Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e20313734.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          l2KSdZcnaWFc4hmopidBVAO+/J0zDZ6kztGwewUWolc=
Subject key identifier:   78:B4:78:0C:A6:41:58:3E:DD:66:5B:46:8E:4D:C7:10:84:FF:CA:EA
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       403C72E3BD585495E538501060A51E2753D21F61
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e20313734.roa
Signing time:             Thu 19 May 2022 12:35:26 +0000
ROA not before:           Thu 19 May 2022 12:30:26 +0000
ROA not after:            Thu 18 May 2023 12:35:26 +0000
asID:                     174
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3c:72:e3:bd:58:54:95:e5:38:50:10:60:a5:1e:27:53:d2:1f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:26 2022 GMT
            Not After : May 18 12:35:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:c3:b3:4a:53:66:c6:80:6e:4e:26:25:ac:
                    b3:89:24:d5:27:bd:bf:46:b9:78:53:15:9d:c1:1c:
                    9f:a0:bf:68:69:fb:3e:c4:20:73:6a:41:1c:69:7b:
                    d1:22:a7:db:53:6a:7c:79:8a:38:9a:61:67:d1:17:
                    fb:02:59:50:96:43:82:8e:83:c9:4c:a7:12:fc:c7:
                    cf:ee:e4:1d:97:0e:80:34:03:36:66:01:3a:78:d3:
                    80:45:d9:94:25:1f:7a:10:e8:78:2b:64:4f:93:89:
                    d9:f2:9d:fc:e5:7f:e8:44:79:10:a4:70:dc:05:e6:
                    5c:fb:1b:9a:d8:f4:b0:ed:b9:fa:f5:ae:ed:e1:09:
                    b4:ba:c4:ce:39:55:45:b6:68:1d:02:af:5f:a9:25:
                    af:51:3b:5e:c1:06:4a:f9:34:29:a2:a9:99:d1:d4:
                    5f:6e:7b:6b:75:a7:04:70:0e:6d:14:11:ac:5d:f2:
                    22:f1:b8:46:bd:c2:69:92:2f:0c:19:ab:14:bf:db:
                    61:17:2f:7e:b3:4e:6b:f8:a5:7a:10:e6:d7:79:6b:
                    e5:60:22:0d:d1:fa:97:d3:a3:7e:39:0a:7b:df:df:
                    a0:d6:7d:39:b5:a9:8d:3f:8c:3d:93:ff:af:d2:bd:
                    19:86:fe:44:0a:bb:73:3b:9f:c8:4a:72:06:f0:0b:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B4:78:0C:A6:41:58:3E:DD:66:5B:46:8E:4D:C7:10:84:FF:CA:EA
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:e1:21:5a:a7:32:90:4d:9c:6b:0c:b8:89:a9:eb:34:ae:
         fb:00:cd:69:d2:81:aa:e3:1f:97:38:54:f8:c4:97:c4:5f:69:
         b5:d7:4c:a2:87:93:0c:1b:57:32:94:88:94:04:1a:23:94:43:
         6f:be:f2:4e:cf:8b:fb:b2:47:48:07:0f:af:24:9e:75:00:85:
         05:a4:f9:83:32:b5:ed:de:f1:4c:66:bf:ce:0f:9c:19:c5:15:
         31:14:34:f1:d9:89:29:aa:fd:3d:94:8a:0a:b4:68:86:36:d1:
         c9:bd:75:25:17:f8:af:99:5b:0e:5f:f3:b6:9e:71:2d:8d:a7:
         2a:6c:8e:24:03:21:7d:9e:b5:2f:92:9e:f0:b8:d3:ce:08:59:
         be:7a:77:5e:ab:13:1e:14:55:5a:f1:13:3d:80:57:7d:96:dc:
         08:89:69:76:f2:40:1b:ff:cd:42:8b:1d:85:ad:a2:cb:ef:c9:
         cb:2b:71:fb:3e:65:8f:d9:c7:4a:71:6a:03:0f:62:0d:6b:a6:
         5e:d6:0c:9c:66:f4:52:32:99:02:46:49:c3:47:94:64:b1:2e:
         cc:2d:c3:ab:a2:24:d2:b7:a2:f0:a6:a6:47:a4:22:27:df:d8:
         4a:f5:7c:04:82:7b:94:b6:d8:28:42:38:ad:79:0d:73:ba:e1:
         8d:32:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org