Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa
File:                     3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          dgxSUBebSIaPkiCxpAC/A8NGyYbphdoaa72kx6xh7A0=
Subject key identifier:   52:A0:5C:9E:FB:05:4D:C0:37:BD:92:C4:C2:77:F3:90:3E:4B:44:35
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       2A508B79C2A968ECFD380CD60670FA03DF6CA771
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa
Signing time:             Sun 13 Mar 2022 16:01:13 +0000
ROA not before:           Sun 13 Mar 2022 15:56:13 +0000
ROA not after:            Sun 12 Mar 2023 16:01:13 +0000
asID:                     398464
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:50:8b:79:c2:a9:68:ec:fd:38:0c:d6:06:70:fa:03:df:6c:a7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Mar 13 15:56:13 2022 GMT
            Not After : Mar 12 16:01:13 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:8d:af:78:01:09:66:96:da:83:c3:33:49:
                    9c:cc:54:f4:3c:21:4c:45:5e:d5:4c:3c:cc:62:42:
                    e0:3f:1a:98:02:af:d1:bc:77:64:7a:3a:be:b9:bc:
                    d0:1f:d3:9d:bf:a9:c6:64:f7:be:6d:18:3f:c1:c9:
                    71:71:60:3b:49:b5:ea:a9:05:cd:54:77:76:66:87:
                    11:bd:fa:05:b7:0d:3b:ab:04:84:73:f9:0c:fc:a3:
                    8a:6c:51:b9:b8:09:32:eb:51:3e:7f:4d:1e:29:bb:
                    ff:78:ee:59:8a:f4:80:ee:39:7c:47:b7:72:64:ac:
                    8c:35:5d:e4:1b:55:f0:14:f3:66:59:18:34:1a:09:
                    5b:35:99:b4:9e:07:e0:95:36:1b:64:32:f3:e6:4d:
                    a7:47:cb:20:d3:e9:6f:04:ef:65:04:37:c4:99:6e:
                    5a:24:cf:ad:7c:99:2d:1b:cd:9b:9c:18:0e:0e:6a:
                    f9:c2:29:0c:65:53:c5:51:74:cc:8c:5a:f6:ad:1b:
                    ca:07:e6:e8:67:7e:36:32:5e:c3:e8:20:17:fa:86:
                    f5:0f:b2:06:e8:ae:44:0c:38:f2:36:2c:92:6c:e3:
                    cb:05:35:89:ca:00:d5:fd:c0:20:9d:32:74:c5:9e:
                    3d:9c:2c:1f:2a:86:48:c8:cf:29:09:73:57:51:94:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:5C:9E:FB:05:4D:C0:37:BD:92:C4:C2:77:F3:90:3E:4B:44:35
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:c4:47:ac:d1:d6:18:f2:47:a9:b0:b2:09:88:f3:9a:28:15:
         b6:c1:2a:84:6e:e2:f1:1e:80:e9:fb:3c:a5:6c:ea:6f:f0:2d:
         30:0a:8e:61:3a:4c:89:b5:6a:2b:cd:c5:46:63:47:96:4e:92:
         d4:da:19:52:6b:d8:4b:d4:88:53:65:5d:7d:52:b5:f2:ad:92:
         05:4c:51:5f:a3:9d:d5:66:18:f1:96:9a:18:17:57:f2:cb:99:
         bf:5d:74:cd:e3:07:1f:66:b0:ed:08:24:5c:19:60:a1:28:16:
         8e:58:a4:70:89:bc:e9:f4:22:c1:c9:bc:fe:35:4e:68:e9:70:
         73:17:72:30:67:81:96:6e:61:0b:2c:69:74:f2:5d:46:8c:1e:
         68:4d:61:c5:80:4a:6e:94:41:64:ce:0c:5e:f6:41:c2:b5:d0:
         02:5f:b3:8c:4f:e6:ac:87:dc:b0:71:5c:af:2c:62:93:25:6d:
         25:eb:f2:f6:7f:72:60:da:17:f1:15:04:2e:a1:81:fe:db:f8:
         4b:06:51:36:16:a9:c4:08:f6:20:ca:a2:4f:9c:80:b3:03:ac:
         6d:0a:e2:35:b8:d6:43:8a:cd:26:f4:7b:6c:b7:fa:81:cc:fb:
         e0:88:e9:10:b8:9d:64:d8:5d:f4:c2:51:78:36:6e:01:47:d7:
         58:fe:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org