Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e20313734.roa
File:                     3138312e34312e3230322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          Zrv6TnEFeMaOoTzZf9glVDAmUbrU6lUg8BpBPzoSZI8=
Subject key identifier:   9C:DF:27:63:CE:7D:D1:8F:9B:56:97:95:A3:7B:14:A0:49:E6:9F:CC
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       241CE5B4BCEB7C70A7D0D2AF11853297C1BF0302
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e20313734.roa
Signing time:             Fri 06 May 2022 14:44:59 +0000
ROA not before:           Fri 06 May 2022 14:39:59 +0000
ROA not after:            Fri 05 May 2023 14:44:59 +0000
asID:                     174
IP address blocks:        181.41.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1c:e5:b4:bc:eb:7c:70:a7:d0:d2:af:11:85:32:97:c1:bf:03:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: May  6 14:39:59 2022 GMT
            Not After : May  5 14:44:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:39:5f:41:d9:17:f4:00:2f:0d:45:80:19:
                    b3:a1:1c:d7:74:6d:7c:9b:87:37:cf:2e:4c:e6:20:
                    db:7e:0d:c7:fb:bb:39:10:af:02:5e:bf:4e:b1:a0:
                    bd:c4:ef:aa:85:61:65:67:41:cc:be:bf:ee:41:24:
                    99:5d:f5:62:3d:36:42:71:4b:93:83:5e:b9:0f:42:
                    0b:94:a5:1b:4c:44:82:75:3c:74:a7:80:03:f1:a9:
                    a2:5d:96:ed:67:4f:62:7c:a4:47:e7:13:27:93:33:
                    e1:89:ac:e8:c9:3b:d0:e6:2f:00:f5:f9:1a:f1:66:
                    b6:74:b4:f5:24:54:ec:f6:d7:74:73:d1:47:d4:bf:
                    08:36:b1:5a:39:0f:b9:41:a5:99:dd:36:5e:99:46:
                    c9:16:0f:ab:7f:b2:7b:76:b7:25:6f:dc:39:9f:6c:
                    f3:de:a7:0c:0e:67:97:4d:5c:55:83:f5:ca:11:30:
                    bd:f5:73:77:c7:bc:11:ad:db:fc:97:86:d4:01:b1:
                    89:4d:30:8e:13:c1:89:a9:a9:ab:d5:64:aa:79:63:
                    1f:5e:9c:e0:0d:82:e9:ba:92:45:63:d1:a9:e8:ee:
                    e0:6b:cb:88:b1:a5:f4:a3:74:38:bc:b8:8e:75:6b:
                    44:1c:2b:03:c8:a0:f5:3e:ae:6f:3c:de:9c:53:39:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DF:27:63:CE:7D:D1:8F:9B:56:97:95:A3:7B:14:A0:49:E6:9F:CC
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:6a:bb:ed:9e:33:b2:27:ea:81:6a:66:ca:77:0b:31:ba:
         95:f1:f3:5b:ff:ca:8a:9e:92:04:f0:50:f8:29:c5:ac:27:5d:
         b2:13:d9:52:11:69:a1:8b:13:91:d5:5e:ba:c5:b8:b7:80:e8:
         ee:07:58:94:ce:c5:31:1d:a0:02:a4:75:11:53:5a:2d:ca:bb:
         1d:cc:15:11:48:59:02:7c:63:e1:2b:6c:57:86:9a:57:7f:4c:
         ff:e3:eb:35:9a:47:41:93:ab:4d:28:b5:f0:34:ef:6d:00:8e:
         a8:ef:96:a5:02:e1:d3:77:20:3b:d5:d8:0e:ee:53:72:f5:02:
         54:93:53:67:5a:0b:41:f5:57:01:bc:0d:08:31:9e:8a:c5:80:
         0a:18:e3:2f:d1:13:36:e2:76:d5:33:3d:d5:c5:7f:2c:84:6b:
         2e:8d:ec:50:6b:12:51:d1:59:af:a3:c2:83:fb:49:66:03:c6:
         fd:c8:9c:59:1a:2f:8b:eb:ea:06:a7:bb:a4:3f:f6:36:a0:eb:
         63:bb:0f:c0:cd:6d:01:c3:a5:b3:69:81:01:dd:02:7c:7f:3b:
         98:d9:b6:a0:5a:0b:7d:af:3b:20:e8:9c:3c:08:ee:07:5d:bb:
         2d:49:15:43:9f:9a:a8:1b:1e:9e:3f:b7:08:74:0e:3a:d8:1e:
         0d:32:f6:18
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUJBzltLzrfHCn0NKvEYUyl8G/AwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjA1MDYxNDM5NTlaFw0yMzA1MDUxNDQ0NTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJFQTM5NUY0MUQ5MTdGNDAw
MkYwRDQ1ODAxOUIzQTExQ0Q3NzQ2RDdDOUI4NzM3Q0YyRTRDRTYyMERCN0UwREM3
RkJCQjM5MTBBRjAyNUVCRjRFQjFBMEJEQzRFRkFBODU2MTY1Njc0MUNDQkVCRkVF
NDEyNDk5NURGNTYyM0QzNjQyNzE0QjkzODM1RUI5MEY0MjBCOTRBNTFCNEM0NDgy
NzUzQzc0QTc4MDAzRjFBOUEyNUQ5NkVENjc0RjYyN0NBNDQ3RTcxMzI3OTMzM0Ux
ODlBQ0U4QzkzQkQwRTYyRjAwRjVGOTFBRjE2NkI2NzRCNEY1MjQ1NEVDRjZENzc0
NzNEMTQ3RDRCRjA4MzZCMTVBMzkwRkI5NDFBNTk5REQzNjVFOTk0NkM5MTYwRkFC
N0ZCMjdCNzZCNzI1NkZEQzM5OUY2Q0YzREVBNzBDMEU2Nzk3NEQ1QzU1ODNGNUNB
MTEzMEJERjU3Mzc3QzdCQzExQUREQkZDOTc4NkQ0MDFCMTg5NEQzMDhFMTNDMTg5
QTlBOUFCRDU2NEFBNzk2MzFGNUU5Q0UwMEQ4MkU5QkE5MjQ1NjNEMUE5RThFRUUw
NkJDQjg4QjFBNUY0QTM3NDM4QkNCODhFNzU2QjQ0MUMyQjAzQzhBMEY1M0VBRTZG
M0NERTlDNTMzOUNDODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu+o5X0HZF/QALw1FgBmzoRzXdG18m4c3zy5M5iDbfg3H+7s5EK8C
Xr9OsaC9xO+qhWFlZ0HMvr/uQSSZXfViPTZCcUuTg165D0ILlKUbTESCdTx0p4AD
8amiXZbtZ09ifKRH5xMnkzPhiazoyTvQ5i8A9fka8Wa2dLT1JFTs9td0c9FH1L8I
NrFaOQ+5QaWZ3TZemUbJFg+rf7J7drclb9w5n2zz3qcMDmeXTVxVg/XKETC99XN3
x7wRrdv8l4bUAbGJTTCOE8GJqamr1WSqeWMfXpzgDYLpupJFY9Gp6O7ga8uIsaX0
o3Q4vLiOdWtEHCsDyKD1Pq5vPN6cUznMiQIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FJzfJ2POfdGPm1aXlaN7FKBJ5p/MMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0G
CCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzEyZTM0
MzEyZTMyMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALUpyjANBgkqhkiG9w0BAQsFAAOCAQEAVcJqu+2eM7In6oFqZsp3CzG6lfHz
W//Kip6SBPBQ+CnFrCddshPZUhFpoYsTkdVeusW4t4Do7gdYlM7FMR2gAqR1EVNa
Lcq7HcwVEUhZAnxj4StsV4aaV39M/+PrNZpHQZOrTSi18DTvbQCOqO+WpQLh03cg
O9XYDu5TcvUCVJNTZ1oLQfVXAbwNCDGeisWAChjjL9ETNuJ21TM91cV/LIRrLo3s
UGsSUdFZr6PCg/tJZgPG/cicWRovi+vqBqe7pD/2NqDrY7sPwM1tAcOls2mBAd0C
fH87mNm2oFoLfa87IOicPAjuB127LUkVQ5+aqBsenj+3CHQOOtgeDTL2GA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org