Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139332e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Yrxro3iDFt1QAB2JeOun7oCEnyEKI4AOwp5K28Ig+jM=
Subject key identifier:   43:9C:1B:6B:F0:21:7C:2F:31:92:6D:CF:03:8F:4E:BF:71:7D:74:59
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       3C2E4F439EE568CC76DE3B442DC5AC42783355A8
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139332e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:26 +0000
ROA not before:           Thu 19 May 2022 12:30:26 +0000
ROA not after:            Thu 18 May 2023 12:35:26 +0000
asID:                     61317
IP address blocks:        181.41.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2e:4f:43:9e:e5:68:cc:76:de:3b:44:2d:c5:ac:42:78:33:55:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:26 2022 GMT
            Not After : May 18 12:35:26 2023 GMT
        Subject: CN=3082010A0282010100C2CF6639A4640EF853A2440AA070A797CDDE7CF4EC21CFE2716752F85F5E019FCE8606932C3886DE945D26610F35547FC08BC0A1A0F30614BB9FF51AB5F7552AEB5456847343AFAA8AF4F2BAF8270D1F163BF536B02E8AC5A405F030BBCF0EFA0EF0A967DB22BB5CFD0998BA1A11B8AD449D7D9C05FC40F78CECCB510235532249D0913388A82785137CA85F0E3F2AEF7AC17D7D6D005C6030F27A9BDE5988F3E7DE01BC1849F7AABD1F16C54795ABF25A274AC74BBA6450F3182310E386190D57ABFB0517024F64EE5328FAF469E091BF5D0D88C41B71C1EF153296B0B32C3EDA372805F0D9E4A982EED5767862B3E77E8F7F29389DB812DB54521F99AD95230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:66:39:a4:64:0e:f8:53:a2:44:0a:a0:70:
                    a7:97:cd:de:7c:f4:ec:21:cf:e2:71:67:52:f8:5f:
                    5e:01:9f:ce:86:06:93:2c:38:86:de:94:5d:26:61:
                    0f:35:54:7f:c0:8b:c0:a1:a0:f3:06:14:bb:9f:f5:
                    1a:b5:f7:55:2a:eb:54:56:84:73:43:af:aa:8a:f4:
                    f2:ba:f8:27:0d:1f:16:3b:f5:36:b0:2e:8a:c5:a4:
                    05:f0:30:bb:cf:0e:fa:0e:f0:a9:67:db:22:bb:5c:
                    fd:09:98:ba:1a:11:b8:ad:44:9d:7d:9c:05:fc:40:
                    f7:8c:ec:cb:51:02:35:53:22:49:d0:91:33:88:a8:
                    27:85:13:7c:a8:5f:0e:3f:2a:ef:7a:c1:7d:7d:6d:
                    00:5c:60:30:f2:7a:9b:de:59:88:f3:e7:de:01:bc:
                    18:49:f7:aa:bd:1f:16:c5:47:95:ab:f2:5a:27:4a:
                    c7:4b:ba:64:50:f3:18:23:10:e3:86:19:0d:57:ab:
                    fb:05:17:02:4f:64:ee:53:28:fa:f4:69:e0:91:bf:
                    5d:0d:88:c4:1b:71:c1:ef:15:32:96:b0:b3:2c:3e:
                    da:37:28:05:f0:d9:e4:a9:82:ee:d5:76:78:62:b3:
                    e7:7e:8f:7f:29:38:9d:b8:12:db:54:52:1f:99:ad:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:1B:6B:F0:21:7C:2F:31:92:6D:CF:03:8F:4E:BF:71:7D:74:59
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:f2:44:5c:fb:88:1f:92:bd:f1:9c:09:47:96:13:73:ee:
         b8:8a:c4:0b:29:ce:bb:6b:58:98:de:6f:3a:6f:3e:ea:18:6c:
         f8:e0:6a:41:9f:38:90:4e:c5:5d:7d:4f:31:67:42:43:dd:03:
         e8:30:e6:7e:e3:ca:2d:30:58:4c:a8:f8:b3:df:92:1e:35:cf:
         66:8e:a1:32:f5:34:95:2a:9d:9b:30:99:aa:db:45:bb:ac:8c:
         05:c3:8e:25:b1:43:56:b7:ae:0b:88:67:07:48:44:2e:24:68:
         8c:2d:d1:18:8f:d9:c2:c6:4b:a0:81:61:e9:95:10:44:c4:5a:
         6b:7f:83:ae:67:63:e0:44:4c:02:a2:57:71:56:1c:8c:37:61:
         0d:37:38:6c:1a:e7:00:ab:da:06:24:d8:e3:68:86:55:fd:4d:
         a3:95:41:4e:bd:dc:c6:22:46:96:98:03:07:49:a9:92:29:f4:
         a1:32:58:fb:ff:ac:98:11:f5:ec:01:b0:e8:ae:6b:52:56:45:
         20:8c:52:e5:e4:47:cb:b5:34:cd:ad:73:98:d9:60:64:e6:aa:
         c9:ca:90:02:10:58:57:84:50:04:68:e2:b7:02:60:c6:b3:b5:
         da:87:f5:45:90:63:48:0e:c5:5f:c1:db:7f:55:16:0a:5e:6c:
         d1:5f:11:a3
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUPC5PQ57laMx23jtELcWsQngzVagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1MjIwQjEy
M0ZCMjBCNjAeFw0yMjA1MTkxMjMwMjZaFw0yMzA1MTgxMjM1MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJDRjY2MzlBNDY0MEVGODUz
QTI0NDBBQTA3MEE3OTdDRERFN0NGNEVDMjFDRkUyNzE2NzUyRjg1RjVFMDE5RkNF
ODYwNjkzMkMzODg2REU5NDVEMjY2MTBGMzU1NDdGQzA4QkMwQTFBMEYzMDYxNEJC
OUZGNTFBQjVGNzU1MkFFQjU0NTY4NDczNDNBRkFBOEFGNEYyQkFGODI3MEQxRjE2
M0JGNTM2QjAyRThBQzVBNDA1RjAzMEJCQ0YwRUZBMEVGMEE5NjdEQjIyQkI1Q0ZE
MDk5OEJBMUExMUI4QUQ0NDlEN0Q5QzA1RkM0MEY3OENFQ0NCNTEwMjM1NTMyMjQ5
RDA5MTMzODhBODI3ODUxMzdDQTg1RjBFM0YyQUVGN0FDMTdEN0Q2RDAwNUM2MDMw
RjI3QTlCREU1OTg4RjNFN0RFMDFCQzE4NDlGN0FBQkQxRjE2QzU0Nzk1QUJGMjVB
Mjc0QUM3NEJCQTY0NTBGMzE4MjMxMEUzODYxOTBENTdBQkZCMDUxNzAyNEY2NEVF
NTMyOEZBRjQ2OUUwOTFCRjVEMEQ4OEM0MUI3MUMxRUYxNTMyOTZCMEIzMkMzRURB
MzcyODA1RjBEOUU0QTk4MkVFRDU3Njc4NjJCM0U3N0U4RjdGMjkzODlEQjgxMkRC
NTQ1MjFGOTlBRDk1MjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAws9mOaRkDvhTokQKoHCnl83efPTsIc/icWdS+F9eAZ/OhgaTLDiG
3pRdJmEPNVR/wIvAoaDzBhS7n/UatfdVKutUVoRzQ6+qivTyuvgnDR8WO/U2sC6K
xaQF8DC7zw76DvCpZ9siu1z9CZi6GhG4rUSdfZwF/ED3jOzLUQI1UyJJ0JEziKgn
hRN8qF8OPyrvesF9fW0AXGAw8nqb3lmI8+feAbwYSfeqvR8WxUeVq/JaJ0rHS7pk
UPMYIxDjhhkNV6v7BRcCT2TuUyj69Gngkb9dDYjEG3HB7xUylrCzLD7aNygF8Nnk
qYLu1XZ4YrPnfo9/KTiduBLbVFIfma2VIwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FEOcG2vwIXwvMZJtzwOPTr9xfXRZMB8GA1UdIwQYMBaAFBqowrcNxu989rwMR3VS
ILEj+yC2MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzMvMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1
MjIwQjEyM0ZCMjBCNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMy8xQUE4QzJCNzBEQzZFRjdDRjZC
QzBDNDc3NTUyMjBCMTIzRkIyMEI2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMy8zMTM4MzEyZTM0
MzEyZTMxMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KcEwDQYJKoZIhvcNAQELBQADggEBAIaj8kRc+4gfkr3xnAlHlhNz
7riKxAspzrtrWJjebzpvPuoYbPjgakGfOJBOxV19TzFnQkPdA+gw5n7jyi0wWEyo
+LPfkh41z2aOoTL1NJUqnZswmarbRbusjAXDjiWxQ1a3rguIZwdIRC4kaIwt0RiP
2cLGS6CBYemVEETEWmt/g65nY+BETAKiV3FWHIw3YQ03OGwa5wCr2gYk2ONohlX9
TaOVQU693MYiRpaYAwdJqZIp9KEyWPv/rJgR9ewBsOiua1JWRSCMUuXkR8u1NM2t
c5jZYGTmqsnKkAIQWFeEUARo4rcCYMaztdqH9UWQY0gOxV/B239VFgpebNFfEaM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org