Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          8MhUWBLkCi3PeTh1ek8tpKZPfF6RIGvF7lWz9JqsmZ8=
Subject key identifier:   48:90:A3:8E:F0:28:91:A9:D9:30:5F:4F:41:56:05:4D:83:68:55:B4
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       12A8B942DC73F5C16ED1F800E2CE651E4A028105
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa
Signing time:             Sun 13 Mar 2022 15:53:52 +0000
ROA not before:           Sun 13 Mar 2022 15:48:52 +0000
ROA not after:            Sun 12 Mar 2023 15:53:52 +0000
asID:                     398464
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a8:b9:42:dc:73:f5:c1:6e:d1:f8:00:e2:ce:65:1e:4a:02:81:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Mar 13 15:48:52 2022 GMT
            Not After : Mar 12 15:53:52 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:89:65:54:56:60:e3:91:78:a3:93:3b:bd:
                    69:34:e3:07:ef:e0:e1:a0:89:a9:d5:81:38:15:a2:
                    e2:e4:e9:b7:ff:30:1d:ea:4d:63:1c:61:bc:4a:4a:
                    eb:a8:e8:82:de:de:d5:80:a9:b0:6b:dc:8f:e1:52:
                    12:6b:46:74:0e:ad:6e:fd:18:70:d3:11:e4:3b:79:
                    39:ea:9b:45:8d:78:87:f2:fd:5c:de:a5:14:75:09:
                    17:41:63:ff:38:ad:f7:d0:02:60:7b:43:64:31:2d:
                    3f:4c:fa:43:bc:5d:6a:56:3f:84:63:67:e0:7a:b0:
                    e3:44:35:4e:c9:ac:81:35:6a:d4:19:e3:84:32:e5:
                    57:34:8b:ee:4a:5c:e8:de:d4:06:9e:20:4f:53:61:
                    6d:a7:74:70:c6:c5:8a:1b:3c:4c:5a:41:f7:c8:f1:
                    f1:9c:f8:d6:22:67:4e:7e:35:ec:64:93:0e:41:73:
                    62:c5:85:6c:e9:52:7d:48:48:52:9d:cc:48:c8:52:
                    3b:db:97:dd:64:ea:96:5e:44:9d:12:a2:d8:41:b2:
                    1b:fe:a3:67:30:89:48:55:4d:e4:2d:ff:1a:18:75:
                    23:4c:b1:b3:64:e3:37:fe:aa:f3:75:6b:5f:d7:b5:
                    ef:2b:8d:d2:b8:f9:c9:ac:ea:65:57:cd:2a:df:45:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:A3:8E:F0:28:91:A9:D9:30:5F:4F:41:56:05:4D:83:68:55:B4
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:fe:c7:3e:5a:d6:29:f6:cf:bc:ba:27:07:03:04:71:fd:71:
         f0:23:01:12:13:97:00:8b:63:e0:cb:5e:cc:d2:2c:f5:c3:9c:
         2d:8c:fb:19:7a:ff:fb:09:70:7e:80:02:65:12:94:a2:47:f4:
         14:6e:0e:87:eb:43:7f:d0:5f:3e:43:34:de:e3:d8:84:33:f6:
         2b:f2:31:5c:5d:c0:df:7e:66:f6:ff:06:80:98:2c:92:be:fb:
         9d:1e:29:10:f9:23:fd:0c:0f:25:ac:9f:24:84:21:27:e4:cd:
         5a:23:90:d8:b5:79:7b:56:07:f5:e0:c6:6a:f8:3b:1a:a7:c5:
         fc:88:12:83:18:22:74:1f:fa:85:94:9c:22:9d:41:e6:fd:ae:
         06:08:ef:f8:d6:c5:6f:99:25:63:17:28:57:7d:62:04:55:60:
         3d:4b:d7:c4:bc:ff:dd:b9:bf:a4:d8:c4:92:22:41:6f:a8:b9:
         ba:50:55:8f:51:40:7f:b8:f7:a8:89:6d:4e:53:0e:58:d0:51:
         ac:02:a1:6e:a4:a5:f0:a9:55:f4:23:6a:43:3d:00:e3:00:ad:
         42:ec:c4:72:df:f1:6a:b1:27:3e:a5:d6:1f:99:c7:e2:f9:2f:
         94:d3:97:ca:f8:96:95:ae:b1:e6:6e:70:c2:ce:9d:2e:7c:5a:
         f3:c8:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org