Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3137392e36312e3234302e302f32342d3234203d3e203435363731.roa
File:                     3137392e36312e3234302e302f32342d3234203d3e203435363731.roa (raw, json)
Hash identifier:          hP/hSukjEFiejfJZ/k/8IIDb7mRtc6eBl2EX2pceRxk=
Subject key identifier:   65:B9:6E:27:F3:DE:C5:38:C1:89:2B:94:54:D5:E7:6F:F9:3E:C7:1E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       66A5E48E76939FF9A575D38C68C5C01203EF3D25
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3137392e36312e3234302e302f32342d3234203d3e203435363731.roa
Signing time:             Thu 03 Mar 2022 13:14:18 +0000
ROA not before:           Thu 03 Mar 2022 13:09:18 +0000
ROA not after:            Thu 02 Mar 2023 13:14:18 +0000
asID:                     45671
IP address blocks:        179.61.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a5:e4:8e:76:93:9f:f9:a5:75:d3:8c:68:c5:c0:12:03:ef:3d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  3 13:09:18 2022 GMT
            Not After : Mar  2 13:14:18 2023 GMT
        Subject: CN=3082010A0282010100C00BAA2C9A43C0E8ACD58C54F76E467CF285718E7CCF72D62EE13E85B1531D0E3292EFBED48D0A67B6B3146A97551A45C4D262968164DADE6E6E93A9D00FE27F8FDFE272FC58DB2EE5FD91AE65D8F25249C590C0D34BF62FA7208463F93DBE6E7AFA6A89694EDBD19305DE269D64693DD563092A70446AE6CCE500D397264FBAF9FD1456EEB1CE3C445EE1AD346A5851F8BAAE6D5282255A6F83C91579C5F4C5ABC08F713F42D5C4316F88B763BAD0FE701D2998687AF4E153BFFAA594F015674DE9FCBB3ED41297F62F307A1CFAADC1F07C723EF038EB17DA9CEA59F6503E05B8FEDB80234B427D7BE0E11A51CBDFF94C64F0FC7C871A8FE9C6DC1D7568DCB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:aa:2c:9a:43:c0:e8:ac:d5:8c:54:f7:6e:
                    46:7c:f2:85:71:8e:7c:cf:72:d6:2e:e1:3e:85:b1:
                    53:1d:0e:32:92:ef:be:d4:8d:0a:67:b6:b3:14:6a:
                    97:55:1a:45:c4:d2:62:96:81:64:da:de:6e:6e:93:
                    a9:d0:0f:e2:7f:8f:df:e2:72:fc:58:db:2e:e5:fd:
                    91:ae:65:d8:f2:52:49:c5:90:c0:d3:4b:f6:2f:a7:
                    20:84:63:f9:3d:be:6e:7a:fa:6a:89:69:4e:db:d1:
                    93:05:de:26:9d:64:69:3d:d5:63:09:2a:70:44:6a:
                    e6:cc:e5:00:d3:97:26:4f:ba:f9:fd:14:56:ee:b1:
                    ce:3c:44:5e:e1:ad:34:6a:58:51:f8:ba:ae:6d:52:
                    82:25:5a:6f:83:c9:15:79:c5:f4:c5:ab:c0:8f:71:
                    3f:42:d5:c4:31:6f:88:b7:63:ba:d0:fe:70:1d:29:
                    98:68:7a:f4:e1:53:bf:fa:a5:94:f0:15:67:4d:e9:
                    fc:bb:3e:d4:12:97:f6:2f:30:7a:1c:fa:ad:c1:f0:
                    7c:72:3e:f0:38:eb:17:da:9c:ea:59:f6:50:3e:05:
                    b8:fe:db:80:23:4b:42:7d:7b:e0:e1:1a:51:cb:df:
                    f9:4c:64:f0:fc:7c:87:1a:8f:e9:c6:dc:1d:75:68:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B9:6E:27:F3:DE:C5:38:C1:89:2B:94:54:D5:E7:6F:F9:3E:C7:1E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3137392e36312e3234302e302f32342d3234203d3e203435363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b7:85:30:7c:2b:8f:f2:85:c0:e4:93:76:3d:99:20:8f:79:
         d1:9f:0f:0e:c1:49:89:d3:a4:8e:3c:89:af:d7:db:1c:c6:c6:
         a7:b2:61:3d:d3:ff:f3:12:5a:ed:03:dc:7d:d6:db:ff:8f:74:
         55:7c:ce:e4:14:90:d3:f8:5f:d0:ee:db:29:93:99:48:a7:cd:
         56:37:34:b2:58:ce:24:aa:51:15:29:67:7f:a5:7e:92:b6:49:
         5c:7f:15:4d:c3:a6:d1:dc:12:dc:be:f4:44:0c:bb:6e:86:e3:
         d8:ad:b7:0b:5b:1b:1c:ee:51:f9:b2:77:8c:b2:e7:a4:6a:3f:
         68:b1:7b:1b:63:3b:e6:46:38:62:ef:d7:70:1c:53:23:04:4a:
         91:08:af:c2:7f:07:5f:ba:3a:8b:1e:55:32:ae:45:1e:d7:48:
         6a:fe:f7:10:9d:17:45:42:ab:a8:dd:00:82:8a:93:c1:12:73:
         97:5c:18:b0:d5:d6:0b:d0:a4:a2:5e:51:ca:78:d6:6d:69:31:
         a0:1a:2c:9a:35:96:db:f4:9b:95:e4:4a:fc:2f:8e:4c:75:dd:
         54:6c:7a:57:a5:b3:b3:49:1e:05:2c:74:c6:73:7b:f0:e9:15:
         23:d7:ea:74:95:5c:4c:04:e1:d3:62:d7:e9:10:27:2b:0d:9f:
         24:59:da:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org