Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139322e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          FD6ybpkOt0PoJ0Lgz1TPULHTVoFF1uordbgoem6V7GA=
Subject key identifier:   A9:14:7B:90:2F:78:21:B8:59:9B:02:2D:36:9C:E4:B3:EC:17:9A:08
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       1AAFC8734DE7CEA5DF0B09793726876409900CBC
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139322e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     61317
IP address blocks:        181.41.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:af:c8:73:4d:e7:ce:a5:df:0b:09:79:37:26:87:64:09:90:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:ed:61:b9:a4:39:fc:86:20:82:c2:42:ac:
                    81:98:9c:9b:96:f7:5a:ac:d9:1d:96:00:5b:55:2a:
                    57:6c:21:b5:d6:79:1e:ce:9b:9f:d2:8a:10:d1:44:
                    13:60:18:aa:bc:a6:88:78:07:04:12:d7:e2:37:52:
                    fa:1d:9b:8e:73:2c:91:a6:ee:57:e6:30:88:37:ab:
                    5e:3f:f4:f2:fa:76:b6:fb:b5:53:50:7e:ba:9a:22:
                    74:be:65:d9:7d:f0:eb:cf:29:92:d6:99:f8:4e:76:
                    93:66:bd:2b:dd:29:a3:d4:28:ec:67:95:e1:6c:32:
                    b9:67:a0:12:c7:97:78:25:87:41:99:47:9e:a7:40:
                    19:88:17:3e:50:e3:81:8e:5f:2b:a1:c3:d4:8b:c5:
                    89:cb:09:be:1d:38:cc:17:21:49:ff:af:ac:d4:6b:
                    fe:eb:9f:34:e9:77:f2:67:ac:76:3b:87:9a:9e:f9:
                    42:70:34:e2:cf:57:36:a5:9c:46:35:f9:91:a0:54:
                    11:72:f7:c0:83:b1:b8:d9:83:68:31:d7:af:f3:83:
                    bd:dd:ef:b1:e0:f8:ba:72:cd:e0:aa:82:03:e5:b7:
                    86:ba:54:d7:a8:36:2d:0a:1b:23:ec:81:a3:af:fb:
                    68:9c:7a:68:04:71:6b:80:e4:b7:08:c3:a0:c6:6b:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:14:7B:90:2F:78:21:B8:59:9B:02:2D:36:9C:E4:B3:EC:17:9A:08
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:28:e6:eb:1a:b8:e3:89:52:d2:86:f6:a1:1e:91:05:e3:05:
         f2:55:c1:dc:c5:9a:64:60:6b:ba:a6:f9:7f:75:c0:a0:1e:e1:
         01:31:af:ba:35:6b:a2:56:d0:83:94:91:b0:a4:2f:b8:49:f1:
         9f:1a:10:72:90:ec:c6:99:76:dd:d6:da:b1:4d:10:d1:fe:9d:
         49:39:11:73:98:55:6a:7b:85:6b:a7:ff:42:c5:a0:6c:bd:72:
         3f:d6:d9:b3:69:6d:42:f0:fe:2d:07:ac:f1:36:c6:7f:74:6c:
         f2:ea:49:cd:5e:51:78:6d:0a:0c:20:af:1f:d1:b1:b6:fe:8e:
         65:6a:59:12:ad:24:77:0f:05:b9:49:69:fd:bc:ee:75:a1:88:
         1d:56:c5:72:fd:8c:66:99:0b:e5:50:e7:73:ba:a2:48:38:28:
         24:c9:4c:fa:d9:0a:e6:09:2e:b8:7c:6c:49:97:22:a0:f0:a3:
         89:2a:3e:c2:81:ce:7a:17:3e:76:7b:70:2f:3c:58:e7:be:d9:
         58:d9:54:a3:3d:55:fe:20:e8:9a:44:13:66:1e:57:4a:32:d8:
         7b:65:85:35:f8:54:21:0f:f5:9a:96:9e:42:19:bd:37:70:05:
         98:72:d0:36:ac:6f:60:b6:04:50:8b:92:71:69:21:1a:66:36:
         b7:bc:57:db
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUGq/Ic03nzqXfCwl5NyaHZAmQDLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1MjIwQjEy
M0ZCMjBCNjAeFw0yMjA1MTkxMjMwMjVaFw0yMzA1MTgxMjM1MjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNBNEVENjFCOUE0MzlGQzg2
MjA4MkMyNDJBQzgxOTg5QzlCOTZGNzVBQUNEOTFEOTYwMDVCNTUyQTU3NkMyMUI1
RDY3OTFFQ0U5QjlGRDI4QTEwRDE0NDEzNjAxOEFBQkNBNjg4NzgwNzA0MTJEN0Uy
Mzc1MkZBMUQ5QjhFNzMyQzkxQTZFRTU3RTYzMDg4MzdBQjVFM0ZGNEYyRkE3NkI2
RkJCNTUzNTA3RUJBOUEyMjc0QkU2NUQ5N0RGMEVCQ0YyOTkyRDY5OUY4NEU3Njkz
NjZCRDJCREQyOUEzRDQyOEVDNjc5NUUxNkMzMkI5NjdBMDEyQzc5Nzc4MjU4NzQx
OTk0NzlFQTc0MDE5ODgxNzNFNTBFMzgxOEU1RjJCQTFDM0Q0OEJDNTg5Q0IwOUJF
MUQzOENDMTcyMTQ5RkZBRkFDRDQ2QkZFRUI5RjM0RTk3N0YyNjdBQzc2M0I4NzlB
OUVGOTQyNzAzNEUyQ0Y1NzM2QTU5QzQ2MzVGOTkxQTA1NDExNzJGN0MwODNCMUI4
RDk4MzY4MzFEN0FGRjM4M0JERERFRkIxRTBGOEJBNzJDREUwQUE4MjAzRTVCNzg2
QkE1NEQ3QTgzNjJEMEExQjIzRUM4MUEzQUZGQjY4OUM3QTY4MDQ3MTZCODBFNEI3
MDhDM0EwQzY2QjYzNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA06TtYbmkOfyGIILCQqyBmJyblvdarNkdlgBbVSpXbCG11nkezpuf
0ooQ0UQTYBiqvKaIeAcEEtfiN1L6HZuOcyyRpu5X5jCIN6teP/Ty+na2+7VTUH66
miJ0vmXZffDrzymS1pn4TnaTZr0r3Smj1CjsZ5XhbDK5Z6ASx5d4JYdBmUeep0AZ
iBc+UOOBjl8rocPUi8WJywm+HTjMFyFJ/6+s1Gv+65806XfyZ6x2O4eanvlCcDTi
z1c2pZxGNfmRoFQRcvfAg7G42YNoMdev84O93e+x4Pi6cs3gqoID5beGulTXqDYt
Chsj7IGjr/tonHpoBHFrgOS3CMOgxmtjSwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FKkUe5AveCG4WZsCLTac5LPsF5oIMB8GA1UdIwQYMBaAFBqowrcNxu989rwMR3VS
ILEj+yC2MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzMvMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1
MjIwQjEyM0ZCMjBCNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMy8xQUE4QzJCNzBEQzZFRjdDRjZC
QzBDNDc3NTUyMjBCMTIzRkIyMEI2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMy8zMTM4MzEyZTM0
MzEyZTMxMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KcAwDQYJKoZIhvcNAQELBQADggEBACco5usauOOJUtKG9qEekQXj
BfJVwdzFmmRga7qm+X91wKAe4QExr7o1a6JW0IOUkbCkL7hJ8Z8aEHKQ7MaZdt3W
2rFNENH+nUk5EXOYVWp7hWun/0LFoGy9cj/W2bNpbULw/i0HrPE2xn90bPLqSc1e
UXhtCgwgrx/Rsbb+jmVqWRKtJHcPBblJaf287nWhiB1WxXL9jGaZC+VQ53O6okg4
KCTJTPrZCuYJLrh8bEmXIqDwo4kqPsKBznoXPnZ7cC88WOe+2VjZVKM9Vf4g6JpE
E2YeV0oy2HtlhTX4VCEP9ZqWnkIZvTdwBZhy0Dasb2C2BFCLknFpIRpmNre8V9s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org