Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231342e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          H581HMEb4KKLRgpyBa6jD/XDFNZ5IJEvVUBp7Gxp8qE=
Subject key identifier:   02:7F:97:CB:4B:92:8B:CF:A2:B6:C1:55:49:69:BD:9E:A5:67:7B:93
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       2559397556E42411D42D3F0330EE34CE8921F52E
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231342e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:23 +0000
ROA not before:           Thu 19 May 2022 12:30:23 +0000
ROA not after:            Thu 18 May 2023 12:35:23 +0000
asID:                     61317
IP address blocks:        181.41.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:39:75:56:e4:24:11:d4:2d:3f:03:30:ee:34:ce:89:21:f5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:23 2022 GMT
            Not After : May 18 12:35:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:c3:f7:14:87:b0:7b:8d:81:74:aa:dc:dc:
                    cf:8e:cc:84:44:ea:59:4b:d0:1c:d7:37:2e:06:df:
                    89:a0:b1:bb:ad:9f:d1:8f:d8:fc:78:0c:0e:4e:42:
                    6a:27:27:50:af:8c:4d:3c:b2:f9:a8:b8:f7:ba:f4:
                    56:dd:02:59:ce:41:71:31:19:39:a8:d2:52:d6:c1:
                    49:d2:79:ed:c1:2f:45:15:24:1f:64:7d:2f:a8:75:
                    ea:8b:c9:84:52:56:a5:78:c0:19:ca:e9:5d:ff:01:
                    19:29:e2:8a:ff:3f:6b:6a:7d:09:20:fe:c0:58:2c:
                    a2:bc:d0:91:9a:31:0d:59:ff:95:6a:70:1f:19:ae:
                    88:87:20:b5:21:cb:22:d0:26:ab:d9:53:75:01:a8:
                    32:ad:cb:11:30:fa:97:77:50:42:ce:4f:53:4a:7e:
                    a6:2b:17:c4:05:ed:75:ed:58:95:28:42:b1:6a:b9:
                    b7:4a:71:b1:1c:70:a8:1d:34:fa:b4:88:8e:65:f9:
                    ae:e4:df:4d:02:81:3c:10:e1:f5:fa:c3:ce:7f:da:
                    cb:0f:6e:f8:46:9c:d5:99:bb:27:1f:65:57:e2:bc:
                    5f:8a:30:ca:10:c7:e5:c6:06:2c:29:8c:73:3d:16:
                    1a:1c:05:b4:dc:9c:71:59:0d:72:11:b2:d2:a5:c8:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7F:97:CB:4B:92:8B:CF:A2:B6:C1:55:49:69:BD:9E:A5:67:7B:93
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:63:f5:9a:a9:02:4b:f9:0a:17:c2:22:04:58:d4:f5:d1:37:
         66:f2:a4:ff:1e:86:78:86:6e:ca:17:e2:f8:73:5f:8f:c2:00:
         46:f2:c2:45:46:06:36:d7:cf:70:54:c5:d9:66:d1:28:88:9c:
         f1:f2:99:7d:ed:9a:5d:ae:a2:93:db:70:f5:fa:ee:5e:2c:14:
         fd:58:0f:40:3f:b8:ab:00:b7:45:a6:a0:8c:7f:b4:b9:ba:59:
         94:47:78:28:03:c7:34:74:cc:8d:20:32:33:84:40:49:e4:87:
         80:ec:bd:86:a9:20:62:a4:44:a8:47:1b:c5:6b:05:5f:17:0b:
         3e:2b:b5:f7:a1:7f:5d:9a:55:e6:ec:5e:53:38:c9:d0:a8:7c:
         0d:0c:d6:e7:d6:3e:54:75:a1:7b:9e:2a:8f:9d:4e:d3:85:3f:
         5b:18:02:1f:63:b9:68:fd:c1:9e:4d:8a:3e:fa:cc:9c:a3:ec:
         f9:57:ce:4c:d1:73:38:8d:4d:4a:8a:4f:fe:c8:6f:03:3a:13:
         81:e1:2a:45:e2:3c:0d:8f:22:5e:ba:a6:9a:2f:22:f2:08:f9:
         c6:78:62:1b:27:e4:55:bc:c2:b0:da:a0:cc:a3:e8:2c:d1:fe:
         b4:94:a6:2e:e7:1d:b9:71:a5:80:e7:be:31:f0:f4:bf:24:a1:
         bf:32:38:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org