Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231392e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          cVf+ppd5B+xSYCxOeGmkM72G1p4bK9K1xuQlp7w/q3E=
Subject key identifier:   D4:B5:82:3C:80:64:2B:52:ED:0B:EA:BB:77:F5:A4:ED:3D:1A:9F:EC
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       49C550E2966FF651D254B981D1A9089F7F912203
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231392e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     61317
IP address blocks:        181.41.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:50:e2:96:6f:f6:51:d2:54:b9:81:d1:a9:08:9f:7f:91:22:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:af:8a:05:80:8b:a1:88:39:d4:ae:1c:19:
                    44:8c:e0:5d:43:39:21:d4:48:54:48:3b:13:42:26:
                    31:d4:99:87:87:ef:3f:e0:c5:61:49:2f:ea:28:ef:
                    d9:3d:73:ec:73:11:c5:71:14:1b:93:e8:c2:c9:2e:
                    7d:8c:c4:b4:f3:6a:00:3b:f2:71:38:61:d3:b4:97:
                    b5:af:d2:57:af:5f:8a:01:fc:5c:a7:38:64:c2:36:
                    ec:35:73:7e:29:e4:2c:a1:f7:c0:38:03:ef:9f:32:
                    82:b5:07:6c:4b:16:21:3e:f9:08:d8:ce:15:06:a9:
                    70:7b:30:54:11:c9:23:5a:a4:90:44:8d:c3:d3:69:
                    9c:19:d9:6f:69:eb:28:0e:5e:d8:c4:e4:ed:2a:2f:
                    8e:6a:16:2b:af:63:b6:5e:34:6e:06:1b:5d:0b:19:
                    42:6d:22:b0:d0:3b:c7:88:53:41:31:7d:f2:15:d1:
                    c8:da:b7:a0:31:1a:00:7e:4c:bf:5e:47:de:00:0a:
                    da:b5:c4:1b:f0:26:e9:d0:97:1e:56:0a:b3:8d:d6:
                    82:8b:86:8b:8b:88:1c:96:93:a1:a7:74:12:47:46:
                    12:9e:92:bc:8b:b7:b9:32:61:bb:5a:78:db:c8:a1:
                    f1:a4:38:5e:8a:8e:b0:66:f9:07:38:55:8f:50:0e:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B5:82:3C:80:64:2B:52:ED:0B:EA:BB:77:F5:A4:ED:3D:1A:9F:EC
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:2f:37:ff:e0:d4:5d:43:47:94:41:ec:a6:58:31:40:e1:
         be:4d:64:fe:75:f7:cf:65:09:69:fc:12:4e:1d:38:eb:b4:41:
         96:30:32:9b:18:ff:ab:59:17:23:03:57:87:2e:a1:5f:26:9d:
         7f:8d:7b:95:0c:2e:98:30:91:38:62:cc:d3:17:0f:ac:e7:e4:
         fe:d6:06:8a:6f:0b:6f:18:a7:8d:ee:a7:8f:f2:fc:ee:fe:6b:
         13:76:10:fc:cc:36:d4:55:33:da:06:18:f3:93:6b:4c:39:d9:
         2f:40:63:f6:36:dc:ba:bf:d8:db:d5:03:13:07:83:00:92:c4:
         a2:1e:67:2e:90:29:99:e6:dd:6f:80:59:64:bc:33:d6:e7:3e:
         39:a3:d4:b7:42:73:13:f1:98:4d:86:15:bf:80:83:09:3c:e2:
         a0:98:05:6d:3b:ba:4e:15:fa:07:cb:1b:70:93:d6:13:b9:c4:
         f9:f7:65:fa:b4:ea:e1:35:48:ff:60:0d:f9:a6:53:3f:81:ff:
         ef:a3:c9:0a:7c:94:65:57:f6:be:e6:39:05:61:4c:19:83:6e:
         bd:fb:dc:3b:cf:ab:05:38:ce:3e:25:69:06:e8:24:22:df:8d:
         f1:38:47:6d:58:57:9e:b6:48:44:bd:a9:ec:26:dc:1a:41:33:
         1d:42:81:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org