Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32342d3234203d3e20313734.roa
File:                     3138312e34312e3230362e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          OvAmf6G0czGw64ccK7svqoMRgzJPQnK0jVrt0Jy1Wbc=
Subject key identifier:   8E:63:DA:84:AA:FF:F0:5E:4C:23:DB:C5:D0:30:A0:05:12:23:C8:E5
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       69100D5581A1DD7A96624350EE16B24ABBECBF00
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32342d3234203d3e20313734.roa
Signing time:             Tue 26 Apr 2022 11:05:33 +0000
ROA not before:           Tue 26 Apr 2022 11:00:33 +0000
ROA not after:            Tue 25 Apr 2023 11:05:33 +0000
asID:                     174
IP address blocks:        181.41.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:10:0d:55:81:a1:dd:7a:96:62:43:50:ee:16:b2:4a:bb:ec:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Apr 26 11:00:33 2022 GMT
            Not After : Apr 25 11:05:33 2023 GMT
        Subject: CN=3082010A0282010100AD2745D5D338628BD05019FCCCA8486FEC539DA173E013EFFF402C0CF926CFB6CBF45C194EEB48A1A215D37240600A08119F6F6AAFA9059A5625B1382FCDDB56E59CA4CB1BCA552C4855D0F95ECB0603199D21B6618296CE4BDBB5EA557EBDDE35ADB10025ECDD9A03B731868C0F40516B90A69CB9E13A4F196813C41FCA08336E9D4019EEA941FE90151FF1A75CAEFB6FFAC4C5F4CEF6E0A836CA1B2A26001CB38DEC88ABD97F9E76B9F5D38DBC82E5D3FB2D28213C998E596D16D713941F5422F382EEBDD906670C2CB2307FD5736965E7A54230E0E03410368308CEFA64F640744983E7CADD198D66138642B36CED85FFD2EF2A6D069A16EF8628599A246B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:45:d5:d3:38:62:8b:d0:50:19:fc:cc:a8:
                    48:6f:ec:53:9d:a1:73:e0:13:ef:ff:40:2c:0c:f9:
                    26:cf:b6:cb:f4:5c:19:4e:eb:48:a1:a2:15:d3:72:
                    40:60:0a:08:11:9f:6f:6a:af:a9:05:9a:56:25:b1:
                    38:2f:cd:db:56:e5:9c:a4:cb:1b:ca:55:2c:48:55:
                    d0:f9:5e:cb:06:03:19:9d:21:b6:61:82:96:ce:4b:
                    db:b5:ea:55:7e:bd:de:35:ad:b1:00:25:ec:dd:9a:
                    03:b7:31:86:8c:0f:40:51:6b:90:a6:9c:b9:e1:3a:
                    4f:19:68:13:c4:1f:ca:08:33:6e:9d:40:19:ee:a9:
                    41:fe:90:15:1f:f1:a7:5c:ae:fb:6f:fa:c4:c5:f4:
                    ce:f6:e0:a8:36:ca:1b:2a:26:00:1c:b3:8d:ec:88:
                    ab:d9:7f:9e:76:b9:f5:d3:8d:bc:82:e5:d3:fb:2d:
                    28:21:3c:99:8e:59:6d:16:d7:13:94:1f:54:22:f3:
                    82:ee:bd:d9:06:67:0c:2c:b2:30:7f:d5:73:69:65:
                    e7:a5:42:30:e0:e0:34:10:36:83:08:ce:fa:64:f6:
                    40:74:49:83:e7:ca:dd:19:8d:66:13:86:42:b3:6c:
                    ed:85:ff:d2:ef:2a:6d:06:9a:16:ef:86:28:59:9a:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:63:DA:84:AA:FF:F0:5E:4C:23:DB:C5:D0:30:A0:05:12:23:C8:E5
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:89:71:fb:9d:2e:5f:c7:0c:e9:76:98:67:7b:68:9f:d9:fb:
         1c:6a:4d:e6:a8:dc:6a:d9:82:fe:17:1e:93:ed:ec:9b:96:03:
         32:b2:9f:72:ef:ed:0d:13:60:32:03:a4:97:8e:9c:00:7c:1a:
         cd:91:a7:4a:f1:68:c9:83:35:e7:24:d1:b2:00:fb:f2:d4:52:
         bc:cb:a4:cf:16:3a:4d:66:4c:d4:78:8b:a5:6b:ca:40:f7:8a:
         46:8b:ec:5f:f7:49:ad:33:48:83:8b:58:d8:d6:be:0d:d0:2c:
         2b:0f:6d:5b:88:82:41:53:3a:40:e0:64:82:fd:29:9e:c8:89:
         fc:bc:26:fe:45:2b:cd:d1:61:e5:69:d0:52:6f:36:e4:36:5c:
         b3:51:b6:9b:5f:2e:82:a4:08:57:9e:75:59:2e:55:9b:34:a7:
         6e:62:ec:87:f6:75:10:fd:ff:7f:96:e7:1b:f3:55:24:0b:0c:
         ad:25:58:9f:7d:4c:63:94:50:5e:26:85:4c:74:ed:9c:5f:9a:
         1f:22:b4:f3:78:2e:f5:1b:5f:68:bb:24:5b:11:c3:8a:b4:b3:
         9c:f6:8e:fe:63:dc:56:65:01:42:cf:63:f0:13:30:7f:58:ca:
         18:0e:71:76:ca:4f:b4:15:c7:7d:a0:3e:73:ea:bb:f9:22:39:
         c3:dd:4d:cb
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUaRANVYGh3XqWYkNQ7haySrvsvwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjA0MjYxMTAwMzNaFw0yMzA0MjUxMTA1MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQyNzQ1RDVEMzM4NjI4QkQw
NTAxOUZDQ0NBODQ4NkZFQzUzOURBMTczRTAxM0VGRkY0MDJDMENGOTI2Q0ZCNkNC
RjQ1QzE5NEVFQjQ4QTFBMjE1RDM3MjQwNjAwQTA4MTE5RjZGNkFBRkE5MDU5QTU2
MjVCMTM4MkZDRERCNTZFNTlDQTRDQjFCQ0E1NTJDNDg1NUQwRjk1RUNCMDYwMzE5
OUQyMUI2NjE4Mjk2Q0U0QkRCQjVFQTU1N0VCRERFMzVBREIxMDAyNUVDREQ5QTAz
QjczMTg2OEMwRjQwNTE2QjkwQTY5Q0I5RTEzQTRGMTk2ODEzQzQxRkNBMDgzMzZF
OUQ0MDE5RUVBOTQxRkU5MDE1MUZGMUE3NUNBRUZCNkZGQUM0QzVGNENFRjZFMEE4
MzZDQTFCMkEyNjAwMUNCMzhERUM4OEFCRDk3RjlFNzZCOUY1RDM4REJDODJFNUQz
RkIyRDI4MjEzQzk5OEU1OTZEMTZENzEzOTQxRjU0MjJGMzgyRUVCREQ5MDY2NzBD
MkNCMjMwN0ZENTczNjk2NUU3QTU0MjMwRTBFMDM0MTAzNjgzMDhDRUZBNjRGNjQw
NzQ0OTgzRTdDQUREMTk4RDY2MTM4NjQyQjM2Q0VEODVGRkQyRUYyQTZEMDY5QTE2
RUY4NjI4NTk5QTI0NkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArSdF1dM4YovQUBn8zKhIb+xTnaFz4BPv/0AsDPkmz7bL9FwZTutI
oaIV03JAYAoIEZ9vaq+pBZpWJbE4L83bVuWcpMsbylUsSFXQ+V7LBgMZnSG2YYKW
zkvbtepVfr3eNa2xACXs3ZoDtzGGjA9AUWuQppy54TpPGWgTxB/KCDNunUAZ7qlB
/pAVH/GnXK77b/rExfTO9uCoNsobKiYAHLON7Iir2X+edrn10428guXT+y0oITyZ
jlltFtcTlB9UIvOC7r3ZBmcMLLIwf9VzaWXnpUIw4OA0EDaDCM76ZPZAdEmD58rd
GY1mE4ZCs2zthf/S7yptBpoW74YoWZokawIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FI5j2oSq//BeTCPbxdAwoAUSI8jlMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0G
CCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzEyZTM0
MzEyZTMyMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALUpzjANBgkqhkiG9w0BAQsFAAOCAQEAVYlx+50uX8cM6XaYZ3ton9n7HGpN
5qjcatmC/hcek+3sm5YDMrKfcu/tDRNgMgOkl46cAHwazZGnSvFoyYM15yTRsgD7
8tRSvMukzxY6TWZM1HiLpWvKQPeKRovsX/dJrTNIg4tY2Na+DdAsKw9tW4iCQVM6
QOBkgv0pnsiJ/Lwm/kUrzdFh5WnQUm825DZcs1G2m18ugqQIV551WS5VmzSnbmLs
h/Z1EP3/f5bnG/NVJAsMrSVYn31MY5RQXiaFTHTtnF+aHyK083gu9RtfaLskWxHD
irSznPaO/mPcVmUBQs9j8BMwf1jKGA5xdspPtBXHfaA+c+q7+SI5w91Nyw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org