Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XphDzD/qX/JUqU1bjPg0YMzYCJxL07N/uhFTO09KPqk=
Subject key identifier:   7D:D1:15:33:CD:B9:49:30:27:BE:02:EF:24:FC:E3:D4:AA:FE:90:0E
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       627A5BB84F06F56414F8FB707190D9B7BBB7B3D7
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:23 +0000
ROA not before:           Thu 19 May 2022 12:30:23 +0000
ROA not after:            Thu 18 May 2023 12:35:23 +0000
asID:                     61317
IP address blocks:        181.41.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7a:5b:b8:4f:06:f5:64:14:f8:fb:70:71:90:d9:b7:bb:b7:b3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:23 2022 GMT
            Not After : May 18 12:35:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:ed:6b:4a:94:c8:e2:80:fe:38:0b:1f:04:
                    55:b5:ce:40:df:5c:1b:07:84:c4:55:55:84:dd:06:
                    96:be:b2:ff:13:6c:bf:08:fc:a8:9e:1e:79:6d:c0:
                    40:5d:f2:31:0e:13:a4:7d:71:87:fc:a0:52:dc:20:
                    43:9b:28:be:e7:2b:85:c6:ff:f1:f3:1b:ac:d0:61:
                    b5:bd:35:25:d3:47:4c:23:ac:1c:28:60:3c:6e:f5:
                    c2:82:9a:8a:3f:13:7c:25:1e:c2:c8:16:eb:3d:f8:
                    b6:c8:fb:8c:3e:d2:dc:38:9b:2d:e2:57:65:ee:ff:
                    3f:6d:39:0c:32:d4:fd:11:3d:8f:13:1a:06:21:df:
                    42:c8:88:42:5b:5d:21:03:7a:0a:d1:3b:10:d0:43:
                    e0:25:38:30:c4:fb:27:a8:2c:76:ae:f6:82:59:1c:
                    61:b6:65:4f:77:91:f2:58:d5:ca:2a:55:e4:ad:6d:
                    d2:5e:59:db:ea:b5:38:3c:6e:97:7e:b4:6d:63:b5:
                    1e:38:f8:6d:20:71:f7:be:fc:91:e8:39:e4:17:07:
                    0b:67:15:a5:75:38:58:84:ba:b7:0d:31:21:0d:8a:
                    79:c4:2f:5a:d1:ab:dc:91:e7:fc:22:55:01:b3:48:
                    f3:c1:e6:56:95:95:87:24:4e:4f:b2:3c:ad:89:57:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D1:15:33:CD:B9:49:30:27:BE:02:EF:24:FC:E3:D4:AA:FE:90:0E
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:df:5e:ec:a2:09:4b:8c:5a:9c:92:f7:cc:98:05:aa:ea:fc:
         96:c9:ce:19:6a:62:14:82:5a:b8:59:10:43:ff:ec:59:0c:35:
         66:ca:49:dd:b5:4d:8b:3e:7c:cd:26:5a:e5:36:8e:d5:e6:65:
         51:5d:b2:8f:d6:38:fc:ce:b2:8a:6c:dc:5d:9a:c5:75:ed:40:
         97:fa:c3:74:23:9d:07:17:47:b8:9d:5f:18:11:c5:5f:d1:22:
         05:f0:85:5e:e2:90:34:8f:b6:25:ba:e3:7a:ad:ff:20:9d:97:
         92:13:ff:b0:ab:24:67:f3:6d:41:4a:8d:0a:25:b4:00:33:f5:
         d7:1b:60:77:82:98:e9:f9:4e:9a:8b:4e:d1:61:fd:93:cf:d7:
         f6:9c:c9:33:da:0e:25:50:59:78:8f:75:59:f8:ef:2c:5a:ac:
         01:ce:b1:0c:aa:f8:43:ad:d2:b2:ee:0e:8f:3a:b7:30:49:5b:
         8f:77:a6:3e:86:c4:e1:88:73:36:91:95:69:19:66:e2:c2:1c:
         09:00:72:9d:74:90:ee:c2:73:ec:20:71:30:9b:f8:cd:c9:03:
         e5:66:7d:98:56:5a:05:eb:da:88:ae:0f:59:26:ac:3d:e7:f8:
         e6:ed:c0:84:07:11:4d:62:11:be:6b:75:d2:23:71:fa:d3:c4:
         42:62:37:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org