Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230382e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          uLxqKgLiBpXnVgiSY/eVSv3euaFdwdLSaZrXg0leHLc=
Subject key identifier:   4A:02:39:B6:1F:EF:EC:59:84:F2:22:0C:31:64:DA:AC:B1:2E:A9:54
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       19635CB15E866FB56F845813AB621FA6C28E44A5
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230382e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        181.41.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:5c:b1:5e:86:6f:b5:6f:84:58:13:ab:62:1f:a6:c2:8e:44:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:89:2e:fd:c3:0c:89:b5:95:f6:c3:ca:9a:
                    4a:ee:bb:8a:45:ec:c5:0c:9f:56:4e:3f:97:b5:ec:
                    4f:06:a6:a9:47:a6:a4:2f:6a:d0:e2:00:ef:9f:91:
                    42:ff:76:2b:81:34:07:29:71:aa:19:d9:3e:1f:1a:
                    13:77:e8:65:60:f9:0f:5f:3b:14:27:b0:82:4d:6a:
                    fc:8e:c8:3f:3d:fa:f0:c7:e3:7d:b8:3c:6d:ab:ac:
                    b3:62:f2:9f:62:ca:e7:12:ae:c1:74:27:81:a7:e2:
                    20:ef:76:ea:cf:59:4b:1a:27:20:62:e9:e4:51:5b:
                    2c:fb:b6:8a:f4:eb:4f:11:63:14:56:b5:0f:eb:d4:
                    3c:e9:7c:17:37:f5:3a:af:3f:74:9d:c7:a0:c5:5e:
                    5d:b2:cb:16:03:81:0c:20:4c:10:13:dc:bf:8a:05:
                    b4:0e:2e:28:5c:a1:70:9b:f1:b7:fe:3b:c8:b0:31:
                    47:60:c6:15:85:3a:9d:9f:8c:49:3b:24:0d:c9:41:
                    66:51:cb:c2:1b:95:99:92:db:81:8d:46:90:d1:2e:
                    73:c7:ed:b4:3e:ad:e1:94:f7:3a:d4:a5:b9:a5:88:
                    0e:60:81:5f:6c:9e:f9:11:67:a2:83:73:ed:c2:22:
                    e7:90:61:93:c5:e5:22:34:52:6d:29:33:42:af:21:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:02:39:B6:1F:EF:EC:59:84:F2:22:0C:31:64:DA:AC:B1:2E:A9:54
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:4f:b8:e4:7c:22:02:67:df:5f:4c:9f:2f:a3:1a:e9:44:
         cf:fb:ea:b7:0e:2e:b5:73:d6:24:5f:de:4a:9b:7c:f7:a0:2b:
         1f:94:e8:55:df:9f:a2:6f:85:f5:99:c6:46:75:de:51:25:8f:
         ad:e5:dd:dc:e4:90:3c:0b:95:e3:a5:71:d6:8b:6d:91:ce:69:
         92:20:dc:0f:68:d1:f9:b0:07:0d:3c:71:01:f6:35:b7:5a:44:
         94:15:04:67:63:c3:8d:91:9f:fb:99:25:b2:12:67:e4:2d:6d:
         21:e5:d9:67:95:82:86:9d:4c:c2:44:13:0e:59:7a:58:06:ca:
         2c:f3:54:e7:7b:8f:61:4f:2c:43:94:1f:45:9a:ad:ac:da:91:
         6d:e3:dd:9a:e0:52:c2:78:25:ad:3e:5a:a7:91:25:cd:b6:c4:
         1c:85:ad:cb:6b:8c:02:4a:7d:d4:70:d2:77:24:14:7d:e7:54:
         fc:9d:48:e5:39:31:5b:13:46:ee:b2:01:d0:75:c6:a4:5b:2e:
         17:67:01:37:41:4d:30:dd:06:45:da:db:8e:15:54:9e:d6:a0:
         45:4e:06:b3:b5:e5:a5:b3:ef:1f:f2:f8:78:8e:1c:8c:79:49:
         32:ab:7a:0d:12:fa:d7:ec:6b:b1:8e:1a:85:ad:06:10:70:4c:
         ae:f3:c3:e9
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUGWNcsV6Gb7VvhFgTq2IfpsKORKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjAyMTcxMTQwMDZaFw0yMzAyMTYxMTQ1MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgzNzg5MkVGREMzMEM4OUI1
OTVGNkMzQ0E5QTRBRUVCQjhBNDVFQ0M1MEM5RjU2NEUzRjk3QjVFQzRGMDZBNkE5
NDdBNkE0MkY2QUQwRTIwMEVGOUY5MTQyRkY3NjJCODEzNDA3Mjk3MUFBMTlEOTNF
MUYxQTEzNzdFODY1NjBGOTBGNUYzQjE0MjdCMDgyNEQ2QUZDOEVDODNGM0RGQUYw
QzdFMzdEQjgzQzZEQUJBQ0IzNjJGMjlGNjJDQUU3MTJBRUMxNzQyNzgxQTdFMjIw
RUY3NkVBQ0Y1OTRCMUEyNzIwNjJFOUU0NTE1QjJDRkJCNjhBRjRFQjRGMTE2MzE0
NTZCNTBGRUJENDNDRTk3QzE3MzdGNTNBQUYzRjc0OURDN0EwQzU1RTVEQjJDQjE2
MDM4MTBDMjA0QzEwMTNEQ0JGOEEwNUI0MEUyRTI4NUNBMTcwOUJGMUI3RkUzQkM4
QjAzMTQ3NjBDNjE1ODUzQTlEOUY4QzQ5M0IyNDBEQzk0MTY2NTFDQkMyMUI5NTk5
OTJEQjgxOEQ0NjkwRDEyRTczQzdFREI0M0VBREUxOTRGNzNBRDRBNUI5QTU4ODBF
NjA4MTVGNkM5RUY5MTE2N0EyODM3M0VEQzIyMkU3OTA2MTkzQzVFNTIyMzQ1MjZE
MjkzMzQyQUYyMUZCODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuDeJLv3DDIm1lfbDyppK7ruKRezFDJ9WTj+XtexPBqapR6akL2rQ
4gDvn5FC/3YrgTQHKXGqGdk+HxoTd+hlYPkPXzsUJ7CCTWr8jsg/Pfrwx+N9uDxt
q6yzYvKfYsrnEq7BdCeBp+Ig73bqz1lLGicgYunkUVss+7aK9OtPEWMUVrUP69Q8
6XwXN/U6rz90ncegxV5dsssWA4EMIEwQE9y/igW0Di4oXKFwm/G3/jvIsDFHYMYV
hTqdn4xJOyQNyUFmUcvCG5WZktuBjUaQ0S5zx+20Pq3hlPc61KW5pYgOYIFfbJ75
EWeig3PtwiLnkGGTxeUiNFJtKTNCryH7iQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FEoCObYf7+xZhPIiDDFk2qyxLqlUMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzEyZTM0
MzEyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KdAwDQYJKoZIhvcNAQELBQADggEBAJj/T7jkfCICZ99fTJ8voxrp
RM/76rcOLrVz1iRf3kqbfPegKx+U6FXfn6JvhfWZxkZ13lElj63l3dzkkDwLleOl
cdaLbZHOaZIg3A9o0fmwBw08cQH2NbdaRJQVBGdjw42Rn/uZJbISZ+QtbSHl2WeV
goadTMJEEw5ZelgGyizzVOd7j2FPLEOUH0WarazakW3j3ZrgUsJ4Ja0+WqeRJc22
xByFrctrjAJKfdRw0nckFH3nVPydSOU5MVsTRu6yAdB1xqRbLhdnATdBTTDdBkXa
244VVJ7WoEVOBrO15aWz7x/y+HiOHIx5STKreg0S+tfsa7GOGoWtBhBwTK7zw+k=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org