a0:5c:45:
                    8d:59:a0:3e:cc:aa:c5:14:51:82:5e:76:51:78:0c:
                    ef:c4:b3:f7:ca:4b:b2:ab:02:8b:30:fd:72:e6:81:
                    ee:76:95:61:c1:92:24:e9:bf:62:6e:d5:d4:46:bd:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:1C:A3:15:AA:9D:7B:E4:15:5A:1E:6D:F5:52:18:F9:E7:C6:CC
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:98:27:4f:2b:f1:8b:83:98:45:1d:27:79:0d:eb:10:f4:
         23:5a:36:0a:da:22:76:ca:f1:0e:0e:b2:cf:cf:c0:dd:65:c0:
         bf:45:93:5e:a1:31:09:9b:0b:2c:8f:d5:75:8c:c0:19:e6:10:
         9b:54:a8:05:b8:7b:95:1d:a1:eb:8c:b5:d8:ee:59:ec:ea:2e:
         70:0d:62:8a:4a:03:16:f2:0f:69:4f:9e:95:98:7c:b2:e9:05:
         fe:0f:58:f2:d9:14:ce:3e:62:df:60:4c:56:38:75:b9:16:0b:
         41:b2:04:2e:95:4e:09:1a:90:be:87:4e:24:5c:a6:ce:92:30:
         20:98:23:f2:f3:19:76:69:95:80:b2:47:f9:85:85:2d:ba:b8:
         ac:40:df:21:25:4e:f1:17:4e:9d:c8:bc:3b:3a:40:a8:bd:7b:
         6b:c4:fd:1f:99:d7:58:da:9c:5e:a4:d3:e9:d9:44:e6:b5:6f:
         d9:40:3e:d6:41:78:af:40:82:b9:17:c3:3b:26:94:ac:08:72:
         a6:56:7e:1c:dc:7e:73:d6:88:6c:3c:cc:d1:78:ee:ec:d6:01:
         2e:7a:65:50:16:6b:6f:9d:b5:91:d3:57:b6:9f:f6:af:9c:f3:
         cf:60:1d:bd:24:60:48:d2:48:c0:7f:df:a7:8d:ca:3d:41:e6:
         9d:0d:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org