Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231342e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          /uSlUsMOwd/zLlQlQkhu7P1aaATUShsHSWuVFM1AzHs=
Subject key identifier:   B3:4B:DD:4E:70:07:44:1B:C3:11:F8:FA:0A:09:69:C4:26:9E:AC:4D
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       5C5D059EA850F9F3E3F80760D9DEC1F41CC91035
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231342e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:07 +0000
ROA not before:           Thu 17 Feb 2022 11:40:07 +0000
ROA not after:            Thu 16 Feb 2023 11:45:07 +0000
asID:                     61317
IP address blocks:        181.41.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5d:05:9e:a8:50:f9:f3:e3:f8:07:60:d9:de:c1:f4:1c:c9:10:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:07 2022 GMT
            Not After : Feb 16 11:45:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:79:3b:22:40:82:25:dd:3a:7e:54:eb:0c:
                    16:65:af:0f:cc:0b:af:e9:46:1b:c8:b8:9d:9c:4f:
                    6c:e6:d8:cd:cc:16:48:97:96:de:60:11:f5:27:db:
                    ec:8e:58:51:ac:b2:f6:e7:a6:30:ee:c3:58:b9:87:
                    7d:9e:4f:b7:84:7c:b2:aa:c6:7a:61:1e:11:34:4c:
                    8b:40:89:d4:11:91:a8:52:ee:87:c1:15:8c:91:a5:
                    ec:90:65:04:59:ac:66:d2:20:bf:26:fb:bd:83:ea:
                    cb:b5:c5:b1:a2:f0:7e:8b:8d:3c:9d:f1:cc:02:7a:
                    d1:f2:90:ab:a8:e8:b3:ff:80:d4:9f:16:8e:cf:b6:
                    1f:70:4b:bd:ea:b5:94:54:2d:35:db:52:90:34:69:
                    f3:86:f9:b2:89:65:a8:10:53:4c:e4:d2:28:37:57:
                    2b:d6:ff:dc:7f:0c:df:0c:fd:a8:bd:1d:26:d7:3e:
                    f9:a0:24:1b:59:c9:7f:f2:93:19:1c:00:88:a2:3b:
                    10:6b:5e:af:f8:c5:25:72:02:c7:96:4c:cb:10:04:
                    d8:0f:4b:c8:f2:90:21:b5:57:7d:c4:f7:5a:30:7c:
                    ac:e4:e2:22:e6:7f:61:97:06:a8:fb:15:dd:f4:ef:
                    6b:5e:03:16:50:ad:c4:4d:04:2a:56:b6:e8:00:25:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4B:DD:4E:70:07:44:1B:C3:11:F8:FA:0A:09:69:C4:26:9E:AC:4D
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:89:2c:60:c7:66:c3:35:de:a2:65:90:ea:7b:92:49:e6:d0:
         f8:0f:98:9b:f9:00:9f:48:6f:45:a7:47:c8:7b:81:40:d3:18:
         39:69:b7:a0:56:7c:46:0c:f1:e4:5d:47:90:af:63:57:71:fc:
         48:9b:60:bb:ce:86:b0:68:e5:4a:c9:7b:35:0b:1e:ba:5f:e6:
         0d:a6:6e:03:d7:12:bc:93:72:a8:03:e4:ef:cc:67:7d:78:74:
         31:c2:65:d8:66:e0:9d:ab:ea:c8:a4:49:02:64:f1:5d:1e:6f:
         3f:30:50:e9:5e:4e:d3:8c:b3:9c:66:87:98:9d:fe:5b:3d:4e:
         8b:c9:30:30:cf:9f:b6:72:9e:e3:6b:fe:a5:b5:2e:74:2b:8f:
         2d:c8:66:b5:18:fd:a4:18:e4:b2:5a:9f:28:aa:c9:44:ae:72:
         fe:c9:1e:66:bc:90:76:f6:f8:4d:c3:bf:51:65:26:4e:c8:5f:
         b6:28:1e:c4:ba:21:1b:b3:c1:3a:a2:3b:d5:6f:a8:c8:d8:a5:
         7a:3c:58:7e:03:15:b4:26:1e:12:7f:9d:de:09:0b:20:1e:17:
         26:cd:3c:f2:3d:6d:e3:4e:56:e7:4b:40:8f:be:dc:59:c8:cb:
         17:2f:a1:fb:9c:78:f9:f4:7d:88:f5:4d:04:7b:a3:0f:2f:92:
         8e:d5:74:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org