Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          TZAKS+yPJTixjQwILtrt99AQ5pxf1jYhkZy5+VLBqoU=
Subject key identifier:   35:39:61:0C:85:AD:8E:77:7E:84:4C:88:86:97:9A:40:0D:88:79:EC
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       6FD875D22A20D0368FB0974F1966E3AA6CBEE0F1
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        181.41.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d8:75:d2:2a:20:d0:36:8f:b0:97:4f:19:66:e3:aa:6c:be:e0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject: CN=3082010A0282010100B3A9D4C0A9406FB40175B16BCB4AE0888257435759565C5AA6CC5FC5E3D2B5FC6A44461823715D6F9F94F3913C09F2177F0D9477E10321B8A518A37536EBE17A5B7BC2B1F12CA75952C2EBA153187C9AD25FE7D959D2F94B5F12112AE17C70F5FF1B2076724FCD7530D50FD3BC053878AC6932502736DBD27EB58593E5E1440DF91601E15422D8391BE30F08FDB96ADF9B8E2C1493AA1F970F70EE11A423C897DDCD559D18797D54644F469534F3C9949664C08455B4932A9018090A7ADD853B63D4952851CA8A7549215B8209E5840020BD57AE9AE6DEC78F5D83A3EBE8D1CAE60A9AECB18E006F759CC4F94BB9756BE0F4E837EC350832E4EB36C56D9C80F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:d4:c0:a9:40:6f:b4:01:75:b1:6b:cb:4a:
                    e0:88:82:57:43:57:59:56:5c:5a:a6:cc:5f:c5:e3:
                    d2:b5:fc:6a:44:46:18:23:71:5d:6f:9f:94:f3:91:
                    3c:09:f2:17:7f:0d:94:77:e1:03:21:b8:a5:18:a3:
                    75:36:eb:e1:7a:5b:7b:c2:b1:f1:2c:a7:59:52:c2:
                    eb:a1:53:18:7c:9a:d2:5f:e7:d9:59:d2:f9:4b:5f:
                    12:11:2a:e1:7c:70:f5:ff:1b:20:76:72:4f:cd:75:
                    30:d5:0f:d3:bc:05:38:78:ac:69:32:50:27:36:db:
                    d2:7e:b5:85:93:e5:e1:44:0d:f9:16:01:e1:54:22:
                    d8:39:1b:e3:0f:08:fd:b9:6a:df:9b:8e:2c:14:93:
                    aa:1f:97:0f:70:ee:11:a4:23:c8:97:dd:cd:55:9d:
                    18:79:7d:54:64:4f:46:95:34:f3:c9:94:96:64:c0:
                    84:55:b4:93:2a:90:18:09:0a:7a:dd:85:3b:63:d4:
                    95:28:51:ca:8a:75:49:21:5b:82:09:e5:84:00:20:
                    bd:57:ae:9a:e6:de:c7:8f:5d:83:a3:eb:e8:d1:ca:
                    e6:0a:9a:ec:b1:8e:00:6f:75:9c:c4:f9:4b:b9:75:
                    6b:e0:f4:e8:37:ec:35:08:32:e4:eb:36:c5:6d:9c:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:39:61:0C:85:AD:8E:77:7E:84:4C:88:86:97:9A:40:0D:88:79:EC
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:e2:46:40:04:33:26:46:f7:e8:f7:58:20:8c:64:4b:df:
         1d:10:69:64:67:63:d1:96:5e:a0:c3:16:a4:62:d2:f2:7d:e6:
         09:ca:26:87:8f:23:e3:78:22:6a:ed:38:57:50:e9:ec:5f:fa:
         e5:b6:96:e1:f5:1b:a2:88:ed:bf:bf:db:bf:a0:cf:7c:fb:8b:
         7d:ff:4b:ce:fd:85:0c:90:67:9b:8b:01:07:3b:16:fe:42:c5:
         85:6e:b0:a7:7d:da:ad:56:23:08:a2:e2:6c:78:d6:ed:a8:56:
         da:d1:c1:05:6a:39:9a:e5:5b:fd:86:02:19:b3:62:cf:5f:93:
         6f:08:dc:6c:93:c2:60:bf:e1:70:4b:70:8b:64:c4:9f:21:0e:
         18:d0:20:8e:1d:58:41:07:d7:83:24:fd:79:be:9c:3a:25:85:
         4a:34:38:93:9c:15:10:8a:69:ab:b6:27:77:1e:85:6b:94:5b:
         e3:d5:17:35:2b:4e:c5:85:19:70:b5:6a:9a:32:e1:69:05:aa:
         c3:a0:1f:84:ef:0e:f7:e7:f2:81:62:86:2c:38:ce:5b:77:18:
         d8:0c:b3:4a:24:37:9a:5e:92:a1:14:4c:51:ff:78:97:24:e5:
         6b:d0:e6:36:22:56:a4:2f:94:11:4b:da:74:32:6d:17:3c:cc:
         42:5c:0b:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org