Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e20313734.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          hYf2CCsGeGvWyCvVHXTTRu+fz3y8o0MVygTwkWss3vo=
Subject key identifier:   64:7E:0F:01:1A:20:12:2D:8D:FC:5D:48:A9:02:C2:B0:E8:5E:B8:CC
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       1CA0EA158CCD8A935BA8E828B61D4547B01054F1
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e20313734.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     174
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:ea:15:8c:cd:8a:93:5b:a8:e8:28:b6:1d:45:47:b0:10:54:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:02:9e:ba:db:47:4e:a4:54:28:ef:e3:3a:
                    3b:53:ae:14:34:c5:d4:01:fa:a7:c4:42:46:1a:b2:
                    03:ff:e4:b6:31:e0:0c:da:45:6f:b8:6f:1e:a5:01:
                    d2:ef:c7:47:60:bc:86:d3:52:be:ed:93:2b:d4:e8:
                    22:9a:d8:8b:14:23:16:a9:e3:f7:25:ef:a9:03:a6:
                    55:81:e7:41:c0:6a:07:f8:11:43:50:50:4c:69:36:
                    d5:b3:b3:40:ec:69:c3:7d:41:f9:94:59:f8:ea:ed:
                    a7:cf:23:68:01:a8:71:2e:56:90:d3:86:4a:14:ff:
                    d7:a3:18:6c:d1:57:cd:63:c7:83:f2:51:86:fc:78:
                    b1:7a:ff:ad:18:21:f3:64:b8:6d:f0:fc:9a:a1:6c:
                    ec:f3:15:f0:84:b8:a2:9e:3c:33:13:71:f6:34:c6:
                    b6:ae:3b:53:b2:8a:44:53:3c:ea:07:a0:05:ec:02:
                    f5:1b:87:72:9e:fd:33:9e:86:ac:92:e1:d9:2c:e5:
                    bf:35:5c:70:eb:bf:4d:97:35:0d:eb:dc:3e:cb:10:
                    b1:c9:34:db:bb:27:1e:b3:1d:cc:85:cd:e3:5e:67:
                    de:35:33:b3:00:74:47:68:9a:eb:92:eb:67:11:5d:
                    c3:5d:8d:97:bf:ba:f5:d8:d4:35:a6:92:9e:72:51:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7E:0F:01:1A:20:12:2D:8D:FC:5D:48:A9:02:C2:B0:E8:5E:B8:CC
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:25:0b:7a:d9:88:4d:e3:6a:ae:92:6d:19:63:7f:2d:3c:10:
         84:0d:f7:f9:3f:a5:61:5f:9a:3a:c6:69:a2:b4:89:33:83:db:
         89:9e:50:3a:0b:1f:a4:03:a7:c7:df:ff:bd:72:29:ec:22:51:
         9f:cb:03:19:1d:1b:0c:5e:2b:86:24:2f:53:10:23:ef:e7:50:
         c4:a0:8a:62:92:b8:30:28:cd:d1:53:94:e9:8d:72:17:9a:d9:
         56:8b:11:5b:cb:38:98:f1:e2:3e:ec:9c:80:d6:16:5e:4f:46:
         af:a2:34:4c:e3:d4:1c:d7:7c:82:4c:fb:b8:5d:a3:6f:44:02:
         4d:51:3e:5c:01:84:f1:22:23:97:19:17:07:b4:9f:65:63:50:
         92:fa:6d:60:3c:ed:60:cf:6f:b8:0e:c4:70:a1:7b:d6:4a:71:
         e9:1b:61:86:36:de:49:48:bc:08:cd:a2:5c:36:29:a2:df:29:
         cb:f5:ea:fc:04:ee:3f:f1:71:40:2b:52:6d:f7:40:d4:f4:bf:
         d7:31:33:64:3f:8b:3a:ff:2b:c9:35:7c:17:d1:ba:73:5b:54:
         ff:5e:e4:3e:c5:25:e0:98:50:04:83:dd:bb:e1:f6:3a:bd:1a:
         42:cb:0b:6d:84:35:6b:39:c1:8d:04:72:65:71:e0:1f:77:45:
         55:1d:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org