Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231312e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          re8Voovt4aWeHpeAuBYjnjiDrX0UgZLDQysnGdqKfys=
Subject key identifier:   2C:54:D2:FE:4D:AF:F1:E2:24:E2:65:6A:AC:81:57:79:94:8E:98:D1
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       067895119933259134539BA96377DB894456481A
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231312e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     61317
IP address blocks:        181.41.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:78:95:11:99:33:25:91:34:53:9b:a9:63:77:db:89:44:56:48:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:eb:99:ed:cc:36:3d:df:5e:62:24:13:4a:
                    8c:30:6b:f6:e1:af:d9:a8:49:00:1c:7c:08:ec:e6:
                    5f:05:13:71:68:73:63:2f:9d:dc:66:88:97:13:e3:
                    ff:af:54:a6:33:40:e4:1d:73:c1:6d:dc:fb:23:62:
                    e4:c4:01:45:52:ef:25:0e:70:57:18:c1:6a:5b:7f:
                    4c:e0:db:ee:d8:68:fb:26:a7:54:6b:1e:a5:9c:73:
                    19:6a:57:40:aa:56:37:16:e3:9a:10:1a:9a:0e:8a:
                    b9:91:8a:fa:53:eb:20:34:8f:fc:52:8c:98:f5:f2:
                    84:80:47:44:f2:1f:5b:a6:59:fe:d6:95:a7:ba:19:
                    ac:57:6c:7f:5f:d6:be:95:be:5a:75:40:dd:fe:35:
                    ee:13:42:95:61:52:21:dd:8f:40:cf:2c:0d:85:27:
                    53:bc:8c:4d:45:55:c4:58:35:be:3b:cc:91:05:7b:
                    ce:c0:fa:7e:22:37:c8:74:3f:d5:64:05:38:81:67:
                    b6:f6:37:57:7c:54:91:b8:84:fb:74:ff:a3:bc:4b:
                    7b:0e:f2:e4:26:ca:36:0b:cf:b5:9b:95:7e:07:30:
                    81:c4:29:2d:c3:1a:8f:13:f3:fd:f3:6e:31:d0:d8:
                    2d:20:cd:05:b3:3f:78:28:50:4a:bd:e8:25:ae:c4:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:D2:FE:4D:AF:F1:E2:24:E2:65:6A:AC:81:57:79:94:8E:98:D1
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:e4:57:f7:38:b1:06:40:8b:eb:ac:cb:b8:86:b9:4e:c4:
         63:46:a7:4e:66:06:63:06:09:4f:c4:3a:a7:dc:05:71:2d:d1:
         95:66:25:9d:2f:d8:15:2b:a1:3a:67:68:bc:1a:9f:bb:e9:3f:
         84:72:d5:8d:1c:e2:92:af:ab:e4:45:1d:51:b7:ae:65:26:51:
         bc:3b:8f:1d:1f:59:2a:3b:84:66:3a:54:9c:c4:87:d4:86:b4:
         34:04:e2:7f:31:e3:f2:71:a1:72:a4:2d:0e:50:1b:72:a2:7b:
         a2:5b:1d:c3:1a:40:c5:8d:67:4e:00:c7:80:bc:1b:8d:ae:c4:
         2b:98:3f:14:fe:93:11:21:04:21:d8:a2:d0:29:38:03:8a:7a:
         92:2c:06:a8:69:f9:12:16:4f:34:03:6c:34:59:23:8e:13:7a:
         a5:dc:52:1f:d9:26:03:c3:00:f5:8f:53:28:b1:f5:53:08:e9:
         58:13:1c:be:23:2e:91:39:0d:fd:42:93:30:f4:1d:c1:0c:79:
         07:b1:fb:3b:6f:ec:47:05:ea:45:62:c6:86:90:ee:2a:f4:26:
         57:cc:13:b0:b4:3b:67:00:ea:59:b0:f7:90:ec:cb:2d:5e:e7:
         f7:25:7e:14:7b:da:6e:a8:48:cf:6e:d6:4c:01:6b:d7:9b:07:
         62:09:5d:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org