Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35362e302f32322d3232203d3e203631333137.roa
File:                     3138352e3137302e35362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          2MzHhkDRrADDQiJNh2BXQHL4Y9DFrxsyoqWqEu7UUGY=
Subject key identifier:   6D:1B:81:B7:55:44:21:31:16:A0:99:52:91:8F:F1:02:64:A6:05:B4
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       1B46A2EF8FAE770434C58C4880880FE7BEFFF516
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35362e302f32322d3232203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     61317
IP address blocks:        185.170.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:46:a2:ef:8f:ae:77:04:34:c5:8c:48:80:88:0f:e7:be:ff:f5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:1a:02:db:b4:89:d0:08:98:6b:ff:7c:7d:
                    19:48:a2:03:49:f7:f0:63:bb:81:c3:cb:11:a3:b7:
                    cc:e0:1c:95:96:2a:11:bb:91:f8:0b:aa:e5:a8:75:
                    76:05:aa:8a:02:4f:3c:c0:dc:03:eb:63:69:eb:3c:
                    57:df:51:91:d6:09:87:10:7a:cd:8b:22:94:34:4f:
                    15:7d:55:a0:85:2b:f8:90:e8:47:ff:7c:86:98:af:
                    43:d9:e3:ec:ba:ea:73:e9:82:31:2d:12:87:e5:ed:
                    e0:9c:18:57:e1:0e:f1:38:9c:94:1a:e8:9c:53:ee:
                    a8:5b:bb:ed:a6:46:f5:66:ca:f8:c3:01:c7:c5:6e:
                    24:61:92:34:ca:59:0f:af:0d:d7:49:56:f9:46:10:
                    af:d2:97:ca:75:77:58:f6:f7:87:2c:57:fa:5f:20:
                    bc:ae:c2:c0:03:8c:55:1d:9b:1a:4d:23:1c:72:fd:
                    b9:01:81:a3:a6:ff:ef:2e:e6:9c:85:45:52:5c:93:
                    57:d0:f3:78:87:89:fa:e4:f5:ce:04:bd:d4:7c:be:
                    02:3f:34:e5:18:2a:81:b1:60:2e:f6:59:b8:29:ff:
                    9f:83:c5:ab:4d:fd:59:93:0c:66:43:1c:66:fd:a7:
                    e8:86:db:ce:71:ff:24:6e:3d:e3:36:6b:9b:56:04:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1B:81:B7:55:44:21:31:16:A0:99:52:91:8F:F1:02:64:A6:05:B4
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:25:7b:26:25:50:f9:76:4a:44:11:ea:27:a3:fc:eb:ae:
         95:e8:50:e5:52:9a:d4:f5:06:4e:c0:96:51:3c:89:1b:0b:f5:
         6f:f0:a0:ce:01:1c:d3:35:d1:2b:55:7c:08:d1:25:07:25:c2:
         07:77:19:64:35:89:3d:89:dc:57:af:45:35:55:8e:3d:4c:93:
         44:6d:9d:e5:48:63:15:2e:1e:2f:6c:f7:a0:9b:69:37:89:7b:
         cf:7d:ba:e3:e8:3f:45:07:15:a8:c1:38:66:c3:11:00:1c:44:
         4b:8d:0d:9a:13:31:81:11:d1:24:f7:f6:ac:1f:c8:ca:5f:0b:
         8c:c2:6a:6b:57:ab:1a:79:3c:a6:c0:13:d7:6c:f5:3a:08:ca:
         52:27:14:47:17:2e:43:79:59:35:3c:9a:6e:0f:cd:e6:09:a1:
         e2:94:38:42:18:11:19:94:d6:82:8f:da:a1:a9:6a:91:f4:27:
         30:20:c4:35:93:91:38:55:25:36:dc:2c:ff:38:34:67:c9:5f:
         2e:cf:c4:10:e2:12:3e:60:08:51:fb:43:43:b0:4a:de:10:63:
         94:8a:cb:b4:96:91:ec:0d:60:a4:6e:8c:aa:90:a6:18:d2:cc:
         9f:20:72:3e:03:f3:fb:36:c6:ad:23:65:3d:f5:64:37:2a:84:
         d0:2e:a7:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org