Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231302e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          JXjZacgXuj9OR3ZIADgXoO0X5czYloitDbkAF4prncw=
Subject key identifier:   8A:46:FF:50:45:30:A7:EA:9D:F9:06:40:1D:9D:05:62:9C:12:9B:19
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       4BF97671606BD0B85145A49A204AD04812A14469
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231302e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     61317
IP address blocks:        181.41.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f9:76:71:60:6b:d0:b8:51:45:a4:9a:20:4a:d0:48:12:a1:44:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject: CN=3082010A0282010100DDEDAB860A3DF08D5699B410CBD14B2FD5597BFDC092921D679197A3FD0F5E568E66C12FD623C2B5B36DADF1BDED7418A329AED02CD072B481CC93DAD265C28F1A8A39BC27137AC2B9001DF9893FB3626D11F8F77C579BC3A5F2E453A144B7AF2794AC08939A05C778B95AACB9F3E639D8DA7847FBD9C2A237C791FB04C4367A9FB3FE58A46497CD30562DD765F7034F4D9AB9FB2712EB556B294188F4FACC7509587AFEB75E217263EF81D97306FA57B1E81A74559ABD8F24EC8961979CC4B7DB48427228218D227BAB9DBAF3C90CABD7F2DA923655FDC4195A12A3AC34BA70A2C022151A2CE2BC850492B8BBC11D9ED9351861CF1FB652B4E72B76547571410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ed:ab:86:0a:3d:f0:8d:56:99:b4:10:cb:d1:
                    4b:2f:d5:59:7b:fd:c0:92:92:1d:67:91:97:a3:fd:
                    0f:5e:56:8e:66:c1:2f:d6:23:c2:b5:b3:6d:ad:f1:
                    bd:ed:74:18:a3:29:ae:d0:2c:d0:72:b4:81:cc:93:
                    da:d2:65:c2:8f:1a:8a:39:bc:27:13:7a:c2:b9:00:
                    1d:f9:89:3f:b3:62:6d:11:f8:f7:7c:57:9b:c3:a5:
                    f2:e4:53:a1:44:b7:af:27:94:ac:08:93:9a:05:c7:
                    78:b9:5a:ac:b9:f3:e6:39:d8:da:78:47:fb:d9:c2:
                    a2:37:c7:91:fb:04:c4:36:7a:9f:b3:fe:58:a4:64:
                    97:cd:30:56:2d:d7:65:f7:03:4f:4d:9a:b9:fb:27:
                    12:eb:55:6b:29:41:88:f4:fa:cc:75:09:58:7a:fe:
                    b7:5e:21:72:63:ef:81:d9:73:06:fa:57:b1:e8:1a:
                    74:55:9a:bd:8f:24:ec:89:61:97:9c:c4:b7:db:48:
                    42:72:28:21:8d:22:7b:ab:9d:ba:f3:c9:0c:ab:d7:
                    f2:da:92:36:55:fd:c4:19:5a:12:a3:ac:34:ba:70:
                    a2:c0:22:15:1a:2c:e2:bc:85:04:92:b8:bb:c1:1d:
                    9e:d9:35:18:61:cf:1f:b6:52:b4:e7:2b:76:54:75:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:46:FF:50:45:30:A7:EA:9D:F9:06:40:1D:9D:05:62:9C:12:9B:19
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:69:de:16:a3:5e:c9:16:83:48:31:cd:da:4b:17:00:79:12:
         94:93:c1:e6:94:6f:28:49:6e:21:99:28:30:f3:3d:82:e3:d8:
         1f:67:d1:63:dc:e6:2d:b4:62:74:c7:f2:bf:3d:0e:a1:99:0b:
         80:33:6e:92:a8:14:ba:6a:65:14:bb:68:7b:ae:2e:29:99:93:
         e4:41:8b:af:2b:26:4f:d8:58:5f:39:d0:b0:b6:5f:e6:b3:47:
         8f:11:08:34:06:89:53:20:b3:74:00:4a:6a:7b:f4:c8:d7:89:
         d3:3c:9f:d0:5b:3f:48:19:98:83:77:97:05:c9:57:1e:33:9c:
         2d:0d:e8:0c:74:f2:fe:a4:04:2b:14:f3:55:70:88:1a:96:d7:
         6f:b4:71:5c:6b:01:06:d1:21:ea:5e:df:ee:c2:ee:69:43:0b:
         3e:ac:cd:ad:fb:93:21:e0:d8:c9:1f:1a:4c:d1:12:76:20:b8:
         92:31:68:9e:96:f7:9f:95:a3:2d:09:8b:ef:22:26:ad:16:d0:
         df:95:51:e1:31:04:36:b6:3f:97:00:63:22:8e:4f:eb:d8:bc:
         ca:32:1d:f5:14:0f:51:6d:f4:94:93:84:bf:b0:b7:34:63:74:
         8c:1f:3f:72:0b:9e:32:30:d1:df:fd:53:21:e0:86:21:bd:52:
         0e:91:70:aa
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUS/l2cWBr0LhRRaSaIErQSBKhRGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjAyMTcxMTQwMDVaFw0yMzAyMTYxMTQ1MDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRERFREFCODYwQTNERjA4RDU2
OTlCNDEwQ0JEMTRCMkZENTU5N0JGREMwOTI5MjFENjc5MTk3QTNGRDBGNUU1NjhF
NjZDMTJGRDYyM0MyQjVCMzZEQURGMUJERUQ3NDE4QTMyOUFFRDAyQ0QwNzJCNDgx
Q0M5M0RBRDI2NUMyOEYxQThBMzlCQzI3MTM3QUMyQjkwMDFERjk4OTNGQjM2MjZE
MTFGOEY3N0M1NzlCQzNBNUYyRTQ1M0ExNDRCN0FGMjc5NEFDMDg5MzlBMDVDNzc4
Qjk1QUFDQjlGM0U2MzlEOERBNzg0N0ZCRDlDMkEyMzdDNzkxRkIwNEM0MzY3QTlG
QjNGRTU4QTQ2NDk3Q0QzMDU2MkRENzY1RjcwMzRGNEQ5QUI5RkIyNzEyRUI1NTZC
Mjk0MTg4RjRGQUNDNzUwOTU4N0FGRUI3NUUyMTcyNjNFRjgxRDk3MzA2RkE1N0Ix
RTgxQTc0NTU5QUJEOEYyNEVDODk2MTk3OUNDNEI3REI0ODQyNzIyODIxOEQyMjdC
QUI5REJBRjNDOTBDQUJEN0YyREE5MjM2NTVGREM0MTk1QTEyQTNBQzM0QkE3MEEy
QzAyMjE1MUEyQ0UyQkM4NTA0OTJCOEJCQzExRDlFRDkzNTE4NjFDRjFGQjY1MkI0
RTcyQjc2NTQ3NTcxNDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3e2rhgo98I1WmbQQy9FLL9VZe/3AkpIdZ5GXo/0PXlaOZsEv1iPC
tbNtrfG97XQYoymu0CzQcrSBzJPa0mXCjxqKObwnE3rCuQAd+Yk/s2JtEfj3fFeb
w6Xy5FOhRLevJ5SsCJOaBcd4uVqsufPmOdjaeEf72cKiN8eR+wTENnqfs/5YpGSX
zTBWLddl9wNPTZq5+ycS61VrKUGI9PrMdQlYev63XiFyY++B2XMG+lex6Bp0VZq9
jyTsiWGXnMS320hCcighjSJ7q52688kMq9fy2pI2Vf3EGVoSo6w0unCiwCIVGizi
vIUEkri7wR2e2TUYYc8ftlK05yt2VHVxQQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FIpG/1BFMKfqnfkGQB2dBWKcEpsZMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzEyZTM0
MzEyZTMyMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KdIwDQYJKoZIhvcNAQELBQADggEBAI1p3hajXskWg0gxzdpLFwB5
EpSTweaUbyhJbiGZKDDzPYLj2B9n0WPc5i20YnTH8r89DqGZC4AzbpKoFLpqZRS7
aHuuLimZk+RBi68rJk/YWF850LC2X+azR48RCDQGiVMgs3QASmp79MjXidM8n9Bb
P0gZmIN3lwXJVx4znC0N6Ax08v6kBCsU81VwiBqW12+0cVxrAQbRIepe3+7C7mlD
Cz6sza37kyHg2MkfGkzREnYguJIxaJ6W95+Voy0Ji+8iJq0W0N+VUeExBDa2P5cA
YyKOT+vYvMoyHfUUD1Ft9JSThL+wtzRjdIwfP3ILnjIw0d/9UyHghiG9Ug6RcKo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org