Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3134392e36322e34302e302f32342d3234203d3e20323131313933.roa
File:                     3134392e36322e34302e302f32342d3234203d3e20323131313933.roa (raw, json)
Hash identifier:          rJ54XHoPrBSGiF/jYW2BNXDlIEVbUqQHAVgf21EQXJg=
Subject key identifier:   C9:E0:5E:44:9E:6B:3B:9B:75:AA:E6:0C:3B:69:91:C8:20:78:1C:FF
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       2B2F9641466C44A83A7E052EDA22C094AB14973B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3134392e36322e34302e302f32342d3234203d3e20323131313933.roa
Signing time:             Thu 24 Feb 2022 14:17:28 +0000
ROA not before:           Thu 24 Feb 2022 14:12:28 +0000
ROA not after:            Thu 23 Feb 2023 14:17:28 +0000
asID:                     211193
IP address blocks:        149.62.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2f:96:41:46:6c:44:a8:3a:7e:05:2e:da:22:c0:94:ab:14:97:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb 24 14:12:28 2022 GMT
            Not After : Feb 23 14:17:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:96:ab:0b:bb:4e:df:60:d6:bd:cb:a6:9f:
                    b1:0f:5d:c0:06:ee:c1:45:7d:e1:13:45:88:93:f0:
                    69:4c:9c:70:91:df:32:5d:01:74:9f:0e:01:c2:91:
                    36:a7:c9:e6:06:38:f2:40:db:c5:3f:66:5c:f2:50:
                    7b:6f:4c:3b:0a:12:3c:87:3c:b3:e7:07:63:5f:5f:
                    07:ec:ff:de:e9:29:e0:2a:25:2c:e8:c6:12:41:da:
                    46:fe:a3:37:bf:8e:bd:df:4a:5d:1e:06:34:da:18:
                    9b:1d:d1:1c:17:21:6b:2e:5c:e3:d6:4f:0c:a8:f0:
                    1a:2f:7a:81:55:af:23:99:6a:d3:6e:da:55:88:bd:
                    19:79:45:d6:c8:f6:12:97:0e:e6:c9:71:f5:ee:89:
                    ae:1a:9a:ca:0f:95:8a:19:3d:79:f2:23:77:ff:df:
                    8d:d9:6d:63:83:a2:3c:b2:3c:29:2f:96:63:ee:b3:
                    75:bb:1e:4f:6c:25:70:77:9c:a7:cb:94:a0:c4:22:
                    b3:f6:f2:38:82:5f:ff:37:61:b7:32:4f:e7:83:ce:
                    ef:b9:31:a0:62:2d:6b:e1:65:bf:ca:8b:c7:b3:f4:
                    cc:65:98:49:f9:c4:d3:8a:b7:59:3e:21:f8:41:98:
                    8c:bf:e0:ed:0b:66:d4:b4:f0:cb:46:b1:71:b2:46:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:5E:44:9E:6B:3B:9B:75:AA:E6:0C:3B:69:91:C8:20:78:1C:FF
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3134392e36322e34302e302f32342d3234203d3e20323131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:f8:a3:f5:8c:ce:fe:19:ab:ae:0c:a5:d6:70:aa:a2:4a:
         c6:86:d6:df:9c:13:f0:f3:72:e4:47:a8:83:06:1d:e8:16:42:
         42:7a:d2:7d:e8:34:86:3c:64:d3:81:71:df:f8:18:cc:f8:10:
         b0:6e:9c:56:1e:15:e2:d6:52:fc:b5:ba:51:40:cb:1e:71:6b:
         78:0c:0d:9f:35:5a:0b:24:d6:1a:89:18:7e:e7:8e:03:6c:89:
         f9:b5:64:1e:ac:25:28:d8:31:52:d2:d5:5b:9e:c6:db:03:f3:
         9c:92:9e:97:15:9d:78:6a:d9:59:2d:ad:91:33:c4:b3:59:dc:
         7f:79:eb:a8:23:09:50:66:ac:09:9b:fa:05:14:3e:8e:4a:8d:
         90:72:ed:02:56:bc:82:7d:42:ec:9a:e7:92:9d:ed:31:89:71:
         61:68:e9:ca:50:43:ae:02:f5:b0:05:10:94:77:42:8d:09:60:
         f2:53:8b:d8:cb:87:fa:6f:38:ed:0c:6a:d2:9a:02:76:8b:6c:
         9d:af:2f:a4:0e:05:d3:62:15:1f:ea:2d:d0:a3:b9:14:48:20:
         d4:48:8e:fc:92:6a:1a:c7:8a:26:b3:f6:cb:6a:4b:a0:e1:f3:
         97:2f:bb:63:2a:f3:96:45:5e:eb:ad:80:0e:2c:ee:a6:b7:13:
         4b:e9:1d:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org