Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3139382e302f32342d3234203d3e203430363736.roa
File:                     3138312e3231342e3139382e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          cRvtnaczWXZfdNBSfY+/GDMSVatPn4KqR97uNOoAVjc=
Subject key identifier:   65:11:34:52:3D:61:26:E1:3B:77:BA:7F:29:23:40:43:CB:DD:33:CA
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       60A3643997F2E3E5730AC0DBF83A73874E383041
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3139382e302f32342d3234203d3e203430363736.roa
Signing time:             Wed 02 Mar 2022 19:29:22 +0000
ROA not before:           Wed 02 Mar 2022 19:24:22 +0000
ROA not after:            Wed 01 Mar 2023 19:29:22 +0000
asID:                     40676
IP address blocks:        181.214.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:64:39:97:f2:e3:e5:73:0a:c0:db:f8:3a:73:87:4e:38:30:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  2 19:24:22 2022 GMT
            Not After : Mar  1 19:29:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:72:b6:a1:e7:00:cd:fa:41:4e:f8:2b:03:
                    4b:91:0e:a1:e0:2b:8e:aa:88:b3:df:49:42:33:5f:
                    28:c1:26:b7:be:c2:db:15:bd:9b:d7:17:69:88:47:
                    83:6f:87:fa:16:60:6b:6b:70:7f:f4:54:13:53:28:
                    0b:a5:1e:43:de:a4:7b:36:b2:f6:f2:c4:f5:36:c8:
                    97:ed:20:32:f3:d0:e9:96:7b:6f:b5:29:32:5b:56:
                    9a:57:12:ab:d9:91:fe:47:20:a9:aa:4d:08:da:cb:
                    48:00:c0:aa:b6:d7:8b:7c:d9:70:1e:c3:70:37:08:
                    54:7f:3d:c7:99:10:61:07:7d:b1:cd:3d:1c:a9:ac:
                    55:c0:de:e0:e9:d5:a8:55:fe:3b:59:e1:0c:c5:c7:
                    ae:d1:8f:9a:61:b0:05:0e:63:8b:43:49:6b:38:f5:
                    92:05:42:db:2a:df:ea:72:35:2a:a6:9e:d3:47:f5:
                    9b:bd:8c:a7:3b:f4:81:11:c8:ae:6d:f4:c2:83:a8:
                    11:aa:ce:89:4f:0e:2d:51:71:ac:40:28:e4:db:57:
                    5a:ee:d8:67:25:e6:72:a3:19:b4:c1:17:17:98:38:
                    cc:87:89:b5:f7:d5:37:a3:cb:9a:2c:25:2d:7b:01:
                    47:3a:b3:99:72:a5:ed:17:39:ff:28:e3:72:7f:c5:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:34:52:3D:61:26:E1:3B:77:BA:7F:29:23:40:43:CB:DD:33:CA
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3139382e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:ed:66:6c:25:68:4c:d3:c2:46:6e:e5:23:dd:eb:c8:80:
         8b:cf:8c:48:d4:3c:dd:47:9e:2a:12:9f:59:63:e6:18:d9:52:
         65:d0:83:72:dd:20:d4:03:a1:c4:88:0f:1b:89:9d:6a:8f:5a:
         4a:9f:0c:f1:37:45:b5:46:85:9f:6d:88:c5:4b:f7:2e:97:79:
         fa:8e:49:ec:e1:f8:35:bc:8b:56:88:00:5c:13:89:2b:2c:58:
         1b:b9:3d:fa:c3:92:fd:3b:4d:d5:0d:d9:e9:b2:9a:5c:a6:8a:
         75:dd:c8:c7:a9:b4:36:99:ba:f2:be:80:e5:e2:be:08:52:5e:
         23:a0:67:47:1d:ce:02:a0:f3:e8:74:fa:6a:4a:f1:b6:7a:e7:
         a9:42:db:f3:6f:7a:50:26:9c:98:17:1d:4f:15:14:f3:8e:e1:
         bb:d6:b6:c4:1a:8d:1e:52:4b:22:34:21:fd:00:0f:c5:82:c5:
         bc:e5:b9:fe:ea:ce:ba:30:68:2d:e0:27:dd:f9:ad:e5:58:e5:
         4b:49:f3:6b:a8:e6:3b:b0:35:fa:f1:5f:44:90:7e:47:fe:90:
         c5:a2:27:d7:66:aa:40:45:18:58:56:6c:58:d8:ae:fe:7a:e4:
         b0:b4:79:70:77:ee:31:29:e9:9b:ea:3f:1a:a0:bf:ff:6f:8c:
         05:9d:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org