Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa
File:                     3138312e34312e3230352e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier:          +2s2DyuVXV8hTpSIJ1IlwgAhZFTvRydqY88YcZw1tYY=
Subject key identifier:   13:21:2B:7C:55:D5:0F:70:F8:68:72:89:A2:EC:E2:1D:2A:7E:A2:7C
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       26CDABDED5CA97F4C2D6BCCFA3E08940FA4C5C82
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     29066
IP address blocks:        181.41.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cd:ab:de:d5:ca:97:f4:c2:d6:bc:cf:a3:e0:89:40:fa:4c:5c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:fb:aa:04:95:d3:64:cd:5f:9d:3e:40:c9:
                    b8:da:51:be:a6:32:a1:e4:d1:67:57:d2:4f:5c:26:
                    b4:4e:b2:81:3b:02:ab:54:35:a4:39:5e:6c:3d:b5:
                    9e:8e:cb:9d:32:62:ae:bf:e7:67:27:f4:34:1b:5f:
                    f1:6f:3d:7a:66:0a:8b:5f:7e:ea:e2:6b:c0:50:da:
                    ec:4a:b4:ea:95:fe:b5:00:57:4f:56:e6:d1:18:b4:
                    cd:af:f0:3d:24:a0:93:44:b0:62:56:5b:00:99:e5:
                    b7:9a:4a:66:97:a6:d2:1e:16:04:87:52:93:34:8f:
                    38:88:5c:e5:af:2a:19:97:98:c5:83:b2:5e:58:20:
                    49:35:56:bd:e4:01:9a:2c:a8:93:26:f5:dd:b9:a7:
                    30:56:6d:ca:88:9f:6e:c0:14:7c:e8:9e:59:2a:2f:
                    61:3e:2c:66:ad:3d:2b:08:81:56:f6:3f:eb:44:12:
                    93:fe:b9:a1:b9:06:bb:9c:88:d6:6a:ec:e9:26:7c:
                    b3:77:ae:2d:ff:af:3a:26:4b:1f:72:2d:63:62:e5:
                    dd:e3:52:d7:67:e1:70:a6:b5:7d:e6:16:65:d7:fa:
                    f3:d4:58:47:a3:90:f9:e8:73:93:05:43:ba:62:ff:
                    3c:0e:09:1a:75:ed:88:07:dd:13:10:83:ee:c9:c5:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:2B:7C:55:D5:0F:70:F8:68:72:89:A2:EC:E2:1D:2A:7E:A2:7C
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f4:99:94:76:00:73:80:56:23:95:e4:14:e6:8e:40:aa:33:
         a4:82:06:f7:7f:42:c1:4f:e7:1a:7d:dd:9c:7e:5c:39:9b:b6:
         97:c3:ff:47:41:a4:0e:45:01:74:a1:32:b7:d1:82:a6:53:df:
         7e:db:62:24:04:69:9f:d9:ca:11:54:f5:cf:b7:95:6b:a2:23:
         e9:2b:e6:11:1a:ff:cc:57:f5:e5:01:ca:c2:dc:bf:5a:7b:b4:
         8f:79:b2:61:8e:27:b8:36:34:9a:fd:cf:8b:f2:48:66:3f:68:
         eb:12:83:13:98:62:f2:26:57:e1:80:8f:d3:8d:d5:17:db:f6:
         5f:d7:8d:6c:cd:ff:f6:f3:98:eb:8c:e2:6e:71:98:a6:7b:48:
         55:1a:95:9a:3a:5c:bb:c2:01:7d:e5:6a:59:d9:6f:df:f3:d2:
         7b:09:7d:77:cc:95:e8:d8:2a:79:d9:54:cd:ca:1f:2f:de:71:
         d2:05:7e:d3:20:f3:ef:7e:22:32:93:91:24:f9:3f:45:ea:8e:
         89:f7:8b:2b:89:5e:70:f7:9f:11:1c:5f:0b:7b:b0:05:61:38:
         f6:5d:b6:2c:30:fe:df:54:8c:4d:d0:71:76:fd:9a:ab:f3:52:
         5a:6b:fb:2f:cc:ca:51:7c:5c:69:00:48:0e:0f:9d:e7:5e:96:
         8d:4d:a1:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org