Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa
File:                     3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          1b6H9DLZ/HQG4jAb4cy1+i4ol2wFbQMuvShsQc7PbA4=
Subject key identifier:   48:59:33:43:2F:7F:B8:79:B4:D1:DD:9C:F1:D5:84:7C:67:4B:B7:BF
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       1ABB8DED23766F3239809B92B38E033AC2403F40
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa
Signing time:             Thu 19 May 2022 12:35:26 +0000
ROA not before:           Thu 19 May 2022 12:30:26 +0000
ROA not after:            Thu 18 May 2023 12:35:26 +0000
asID:                     398464
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bb:8d:ed:23:76:6f:32:39:80:9b:92:b3:8e:03:3a:c2:40:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:26 2022 GMT
            Not After : May 18 12:35:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:68:17:79:eb:6e:26:2f:9a:8d:9c:9a:ad:
                    29:df:c3:f9:06:61:96:56:39:83:26:f6:93:14:4d:
                    c6:0f:16:23:23:7b:ef:1b:6a:9f:57:b1:26:7e:e5:
                    01:c5:0e:6f:37:9c:37:5b:af:1e:f0:8c:4b:49:b1:
                    1d:b1:1f:b1:21:e0:87:7f:72:35:fb:1a:63:b9:c6:
                    90:d0:e0:61:72:5a:18:ef:bb:4e:9a:66:d0:dd:f7:
                    36:52:96:5f:6f:26:3b:98:da:b6:6f:89:eb:0f:4c:
                    1c:93:43:b9:59:e0:54:bf:e5:4c:38:9b:79:f5:80:
                    a1:04:37:9f:ce:2f:7a:05:22:e5:36:43:5d:6e:d2:
                    b8:ad:74:61:fc:03:27:44:9b:e6:31:91:e8:26:19:
                    d4:f1:e5:ce:31:e9:f2:ec:e5:02:72:69:b5:9d:64:
                    58:ac:11:e4:a8:dd:12:e7:93:cb:17:71:6b:a0:f2:
                    cb:c9:ee:4d:02:a4:67:15:c4:91:00:28:22:b8:e7:
                    17:c8:81:15:be:f8:0f:10:85:1a:96:c5:6e:c7:65:
                    48:ba:41:31:7c:11:a7:f0:37:b4:ab:8f:d6:a2:09:
                    a0:1b:c3:a7:06:80:b9:9f:4d:ff:1b:88:32:2f:19:
                    10:1a:ae:0f:52:cc:a2:a0:e2:c6:30:d4:f2:bb:85:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:59:33:43:2F:7F:B8:79:B4:D1:DD:9C:F1:D5:84:7C:67:4B:B7:BF
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:69:01:64:b0:e8:58:ba:7d:7b:9e:3d:21:8a:2c:05:83:59:
         ac:52:7d:80:77:ed:55:5e:f8:59:cc:ff:42:25:13:79:63:5b:
         00:30:e7:12:89:cf:b8:dd:ae:76:17:e2:81:f5:46:ec:e1:d3:
         78:ff:db:ae:57:cc:26:d4:21:0f:37:0c:a0:d7:37:88:f3:30:
         a3:31:8f:56:84:fe:82:aa:75:86:25:f8:d0:4a:de:48:e0:82:
         32:6a:ba:10:c2:9a:c1:fe:cc:75:7e:66:b5:a4:36:c7:ab:a1:
         fc:96:86:5a:77:f3:2d:be:e8:eb:fa:3e:65:37:4b:4a:b2:06:
         63:51:38:fc:f5:92:c0:81:86:87:c0:11:f3:86:53:b4:1c:20:
         de:4e:0e:a1:85:37:eb:42:89:c3:07:6d:6f:b6:aa:ee:92:86:
         9e:07:9b:a8:3f:94:51:5e:ad:64:7a:2c:f2:10:97:ab:bb:9f:
         1a:eb:bb:18:81:80:e6:06:0b:b9:61:e1:16:1a:78:f0:28:56:
         a9:ca:3f:ab:2b:71:be:30:74:a4:30:f6:a8:20:57:b5:32:20:
         3f:30:e3:f8:c1:2a:38:d2:c3:cf:fe:55:63:5e:35:d4:45:a8:
         9b:e5:80:23:c1:46:28:d4:96:12:21:06:70:9a:b2:d9:01:c5:
         16:08:7b:7d
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUGruN7SN2bzI5gJuSs44DOsJAP0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1MjIwQjEy
M0ZCMjBCNjAeFw0yMjA1MTkxMjMwMjZaFw0yMzA1MTgxMjM1MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk0NzY4MTc3OUVCNkUyNjJG
OUE4RDlDOUFBRDI5REZDM0Y5MDY2MTk2NTYzOTgzMjZGNjkzMTQ0REM2MEYxNjIz
MjM3QkVGMUI2QTlGNTdCMTI2N0VFNTAxQzUwRTZGMzc5QzM3NUJBRjFFRjA4QzRC
NDlCMTFEQjExRkIxMjFFMDg3N0Y3MjM1RkIxQTYzQjlDNjkwRDBFMDYxNzI1QTE4
RUZCQjRFOUE2NkQwRERGNzM2NTI5NjVGNkYyNjNCOThEQUI2NkY4OUVCMEY0QzFD
OTM0M0I5NTlFMDU0QkZFNTRDMzg5Qjc5RjU4MEExMDQzNzlGQ0UyRjdBMDUyMkU1
MzY0MzVENkVEMkI4QUQ3NDYxRkMwMzI3NDQ5QkU2MzE5MUU4MjYxOUQ0RjFFNUNF
MzFFOUYyRUNFNTAyNzI2OUI1OUQ2NDU4QUMxMUU0QThERDEyRTc5M0NCMTc3MTZC
QTBGMkNCQzlFRTREMDJBNDY3MTVDNDkxMDAyODIyQjhFNzE3Qzg4MTE1QkVGODBG
MTA4NTFBOTZDNTZFQzc2NTQ4QkE0MTMxN0MxMUE3RjAzN0I0QUI4RkQ2QTIwOUEw
MUJDM0E3MDY4MEI5OUY0REZGMUI4ODMyMkYxOTEwMUFBRTBGNTJDQ0EyQTBFMkM2
MzBENEYyQkI4NTdERDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuUdoF3nrbiYvmo2cmq0p38P5BmGWVjmDJvaTFE3GDxYjI3vvG2qf
V7EmfuUBxQ5vN5w3W68e8IxLSbEdsR+xIeCHf3I1+xpjucaQ0OBhcloY77tOmmbQ
3fc2UpZfbyY7mNq2b4nrD0wck0O5WeBUv+VMOJt59YChBDefzi96BSLlNkNdbtK4
rXRh/AMnRJvmMZHoJhnU8eXOMeny7OUCcmm1nWRYrBHkqN0S55PLF3FroPLLye5N
AqRnFcSRACgiuOcXyIEVvvgPEIUalsVux2VIukExfBGn8De0q4/WogmgG8OnBoC5
n03/G4gyLxkQGq4PUsyioOLGMNTyu4V90QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FEhZM0Mvf7h5tNHdnPHVhHxnS7e/MB8GA1UdIwQYMBaAFBqowrcNxu989rwMR3VS
ILEj+yC2MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzMvMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1
MjIwQjEyM0ZCMjBCNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMy8xQUE4QzJCNzBEQzZFRjdDRjZC
QzBDNDc3NTUyMjBCMTIzRkIyMEI2LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMy8zMTM4MzEyZTM0
MzEyZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM0MzYzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEALUp2jANBgkqhkiG9w0BAQsFAAOCAQEAOWkBZLDoWLp9e549IYos
BYNZrFJ9gHftVV74Wcz/QiUTeWNbADDnEonPuN2udhfigfVG7OHTeP/brlfMJtQh
DzcMoNc3iPMwozGPVoT+gqp1hiX40EreSOCCMmq6EMKawf7MdX5mtaQ2x6uh/JaG
WnfzLb7o6/o+ZTdLSrIGY1E4/PWSwIGGh8AR84ZTtBwg3k4OoYU360KJwwdtb7aq
7pKGngebqD+UUV6tZHos8hCXq7ufGuu7GIGA5gYLuWHhFhp48ChWqco/qytxvjB0
pDD2qCBXtTIgPzDj+MEqONLDz/5VY1411EWom+WAI8FGKNSWEiEGcJqy2QHFFgh7
fQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org