Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa
File:                     3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          qUfoQLVGXxDdiVMsdWTeetMiU+Zo8XYGfUtQNOGClCc=
Subject key identifier:   A8:A5:C7:C2:7A:78:06:92:9B:34:1E:8F:63:20:77:4C:6C:3F:7C:00
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       4846C7968D9E780FD845CB126D3C69613714381A
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa
Signing time:             Thu 19 May 2022 12:35:27 +0000
ROA not before:           Thu 19 May 2022 12:30:27 +0000
ROA not after:            Thu 18 May 2023 12:35:27 +0000
asID:                     397373
IP address blocks:        181.41.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:46:c7:96:8d:9e:78:0f:d8:45:cb:12:6d:3c:69:61:37:14:38:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:27 2022 GMT
            Not After : May 18 12:35:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:03:5a:f4:64:e7:85:49:a0:dd:e1:e7:79:
                    2c:11:e2:cc:00:ef:86:00:ad:a9:f9:4e:29:53:84:
                    ee:2d:fb:26:da:ed:2c:1c:0b:68:3b:b3:10:8d:a5:
                    0b:1e:6f:32:5f:f0:85:17:cc:d6:18:6b:59:1e:84:
                    f9:fa:b9:aa:ed:43:73:d9:83:3d:ee:59:6f:7f:45:
                    d1:48:16:f6:37:92:65:e9:ff:0b:c3:73:ac:e9:fd:
                    5f:79:01:c6:71:f6:3b:91:a4:f4:46:ee:f9:ab:02:
                    1e:61:e4:67:f7:5b:7b:40:91:3c:61:97:db:3d:a1:
                    7b:0f:05:07:42:05:c9:d8:d8:9f:36:9d:3d:1a:6e:
                    3c:78:97:6b:f3:8b:ca:54:43:e0:5d:93:f4:59:c8:
                    b2:81:06:43:e2:e0:b7:29:ec:13:48:7e:dd:45:4f:
                    5e:0a:50:62:e8:09:4a:12:8d:a8:21:bb:0b:69:05:
                    f5:98:11:b3:14:67:54:cb:c9:d0:24:24:49:95:44:
                    a7:63:7d:30:e3:e1:e3:b6:90:d1:b4:dd:8e:32:01:
                    d4:0f:10:42:00:d6:fd:ee:74:46:be:20:5e:18:ae:
                    f3:ca:ab:b9:01:51:35:c6:2f:bc:cf:9a:14:71:03:
                    86:b3:27:89:57:2c:5f:29:09:34:15:5e:52:8c:04:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A5:C7:C2:7A:78:06:92:9B:34:1E:8F:63:20:77:4C:6C:3F:7C:00
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231352e302f32342d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c6:3f:b9:07:15:a8:1c:18:f3:f5:60:c0:ad:b2:a5:e3:40:
         e4:3f:82:e3:2e:48:fc:c2:b1:d0:35:9f:25:1c:d0:c5:01:4f:
         f6:ed:fc:39:ad:95:b8:0f:54:84:df:0e:b0:d2:23:d6:6d:cb:
         ba:4b:33:0d:59:d2:be:b8:74:d9:f4:6d:62:b0:31:b6:af:cb:
         09:f6:2f:2d:88:79:0c:4b:5b:45:c2:72:ee:00:2d:c8:31:33:
         5c:03:45:54:1a:46:b9:72:d7:6d:d0:6d:a8:c4:d8:15:af:9b:
         c1:0c:04:99:65:e2:77:6f:3c:84:10:bb:88:18:1b:7c:ba:12:
         02:c5:0a:cb:71:53:e8:89:5c:d8:b0:ce:5a:03:26:03:84:af:
         d8:3a:80:64:bd:50:c7:db:ab:48:0a:f1:14:32:cc:ff:23:05:
         9a:23:65:d3:37:f7:eb:c5:3a:52:92:1b:9c:e7:10:24:1b:f2:
         f3:18:22:4e:05:96:93:21:1d:83:0a:ac:dc:8a:ee:d1:77:f2:
         68:3f:7e:0b:1a:2f:fb:6d:83:24:7f:4e:64:47:75:81:eb:32:
         77:f7:77:35:01:6c:b7:93:9a:0c:c3:a4:93:b7:f0:9c:0d:53:
         0c:da:88:b3:44:13:14:75:8b:c2:1f:26:1f:c4:63:72:dd:1b:
         98:31:0d:a6
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUSEbHlo2eeA/YRcsSbTxpYTcUOBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1MjIwQjEy
M0ZCMjBCNjAeFw0yMjA1MTkxMjMwMjdaFw0yMzA1MTgxMjM1MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY4ODAzNUFGNDY0RTc4NTQ5
QTBEREUxRTc3OTJDMTFFMkNDMDBFRjg2MDBBREE5Rjk0RTI5NTM4NEVFMkRGQjI2
REFFRDJDMUMwQjY4M0JCMzEwOERBNTBCMUU2RjMyNUZGMDg1MTdDQ0Q2MTg2QjU5
MUU4NEY5RkFCOUFBRUQ0MzczRDk4MzNERUU1OTZGN0Y0NUQxNDgxNkY2Mzc5MjY1
RTlGRjBCQzM3M0FDRTlGRDVGNzkwMUM2NzFGNjNCOTFBNEY0NDZFRUY5QUIwMjFF
NjFFNDY3Rjc1QjdCNDA5MTNDNjE5N0RCM0RBMTdCMEYwNTA3NDIwNUM5RDhEODlG
MzY5RDNEMUE2RTNDNzg5NzZCRjM4QkNBNTQ0M0UwNUQ5M0Y0NTlDOEIyODEwNjQz
RTJFMEI3MjlFQzEzNDg3RURENDU0RjVFMEE1MDYyRTgwOTRBMTI4REE4MjFCQjBC
NjkwNUY1OTgxMUIzMTQ2NzU0Q0JDOUQwMjQyNDQ5OTU0NEE3NjM3RDMwRTNFMUUz
QjY5MEQxQjRERDhFMzIwMUQ0MEYxMDQyMDBENkZERUU3NDQ2QkUyMDVFMThBRUYz
Q0FBQkI5MDE1MTM1QzYyRkJDQ0Y5QTE0NzEwMzg2QjMyNzg5NTcyQzVGMjkwOTM0
MTU1RTUyOEMwNDZDOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr4gDWvRk54VJoN3h53ksEeLMAO+GAK2p+U4pU4TuLfsm2u0sHAto
O7MQjaULHm8yX/CFF8zWGGtZHoT5+rmq7UNz2YM97llvf0XRSBb2N5Jl6f8Lw3Os
6f1feQHGcfY7kaT0Ru75qwIeYeRn91t7QJE8YZfbPaF7DwUHQgXJ2NifNp09Gm48
eJdr84vKVEPgXZP0WciygQZD4uC3KewTSH7dRU9eClBi6AlKEo2oIbsLaQX1mBGz
FGdUy8nQJCRJlUSnY30w4+HjtpDRtN2OMgHUDxBCANb97nRGviBeGK7zyqu5AVE1
xi+8z5oUcQOGsyeJVyxfKQk0FV5SjARsiwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKilx8J6eAaSmzQej2Mgd0xsP3wAMB8GA1UdIwQYMBaAFBqowrcNxu989rwMR3VS
ILEj+yC2MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzMvMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1
MjIwQjEyM0ZCMjBCNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMy8xQUE4QzJCNzBEQzZFRjdDRjZC
QzBDNDc3NTUyMjBCMTIzRkIyMEI2LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMy8zMTM4MzEyZTM0
MzEyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzMzMzczMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEALUp1zANBgkqhkiG9w0BAQsFAAOCAQEAIsY/uQcVqBwY8/VgwK2y
peNA5D+C4y5I/MKx0DWfJRzQxQFP9u38Oa2VuA9UhN8OsNIj1m3LukszDVnSvrh0
2fRtYrAxtq/LCfYvLYh5DEtbRcJy7gAtyDEzXANFVBpGuXLXbdBtqMTYFa+bwQwE
mWXid288hBC7iBgbfLoSAsUKy3FT6Ilc2LDOWgMmA4Sv2DqAZL1Qx9urSArxFDLM
/yMFmiNl0zf368U6UpIbnOcQJBvy8xgiTgWWkyEdgwqs3Iru0XfyaD9+Cxov+22D
JH9OZEd1gesyd/d3NQFst5OaDMOkk7fwnA1TDNqIs0QTFHWLwh8mH8Rjct0bmDEN
pg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org