Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139352e302f32342d3234203d3e203430363736.roa
File:                     3138312e34312e3139352e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          HhRt93qSabfGRjzilUBuD9fNVhaZNfv574UVpscyTiI=
Subject key identifier:   FB:9E:53:BF:35:F9:B8:1A:8C:D7:31:04:D8:0B:80:AB:97:8B:A5:C0
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       4A5AA0FF91EE5BE3C8C2E7779B726F00554AB7ED
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139352e302f32342d3234203d3e203430363736.roa
Signing time:             Thu 19 May 2022 12:35:27 +0000
ROA not before:           Thu 19 May 2022 12:30:27 +0000
ROA not after:            Thu 18 May 2023 12:35:27 +0000
asID:                     40676
IP address blocks:        181.41.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5a:a0:ff:91:ee:5b:e3:c8:c2:e7:77:9b:72:6f:00:55:4a:b7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:27 2022 GMT
            Not After : May 18 12:35:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:c8:d6:7e:39:0f:b9:77:3b:e7:a6:29:4d:
                    06:33:fd:5e:fd:21:2e:4d:84:1b:c8:a0:84:cf:9c:
                    ad:fe:20:d7:ac:87:7d:2f:72:b2:ba:02:8e:c8:c5:
                    d8:57:e4:1e:88:96:10:7d:d2:4e:0b:e8:87:bd:51:
                    8f:57:1b:c8:58:2a:b3:dc:0a:26:46:3e:6d:ac:05:
                    bd:6a:67:d2:6e:9c:b5:77:aa:e3:17:9f:2e:a8:47:
                    07:ed:d9:77:7e:ae:25:b4:26:38:6f:13:9c:33:d4:
                    ad:81:5e:c1:70:ef:a6:89:03:df:a3:35:41:f4:b4:
                    2e:ae:14:be:72:46:55:13:39:a7:0c:15:c4:16:6e:
                    ce:e8:f8:cb:48:5b:2a:85:10:be:4a:45:cf:80:b6:
                    48:d9:89:ea:d9:ea:93:4c:5d:7c:83:1a:c9:54:e4:
                    c2:65:3d:a3:74:9a:ca:b4:5b:c4:43:61:37:3f:53:
                    47:e8:2f:b8:cf:b6:e6:73:3e:07:5f:ab:f5:44:be:
                    ea:cb:c4:42:d5:3f:74:70:ad:d4:b7:b9:71:a2:6d:
                    ae:73:08:e0:97:56:80:e7:5d:20:f7:e4:d4:b7:ff:
                    48:55:0a:08:e8:07:94:25:34:f6:f1:a5:e9:f5:aa:
                    80:ff:13:33:95:68:4e:c4:98:e5:dc:37:62:b7:45:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:53:BF:35:F9:B8:1A:8C:D7:31:04:D8:0B:80:AB:97:8B:A5:C0
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139352e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:45:04:96:80:fb:b5:67:c4:cd:df:5f:d2:cf:be:df:a3:cc:
         4c:bc:0a:62:73:b4:60:ba:9c:15:b6:fb:19:73:de:a9:b5:dd:
         c1:3c:fa:da:39:ef:e2:a5:99:36:57:a9:5b:99:03:c0:fd:5d:
         60:c1:ee:b5:dc:27:ee:a5:8d:7c:ab:60:58:ab:56:4b:39:c9:
         23:5b:54:b7:13:64:e8:62:ee:2b:fa:f0:6d:c3:de:dc:22:4c:
         7f:37:4c:f2:8e:7b:8e:ff:cf:9d:e8:fd:03:53:19:5b:58:1c:
         7a:f3:37:76:84:62:0a:40:bd:4c:b6:6b:24:23:3b:e3:08:34:
         ed:49:b9:47:fa:1d:8e:71:c9:81:9d:01:b8:a7:ad:33:8b:e1:
         90:bd:0e:0c:25:bb:5b:a7:e1:2f:d4:7f:47:1f:e8:11:80:9d:
         4f:60:ff:11:3b:4f:fe:c1:90:3c:16:e5:f2:d6:11:1f:fd:eb:
         28:b9:07:87:bf:4e:06:a0:a6:4f:64:65:8b:2a:e4:a7:69:01:
         72:49:3c:2f:f9:3c:cd:ae:ed:aa:5c:2b:f9:4a:0c:b2:d8:4e:
         42:32:46:06:65:2d:6d:d9:97:52:7d:67:8b:7f:6a:81:ab:b9:
         20:4f:53:2b:03:85:0b:8d:48:bc:1c:16:5d:f8:94:e0:c6:59:
         bd:2f:d1:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org