Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139322e302f32302d3234203d3e203631333137.roa
File:                     3138312e34312e3139322e302f32302d3234203d3e203631333137.roa (raw, json)
Hash identifier:          B2sIZbsSUFw4ZXBJobG1ZpSNBi5Pf7BOH4iNjCzV2W0=
Subject key identifier:   D6:E4:5B:CA:62:DB:6E:56:89:67:AA:B3:28:F1:32:AF:D4:24:C3:40
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       281EB542A5159E86368B0A33007EB0761045D744
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139322e302f32302d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     61317
IP address blocks:        181.41.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1e:b5:42:a5:15:9e:86:36:8b:0a:33:00:7e:b0:76:10:45:d7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:65:fc:aa:3e:08:ec:e7:a0:a5:9f:b6:a3:
                    69:f6:eb:55:b5:7b:28:08:06:d4:02:eb:33:6f:6a:
                    12:a6:ad:f6:e2:e4:d5:a4:cc:36:46:75:ef:e0:68:
                    17:95:a0:79:0d:5c:75:00:7b:67:80:7a:82:72:82:
                    07:ea:79:cb:58:ae:02:20:9a:fa:e2:bb:0f:82:32:
                    fe:02:21:6f:99:66:68:91:c0:5d:ea:c5:93:ce:cc:
                    9e:79:05:15:53:8e:2e:2f:02:57:0e:c8:a6:52:27:
                    63:c8:4a:35:90:74:b4:7b:d1:aa:49:dc:c4:89:30:
                    4e:58:b6:7c:a0:56:30:1e:5a:c0:86:07:92:33:69:
                    2e:6e:67:cf:c6:12:d0:ac:37:df:89:67:12:dc:03:
                    83:55:87:7e:eb:97:8b:f2:5c:89:3e:0e:e0:08:82:
                    2c:4e:17:96:75:eb:18:11:d2:ce:f0:ec:8f:ee:08:
                    8d:76:5b:b3:e5:d5:f5:6b:49:6c:a9:21:d8:48:4a:
                    67:ee:ea:fa:cc:4f:c2:2c:29:2e:50:c5:79:a9:fe:
                    42:60:fa:2b:23:66:16:0a:3f:24:e3:7a:d6:a3:25:
                    c7:52:92:af:fa:c4:5b:69:53:96:a5:2b:84:88:d4:
                    96:08:bf:e6:59:08:80:8f:c1:56:5e:b8:45:30:cf:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E4:5B:CA:62:DB:6E:56:89:67:AA:B3:28:F1:32:AF:D4:24:C3:40
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139322e302f32302d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:d2:17:ec:74:ed:b1:25:3b:dc:a9:7d:4a:1d:7a:4d:ea:
         c4:28:7b:34:10:42:b3:ef:82:f0:6a:99:94:c7:21:32:96:80:
         ef:89:d1:cf:9c:85:bf:b9:e3:8b:4d:90:1d:e8:f9:52:da:df:
         8b:a8:bc:4d:c8:3b:59:50:04:63:62:35:f4:8c:47:b1:e3:3b:
         80:47:ba:84:f0:e2:7f:67:1f:0f:e4:d7:8b:17:cd:d1:25:74:
         8e:77:ea:2c:5c:9b:c9:ff:91:29:e6:30:50:bc:6d:34:44:7f:
         2e:78:05:fb:09:1f:7d:27:a6:06:86:3d:a8:d5:f1:b3:a8:c2:
         8d:32:c2:0b:db:b0:d0:5d:dd:ed:b3:2e:ee:a6:08:cd:45:ba:
         7a:c2:81:41:fd:7d:16:e1:33:d4:b0:b4:d3:7c:22:51:cd:27:
         74:a8:c6:41:46:48:f0:e5:b1:64:18:5a:a9:9e:4b:29:73:bd:
         38:14:a0:75:29:09:af:b8:8d:35:8e:e6:9c:ae:ae:b4:62:bc:
         03:c0:88:0e:65:bd:a2:43:7e:c6:09:59:8e:18:cf:d5:3e:89:
         e8:01:a5:1b:a6:0c:86:1a:9e:9b:e9:0c:56:f8:88:9b:6a:74:
         8f:25:d3:2b:12:4e:47:0d:4d:c8:a6:b8:09:64:fc:cb:8a:9d:
         1c:d9:3c:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org