Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          w3nSFZAvzk+K4hXaCyrzwXpftU419ABE4aXgs6Ytl5s=
Subject key identifier:   09:86:2F:2E:A4:B4:03:AA:A2:FE:BE:38:7C:43:6F:60:49:06:5E:43
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       23560196B5E1A707E74235D9C59CB29A30FF1601
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:26 +0000
ROA not before:           Thu 19 May 2022 12:30:26 +0000
ROA not after:            Thu 18 May 2023 12:35:26 +0000
asID:                     61317
IP address blocks:        181.41.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:01:96:b5:e1:a7:07:e7:42:35:d9:c5:9c:b2:9a:30:ff:16:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:26 2022 GMT
            Not After : May 18 12:35:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:e7:fd:6b:b7:22:6e:78:c2:45:25:e5:ea:
                    0c:62:aa:49:98:4f:77:3a:4f:88:18:db:a8:ef:5f:
                    69:94:5a:c5:89:28:c1:46:25:85:24:c0:55:19:6e:
                    23:00:35:ce:ab:04:92:7c:80:38:c8:00:5f:97:20:
                    c1:25:4d:56:42:38:1f:15:bb:4a:5d:f9:1c:9d:ec:
                    19:2e:62:69:8c:4e:4e:88:70:6e:8e:71:3b:d9:3a:
                    e5:b1:00:37:b4:f8:72:db:21:53:ab:2f:e1:68:5b:
                    fa:32:e4:31:76:e3:c2:eb:7e:50:c8:bf:0b:ee:4f:
                    0b:f8:e9:f5:a0:81:ef:22:d4:65:46:89:ba:e8:44:
                    db:84:d6:fe:65:29:86:1f:c9:5b:fb:94:60:b4:5e:
                    57:3e:7b:5b:c3:3e:46:8e:42:75:5f:82:ab:39:e5:
                    07:39:03:28:9a:d4:77:96:b7:65:9a:78:e3:cc:55:
                    ce:84:28:12:25:30:95:c1:76:87:e7:12:b0:94:15:
                    0f:27:b6:df:b0:e5:7f:2f:8a:4b:d6:6b:2f:15:51:
                    99:6b:25:65:25:65:a9:00:6d:36:26:80:33:ba:dc:
                    7c:11:08:73:21:c0:c3:2f:92:ee:69:26:f7:90:63:
                    ff:89:cc:25:7f:7d:4c:f2:91:2d:ab:9a:7d:2d:52:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:2F:2E:A4:B4:03:AA:A2:FE:BE:38:7C:43:6F:60:49:06:5E:43
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:b1:6d:e2:a2:25:82:44:5f:fc:85:4b:ba:7b:b1:1b:40:
         10:b0:f4:2a:c8:28:83:34:93:c8:1d:a4:6a:51:9f:4e:29:3a:
         38:17:eb:5d:8b:7b:52:5a:5a:0c:5d:de:3d:57:c6:f3:54:bb:
         77:65:18:3e:64:1d:e9:5e:a0:e1:9f:2b:cb:18:fb:97:11:ae:
         0b:f3:2b:14:8e:5c:d1:eb:6f:b2:79:a0:57:95:be:f8:37:49:
         56:1e:ee:63:5e:77:9a:f5:59:72:19:14:90:d0:76:01:70:4b:
         57:c2:1f:22:f4:f0:16:cd:39:7e:8a:09:b2:12:ec:49:ae:72:
         70:96:52:cf:f9:d5:03:b3:73:7a:8a:81:5b:9a:d5:d0:b6:02:
         5f:d9:99:fd:86:4a:1a:c2:63:02:c5:45:c4:f6:e1:78:d6:6c:
         63:9c:d4:b0:e6:d2:ab:4b:82:e8:93:5c:f2:92:52:07:32:ba:
         30:eb:da:c9:84:49:c0:53:85:04:ab:8d:d9:3a:f6:9a:17:6b:
         50:d1:cc:90:2b:2f:97:2a:05:95:bf:c5:d6:e0:8e:e9:4a:03:
         b7:81:88:4a:8f:2d:65:42:70:f0:8b:98:19:ff:17:46:b8:ca:
         b8:69:03:fa:8f:4a:b5:02:82:97:9e:45:58:3e:f9:5f:62:e9:
         3e:ca:06:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org