Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          vIm/j9WiW3oyaEhl7NtzDT/efv/KRGO2MIfjxQNXTE4=
Subject key identifier:   98:80:E7:2D:F4:E3:45:89:86:A0:69:29:83:A3:E8:4C:20:81:DA:D7
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       5B9D55278DE0D2EBB1251FD316734292E5647424
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:08 +0000
ROA not before:           Thu 17 Feb 2022 11:40:08 +0000
ROA not after:            Thu 16 Feb 2023 11:45:08 +0000
asID:                     61317
IP address blocks:        181.41.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9d:55:27:8d:e0:d2:eb:b1:25:1f:d3:16:73:42:92:e5:64:74:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:08 2022 GMT
            Not After : Feb 16 11:45:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:a1:8d:35:f1:2d:2c:4b:77:44:4a:77:5b:
                    ba:fd:3f:32:70:2d:12:a2:04:4b:6b:a6:33:57:8f:
                    98:9a:80:98:5e:52:57:b1:eb:dc:f9:87:50:33:72:
                    01:5f:f1:ac:57:c8:e0:c6:87:7b:14:8b:35:05:76:
                    6d:42:c2:96:79:ae:73:42:0c:06:97:6e:7a:81:5d:
                    35:3b:18:df:31:6d:08:32:d9:5c:32:b3:f7:04:88:
                    4d:e5:46:8d:ef:2b:c8:eb:d1:43:5e:7a:ee:1f:64:
                    3e:76:98:57:ab:e7:5d:19:1b:1a:f7:ad:cc:c0:6a:
                    e2:f0:ac:6b:82:d9:c8:13:62:a2:74:52:a7:e6:f8:
                    34:b4:51:f9:4a:76:79:bb:1a:d5:11:0c:56:3f:22:
                    e7:f0:83:a3:9d:cf:be:75:66:80:db:2b:4c:31:0c:
                    88:a2:e6:1f:84:88:81:d5:b3:57:a3:f1:9c:e5:eb:
                    76:a9:7e:d8:51:7c:90:ae:fd:f1:75:67:75:0d:32:
                    01:62:f4:ef:29:a5:e4:d2:ab:4a:e4:5a:f8:c2:36:
                    09:f0:fa:ba:fa:e6:72:57:55:5e:e8:d8:e0:01:59:
                    25:72:92:70:87:ad:ba:75:a5:18:d1:f3:a1:e6:d4:
                    22:f9:17:12:d7:4f:56:de:aa:e9:cc:54:c4:34:07:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:E7:2D:F4:E3:45:89:86:A0:69:29:83:A3:E8:4C:20:81:DA:D7
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:f8:12:21:ba:cb:c1:c9:9d:2d:f1:44:9a:ce:00:7c:35:cb:
         64:7d:d7:06:83:5f:e4:2f:8d:1d:dd:39:83:06:bb:59:20:53:
         4a:64:fe:26:37:c4:53:f3:75:9e:ee:24:fc:30:b3:d9:02:a2:
         8a:88:54:95:10:56:ec:84:56:a0:cb:80:35:16:fb:9b:52:58:
         c4:05:24:2a:8a:81:99:0c:23:6a:ed:41:a3:0f:43:19:8a:a6:
         ca:ed:d0:95:60:6a:b0:34:05:b4:99:c2:8f:fe:7f:0f:f5:a3:
         e5:14:5f:34:39:56:91:1e:4c:47:ae:98:78:90:90:c3:e1:01:
         67:03:df:32:42:84:a7:30:49:7a:ba:b1:a6:4d:07:ff:0d:d9:
         ff:3f:7a:af:30:8f:b8:0f:59:9d:8a:fe:d3:f0:f7:e1:e8:03:
         e4:a5:eb:74:21:83:31:1e:ab:9d:e8:35:14:4b:ed:7a:45:2a:
         40:51:a2:70:0b:27:6d:73:c9:6b:fc:c4:9f:57:b6:75:c1:44:
         18:87:83:30:be:8e:2a:5f:a8:d3:7e:a6:e0:a6:0a:b6:58:e0:
         7a:97:88:3f:31:c2:3e:35:dc:f4:2e:f8:4b:57:67:f2:60:96:
         a3:83:d3:94:f9:cf:52:b4:31:b5:a2:74:e2:06:c1:d2:d3:9e:
         81:9a:63:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org