Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137302e35362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          MaUv0t1rBC5yeXw/rKP85TkZkcjRH2z3RD1mxuy/CRs=
Subject key identifier:   D8:89:66:66:85:37:2F:6E:AD:26:95:2A:0A:A5:E7:F7:01:D5:31:F6
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       5705192EDD5A60A9EDC5596AE81B0ED5AA38D5DF
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     61317
IP address blocks:        185.170.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:05:19:2e:dd:5a:60:a9:ed:c5:59:6a:e8:1b:0e:d5:aa:38:d5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:e2:96:8e:ae:a8:a2:18:52:03:95:64:10:
                    2a:d2:d1:68:9b:ac:e5:28:c9:e7:cd:53:36:ee:dc:
                    fd:c9:c8:fa:76:c4:d2:c6:46:e9:33:82:dc:50:3e:
                    5d:06:cd:d1:a3:61:3a:04:1a:5e:68:b5:93:21:fd:
                    17:8f:15:53:9b:9e:52:be:44:24:66:9d:2e:7e:3f:
                    d5:e1:a6:c9:dd:5d:e9:ba:3a:f7:8d:2f:b6:69:26:
                    84:7c:ee:75:3e:a3:6d:0b:0d:bf:c4:4b:ab:a0:d8:
                    47:cd:47:18:89:a2:77:d0:35:7f:0c:27:32:94:4f:
                    e5:6a:8e:85:24:c2:6e:40:a3:a6:ad:73:cf:34:1e:
                    14:48:0b:bc:17:81:d0:f1:05:c4:e3:db:79:cf:e3:
                    7c:2a:26:b3:8b:f4:d8:ed:f5:79:54:2a:0a:2d:bf:
                    c0:88:a6:90:1b:31:52:e8:07:10:1b:31:66:00:90:
                    f9:83:f8:c6:e2:f1:32:12:75:50:ea:83:c0:21:8c:
                    83:4a:16:c5:37:7c:35:6b:e9:bd:67:0d:0f:f6:75:
                    1c:a2:30:dc:94:0b:77:f4:33:93:d0:bd:de:db:0a:
                    20:e4:f0:e5:2a:d7:da:39:f7:35:0c:05:a3:04:7b:
                    3c:b7:35:99:8e:e4:1a:39:6a:92:25:51:17:02:92:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:66:66:85:37:2F:6E:AD:26:95:2A:0A:A5:E7:F7:01:D5:31:F6
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:a1:b4:ae:f5:50:95:83:76:43:8c:c5:c9:d0:c8:ec:a1:
         a1:a8:84:58:b8:c4:f7:11:44:d9:13:c8:04:f3:eb:5d:d0:84:
         2b:f1:39:31:33:e8:31:76:51:d5:64:3e:e3:d7:7f:2b:ba:9c:
         db:ca:f9:c5:7a:4b:3a:2b:91:d3:a0:41:9c:8d:ba:fc:8b:dd:
         a3:91:99:2a:19:20:1e:0c:9d:2b:ba:c2:8e:4f:39:f8:95:79:
         61:08:82:94:44:95:8b:c9:dc:fe:d5:9d:1e:2b:8a:48:21:32:
         c3:26:37:c5:33:bc:78:44:87:6b:bf:40:2a:e4:9a:b2:c0:b9:
         1b:b6:0c:fa:d5:0d:06:7c:0c:a0:36:c5:a7:d4:3e:c5:fc:4c:
         88:ca:57:68:ff:8d:00:4e:51:71:95:06:1c:97:c8:57:74:26:
         c4:fa:c9:b1:ae:ae:a5:e4:67:c8:67:2c:99:05:8a:79:bc:01:
         3e:74:fe:ce:49:5f:88:b4:03:37:ed:c3:9c:b9:9d:71:1c:00:
         20:8a:16:c2:9a:a7:b1:67:47:ec:f2:10:59:b8:1e:8a:54:a0:
         87:1a:59:4f:aa:05:4f:21:97:f4:af:a7:22:21:08:ef:0c:d9:
         e8:6b:26:ca:c5:d0:5a:0e:51:49:60:2f:b7:2d:ac:15:db:4b:
         5b:3f:b0:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org