Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231332e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          npIfiwNZ/2cvlbiaauI6/cqO0OiIxLkN8n3SxnkPTv4=
Subject key identifier:   8D:80:70:30:E1:01:66:3C:D5:90:4C:65:D1:A7:62:70:ED:84:E9:6E
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       2E2671F81ED86C6EAB4513353904F91A2491D319
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231332e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        181.41.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:26:71:f8:1e:d8:6c:6e:ab:45:13:35:39:04:f9:1a:24:91:d3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:12:e3:3b:06:1c:f3:39:3f:ca:53:3f:bc:
                    04:dc:18:32:fa:0e:ef:ac:a7:b3:52:09:df:e9:4b:
                    7d:9a:14:c8:07:01:13:3a:5f:31:ac:d1:46:a8:a9:
                    eb:82:60:89:ea:77:6b:e2:a0:dd:f6:ec:73:56:93:
                    01:7a:4b:fd:4f:bb:c1:4c:f3:84:ed:a4:20:0f:43:
                    7c:a9:e0:71:89:50:4e:10:4e:e7:50:24:a6:50:1c:
                    cb:d7:51:39:ef:95:64:06:60:c4:d1:2e:64:b2:9e:
                    56:81:8a:e2:48:3a:9a:d6:02:a7:eb:54:93:de:46:
                    ae:f5:14:30:5b:3b:bc:1a:f3:f1:a7:93:62:d8:b2:
                    f3:73:8e:98:f3:d1:ed:62:72:d7:aa:e7:1f:51:43:
                    99:b0:41:50:fb:03:6b:45:f8:36:30:13:f1:02:c5:
                    53:b1:eb:1f:03:c9:f6:69:e8:6b:a1:d8:f6:9c:f9:
                    7e:e3:53:ae:a1:27:4a:2c:0c:ed:d2:72:75:26:41:
                    85:73:89:40:38:81:af:ef:ac:c5:39:27:74:53:83:
                    c4:6f:c5:57:28:dd:54:aa:ea:19:00:0a:7c:60:e9:
                    a0:ed:60:98:80:ff:8e:7d:4a:0b:ea:f2:f6:33:88:
                    a4:c5:88:5b:cc:1f:32:03:cf:d6:02:99:19:f3:97:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:80:70:30:E1:01:66:3C:D5:90:4C:65:D1:A7:62:70:ED:84:E9:6E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:34:bb:cf:0f:c1:42:50:dc:d2:1e:e7:fc:84:99:e4:40:
         04:04:d3:29:5a:f0:98:7e:94:23:1b:bf:2b:59:79:b8:4e:7c:
         3b:19:a5:7b:6f:f1:a8:1b:cc:b8:13:8f:0e:84:95:d1:b7:0d:
         d4:73:cd:ba:be:9a:69:b7:57:cc:74:2d:16:1b:84:6d:97:c8:
         1d:ea:d9:4e:28:aa:17:f4:c0:cd:42:32:7f:14:9c:3b:bb:4b:
         90:e6:59:b1:d4:42:c6:da:40:cd:f9:40:fd:d4:1f:81:aa:75:
         5d:b7:8a:c8:a1:4e:ae:6a:ff:23:b4:dc:e8:ab:cc:b5:1f:46:
         c0:83:74:70:59:b2:6f:b5:aa:ca:7a:3f:1f:73:0a:6a:83:d6:
         96:1f:e5:48:8c:4a:84:54:23:1b:a2:de:fa:22:d9:f7:5a:9b:
         84:3d:f9:6c:26:9e:12:94:7a:de:50:da:77:41:72:40:51:f7:
         f4:20:d8:48:74:05:14:39:93:b9:fe:0f:be:2f:94:37:a5:58:
         c8:d2:94:d2:24:13:43:a9:4a:81:42:22:91:e9:60:1c:49:a3:
         f7:ec:aa:5c:03:ea:81:83:f7:d2:23:69:f1:f6:b1:1d:4d:d6:
         d0:09:10:3d:a3:63:ef:e8:06:20:d4:32:54:ef:9b:1d:21:59:
         df:07:15:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org