Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa
File:                     3138312e34312e3230352e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier:          LOB0GIGEeXzHYPclJeXIMcHDKaLAOL0fW69zJOUMW4Q=
Subject key identifier:   36:9E:16:E3:44:95:BE:1C:05:A0:01:96:F9:27:99:12:BC:F7:A7:20
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       57390B9B829190D618FF0D0E022EA64CB0B9CDBE
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     29066
IP address blocks:        181.41.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:39:0b:9b:82:91:90:d6:18:ff:0d:0e:02:2e:a6:4c:b0:b9:cd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:b7:c9:d6:03:33:a1:86:d8:ab:40:76:b7:
                    e6:d2:ca:40:49:9f:57:7e:d8:01:7f:91:fe:21:d3:
                    b1:bf:b4:c1:93:60:95:24:a7:01:02:e8:a9:1b:1a:
                    eb:7e:f2:28:6a:1d:61:c7:4f:45:5b:27:10:56:ce:
                    53:2d:0a:f4:87:27:d2:4f:a4:e4:15:54:d9:9f:a2:
                    dd:2b:8c:a2:e6:cb:4e:4a:ab:7d:bc:ce:25:20:37:
                    4d:1e:1d:ab:9f:cc:7a:eb:73:d7:4c:cb:3a:82:aa:
                    7f:5f:7c:e5:07:8a:0f:7a:57:9f:3a:af:00:75:cb:
                    56:f6:94:a9:6a:ce:3a:82:95:58:74:86:89:6c:19:
                    75:34:2d:01:fe:97:eb:45:bd:2a:36:98:95:68:dc:
                    61:ca:79:ef:45:d7:bb:d1:87:c3:24:48:02:ad:be:
                    8a:09:3a:02:4a:85:b6:0b:93:fd:e5:2a:12:fc:02:
                    d2:ae:93:67:16:01:dc:ca:84:51:df:e7:ed:b4:60:
                    bc:0a:af:5f:7f:45:b4:76:ae:f3:b8:f0:84:7f:08:
                    40:be:64:10:77:cf:ae:e1:48:31:f1:fe:ed:12:6f:
                    08:72:04:c4:0e:78:cb:7a:0c:06:49:ef:7a:55:19:
                    89:4c:7e:75:ee:fc:f1:dc:7f:7b:fe:6f:c0:c8:cf:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9E:16:E3:44:95:BE:1C:05:A0:01:96:F9:27:99:12:BC:F7:A7:20
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230352e302f32342d3234203d3e203239303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e7:ab:f0:6d:a0:b8:8a:da:79:91:d7:fe:61:de:b5:1b:d3:
         42:49:c1:f3:71:c2:49:9a:f3:2f:2b:41:cd:4d:78:cc:db:7e:
         e6:ea:63:bc:ef:62:a8:2b:2d:b7:45:4d:bf:23:ac:87:be:26:
         1e:bb:0c:62:48:36:01:fc:2f:1b:a6:84:89:59:96:9a:7c:bc:
         1b:c4:01:96:3b:92:49:3b:21:9a:2e:be:63:06:6c:e8:e7:b7:
         85:a6:d4:65:7a:f5:79:50:8c:38:7e:e3:53:fb:bd:f2:a4:1d:
         10:e3:44:21:68:5d:07:7b:e6:a4:b1:11:26:f9:f5:78:42:09:
         27:13:53:88:b7:09:7c:86:bc:61:e4:7a:0b:d8:5c:91:45:10:
         50:63:e3:80:69:88:8e:27:71:fb:b4:e2:e0:f4:f0:ba:ba:0e:
         9b:5d:dc:da:8c:0f:81:33:47:d8:0a:7f:87:de:0a:d9:a4:c9:
         2f:94:29:f7:bc:72:1b:fe:a0:94:17:23:a9:ac:47:c0:3d:31:
         31:ae:17:af:ea:89:9a:68:34:1d:a7:ee:5c:c0:09:c2:e7:e6:
         9e:1e:0b:07:63:d5:87:8d:2c:cb:db:a7:84:e5:d2:01:cc:18:
         63:00:9a:f7:29:f5:b9:5e:16:14:c9:b2:cf:a1:71:81:6b:89:
         ca:0d:f3:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org