Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231352e3136382e302f32342d3234203d3e203435363731.roa
File:                     3138312e3231352e3136382e302f32342d3234203d3e203435363731.roa (raw, json)
Hash identifier:          7MqWTBS7dRxo5CufA30WQYUV4TY+vcuGLV4Bs3lBwYc=
Subject key identifier:   CC:BC:65:0D:B6:BD:CC:D2:ED:13:71:7C:74:58:90:88:29:C2:5D:29
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6C710147A128B1FB8389594852F51BBECDA7086D
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231352e3136382e302f32342d3234203d3e203435363731.roa
Signing time:             Thu 03 Mar 2022 13:15:33 +0000
ROA not before:           Thu 03 Mar 2022 13:10:33 +0000
ROA not after:            Thu 02 Mar 2023 13:15:33 +0000
asID:                     45671
IP address blocks:        181.215.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:01:47:a1:28:b1:fb:83:89:59:48:52:f5:1b:be:cd:a7:08:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  3 13:10:33 2022 GMT
            Not After : Mar  2 13:15:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:3b:3f:dd:e0:3e:71:ec:f5:d7:9d:0a:33:
                    80:a9:c2:27:95:f9:b8:25:e8:9a:28:ac:b1:2e:51:
                    4c:ae:21:b3:0c:9e:c6:ed:8a:de:5c:4c:13:80:e0:
                    5b:68:36:83:6b:1f:04:59:e3:fc:88:1f:ae:24:97:
                    1f:e4:3d:3e:66:6d:ca:83:8e:c6:f4:db:77:c9:23:
                    70:2c:2e:3a:16:28:a5:cd:7b:0a:f2:0c:46:da:25:
                    dc:69:5d:a1:d5:9f:15:fb:d7:5f:a3:0b:35:54:c5:
                    97:41:63:d1:aa:d0:b8:f6:fa:64:a2:30:47:ab:7f:
                    fa:d0:3e:48:b1:a2:a7:84:df:3b:33:97:ea:67:c1:
                    3d:f7:28:de:b9:dc:8e:1e:df:d6:7f:d2:0b:11:c4:
                    ee:7e:f3:0c:10:86:91:3b:0b:f7:a7:f4:83:e1:3e:
                    21:ba:56:94:48:16:d8:fe:82:6c:f3:e0:ee:1e:0a:
                    99:32:5b:35:d7:31:94:26:23:07:2e:63:fe:a3:60:
                    48:ce:96:8f:81:c1:f2:d5:da:d1:bb:7b:d9:c8:d7:
                    0d:54:b7:d9:a4:c6:af:75:bf:0b:04:2c:84:f2:94:
                    43:87:12:d1:73:12:92:e1:3b:5e:7a:d2:2b:28:57:
                    73:95:85:4f:43:3d:f0:ca:ae:01:00:88:5e:15:3c:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:65:0D:B6:BD:CC:D2:ED:13:71:7C:74:58:90:88:29:C2:5D:29
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231352e3136382e302f32342d3234203d3e203435363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:0b:b6:59:21:6c:c1:3e:d1:4a:4b:c9:6b:cb:dc:8d:a6:a2:
         9f:7f:7a:eb:ab:e8:46:da:62:d3:0c:79:39:ff:32:ef:bf:16:
         12:81:ed:fb:c6:bf:4f:1f:14:21:d3:48:c7:18:68:b2:01:f3:
         87:67:28:46:ad:38:7e:57:b0:f0:20:ec:39:ea:dd:a6:5a:0f:
         20:e9:92:1e:4a:2e:a1:92:47:0a:3b:4a:de:b8:c0:b2:c4:d7:
         e3:dc:fd:4f:9d:57:9b:c9:de:20:9b:c2:9f:43:5a:b7:28:c1:
         fd:5f:d5:3a:b2:53:32:0c:3a:f4:76:fb:10:e4:eb:a3:1f:4a:
         87:1d:56:dc:97:bd:69:40:d2:91:11:1e:2d:31:2b:9f:43:c2:
         52:78:e4:f6:23:49:c4:69:33:12:e1:76:ee:8a:1a:db:64:62:
         e9:02:4c:fa:a9:1d:a9:2c:5a:35:45:c7:5b:1c:d6:a0:46:67:
         ff:64:50:bd:e8:97:f6:d2:b8:ab:b6:7f:2c:3d:21:f8:3a:13:
         d8:f0:52:7e:00:0e:f5:45:c8:68:7d:6b:8b:46:51:95:dc:d5:
         23:ff:aa:44:e6:99:94:0f:ef:12:65:16:b4:75:8c:d4:97:f3:
         24:19:e9:c6:eb:ed:07:9a:dd:15:c2:94:64:7e:ce:db:8a:f8:
         49:9b:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org