Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa
File:                     3138312e34312e3231382e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          gYPRQGDlIvnxzo9C5RRO4hnVA9dntKQwiFhHwhK5DCY=
Subject key identifier:   B3:B0:D9:42:ED:92:90:3E:D5:72:66:F4:60:96:9B:4A:1D:9E:F2:D1
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       637D0A9CC6B29AF59B5CB7DA2CFE2AA4246FF39B
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     22773
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7d:0a:9c:c6:b2:9a:f5:9b:5c:b7:da:2c:fe:2a:a4:24:6f:f3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d0:f2:7b:db:45:f6:4f:1f:f7:f7:f0:6a:f3:
                    15:3b:dd:57:d5:49:a4:ea:6d:e4:61:23:85:35:0e:
                    29:58:2b:a9:2b:62:b9:5a:93:7a:de:9f:5d:b1:66:
                    cd:aa:8c:9a:e9:ce:66:29:e4:66:e9:3a:fb:61:25:
                    da:87:0b:32:5d:77:9b:c6:ce:d4:6f:dd:89:c8:00:
                    9b:5b:b8:cf:8c:38:99:70:67:a7:73:a6:3f:df:e6:
                    12:6d:38:d4:0a:b6:79:f7:af:61:43:83:76:dd:53:
                    ed:bb:80:66:eb:cf:fc:3f:b7:22:2e:61:37:3a:59:
                    0f:1b:8b:49:9b:9a:d3:67:c9:ce:38:e3:ab:33:77:
                    ee:69:39:c7:90:df:b2:7d:10:95:2b:f7:12:9a:c3:
                    b7:6a:cf:e5:b8:d9:3d:6e:c5:1c:dc:b0:75:9a:39:
                    16:a8:6d:2c:8a:99:6b:a7:c1:fe:c5:d5:34:a1:a5:
                    01:ad:76:0a:67:3b:a6:63:53:49:c6:6f:8a:86:9e:
                    a7:b7:7e:a0:83:53:67:80:6f:fd:52:c0:98:46:31:
                    33:2a:1d:31:af:7a:4c:52:cb:82:85:63:47:3c:08:
                    c4:01:56:b1:1c:9b:67:b5:58:fd:fd:d4:4c:5a:f7:
                    af:30:93:b7:38:81:37:72:80:54:4b:bb:46:c9:4d:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:D9:42:ED:92:90:3E:D5:72:66:F4:60:96:9B:4A:1D:9E:F2:D1
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:18:6b:f9:f2:f7:b4:0a:18:75:bc:4d:52:31:85:99:30:6c:
         28:6f:42:57:b9:25:a5:ea:9b:7d:15:ab:41:d8:2c:df:00:8f:
         1b:de:99:14:59:cf:19:7d:e2:d6:04:1f:59:f1:82:53:71:71:
         7a:6b:4a:00:e5:03:e0:84:9e:5d:2b:bb:67:d3:f1:f0:5c:4a:
         6d:de:91:e2:c1:2c:93:03:1e:27:38:ec:34:34:bc:b1:14:8c:
         1e:f7:f1:9d:8b:09:c6:8e:e5:ff:34:0c:e9:31:36:cf:f9:89:
         ff:ce:18:5e:29:aa:d2:53:0e:54:fb:24:aa:2c:52:47:50:d8:
         b0:8a:bc:08:31:f3:f8:ff:38:fc:87:eb:78:74:77:4f:81:13:
         d2:f5:ef:63:8d:37:af:c3:19:41:5f:31:93:bf:8e:c4:2d:19:
         4d:ff:8e:c6:0d:c9:2e:04:27:1e:44:9d:2c:13:ac:88:21:56:
         fa:a8:7d:95:13:d7:1d:d2:c0:a3:15:fa:b7:27:5e:db:09:ca:
         71:ec:e0:03:f3:bb:55:a0:4b:14:2a:df:37:74:23:b3:97:25:
         23:91:7a:90:f6:3c:14:95:ad:1b:f5:f4:91:c5:ed:d1:c0:e0:
         9f:90:8c:db:65:c1:8c:12:a5:45:88:ad:e0:d8:fa:bc:98:5b:
         81:92:e4:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org