Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3130352e302f32342d3234203d3e203534323532.roa
File:                     3138312e3231342e3130352e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          lLz0MjiP/WP8zDy4M9+wxpVPmFyDcoDQFsHIdxDBYPU=
Subject key identifier:   9B:BC:5B:72:36:B0:76:01:54:D5:13:1B:60:F5:D6:CC:EE:86:4D:19
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1DD74E54397070E2BE19D27B4212AE930EA1BDCE
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3130352e302f32342d3234203d3e203534323532.roa
Signing time:             Thu 03 Mar 2022 13:15:57 +0000
ROA not before:           Thu 03 Mar 2022 13:10:57 +0000
ROA not after:            Thu 02 Mar 2023 13:15:57 +0000
asID:                     54252
IP address blocks:        181.214.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d7:4e:54:39:70:70:e2:be:19:d2:7b:42:12:ae:93:0e:a1:bd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  3 13:10:57 2022 GMT
            Not After : Mar  2 13:15:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:b1:dd:ac:b8:93:ce:c5:f7:a7:f8:b4:d5:
                    fe:64:08:5d:8c:92:70:eb:7f:42:8a:47:d8:5e:3d:
                    25:93:0b:91:dc:bf:63:70:a8:af:f2:97:ba:6a:cd:
                    2d:82:c5:d1:db:33:4e:c3:d3:5e:16:5e:24:41:59:
                    34:d5:3f:69:5f:a5:85:97:a0:5d:bd:90:fa:89:cb:
                    61:44:9f:c1:ec:5f:cd:31:35:8c:9a:5d:c5:86:90:
                    df:0f:b9:80:c5:82:68:97:d3:62:9a:d7:70:d8:58:
                    9c:58:d7:7b:90:f9:f5:10:1b:85:a2:ad:9a:09:c9:
                    5d:f6:70:bc:a3:b2:0c:46:8b:aa:c2:a1:05:67:53:
                    ed:c0:00:11:19:12:30:c9:d7:0d:c4:c9:c3:95:db:
                    ee:3c:e1:5f:e4:3a:65:b9:66:18:00:f6:f1:f8:33:
                    cb:5d:82:44:26:b1:88:78:0d:06:c1:76:f4:d2:d0:
                    ec:89:52:02:bd:eb:2a:f7:1d:08:61:5f:37:32:23:
                    d9:da:cb:40:20:61:c0:46:82:34:7e:73:f0:89:a1:
                    ed:de:7a:8f:a8:27:33:91:91:64:bd:ed:63:19:3f:
                    99:d1:6d:fb:ab:e2:25:57:fb:aa:0e:91:e1:17:f7:
                    ae:c5:4d:04:a2:8b:a4:a4:dc:44:ad:d3:10:65:17:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:5B:72:36:B0:76:01:54:D5:13:1B:60:F5:D6:CC:EE:86:4D:19
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3130352e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:0c:34:3f:c2:cc:cb:25:d8:e4:01:5e:00:fc:3b:62:0b:
         59:f8:ac:e5:0a:66:48:3c:06:49:a7:4b:72:db:75:ec:e4:55:
         84:20:1a:22:68:ac:de:ae:65:07:ef:61:ce:84:44:53:08:e4:
         c3:8c:2a:d6:e6:ee:9d:d5:d0:ab:c9:79:43:fe:63:ad:7d:05:
         b4:06:30:01:69:f7:b7:70:cb:c5:09:5d:81:68:dd:58:5e:2c:
         47:1f:4c:19:85:b0:b0:30:67:d5:fd:22:2e:04:bf:ce:41:bd:
         8c:44:d0:4a:ee:72:65:78:d6:19:90:7d:db:91:e6:68:a2:1d:
         c1:3f:d0:c7:c0:34:f6:35:b0:14:a3:81:bc:a4:4c:f8:f6:a2:
         9f:aa:a4:d8:fb:49:6c:d0:95:92:17:a5:32:c3:94:07:3b:38:
         61:41:67:8e:af:b3:d6:d4:be:d8:37:de:06:68:8e:65:78:61:
         16:b9:21:f5:c0:e2:ce:50:23:1d:1f:34:4b:cd:b6:cb:ab:f9:
         18:18:7e:94:8f:cd:df:6b:dd:af:f4:01:db:56:47:8a:64:b9:
         27:c2:99:ec:f1:1f:54:b1:eb:5c:e8:91:68:64:9a:da:91:80:
         bd:64:36:07:37:51:95:72:c0:dd:e1:53:8a:e8:50:96:57:f9:
         94:95:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org