Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3135382e3135302e302f32342d3234203d3e20313332333136.roa
File:                     3138352e3135382e3135302e302f32342d3234203d3e20313332333136.roa (raw, json)
Hash identifier:          9tHVcpFNPgLn19fXrtdYc4kwEPtzj/CWhQ7jNqsuj00=
Subject key identifier:   22:26:05:3D:9D:26:66:15:83:24:55:69:A5:35:04:4D:19:91:EA:C0
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       16C18A141693D4F6F7A946EECE5A406861C4BDCE
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3135382e3135302e302f32342d3234203d3e20313332333136.roa
Signing time:             Thu 24 Feb 2022 13:11:55 +0000
ROA not before:           Thu 24 Feb 2022 13:06:55 +0000
ROA not after:            Thu 23 Feb 2023 13:11:55 +0000
asID:                     132316
IP address blocks:        185.158.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:8a:14:16:93:d4:f6:f7:a9:46:ee:ce:5a:40:68:61:c4:bd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb 24 13:06:55 2022 GMT
            Not After : Feb 23 13:11:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:02:0c:79:ea:7a:e3:9a:a4:cc:65:f4:3b:
                    b4:52:57:a7:35:fa:cc:c4:e3:33:d1:b9:c3:b7:e0:
                    83:ba:d0:e8:d4:7d:86:39:aa:97:03:5b:31:46:96:
                    e8:8a:2f:fc:45:a2:48:20:2e:45:a1:9e:4a:2b:b5:
                    c5:9e:0c:2f:28:89:42:88:40:a2:b1:38:fe:5c:e2:
                    dc:b0:98:65:49:c8:61:88:bd:4f:4f:d1:9d:a3:35:
                    a6:cf:a8:88:3d:23:76:0e:98:e2:78:4c:ed:dc:f3:
                    bb:34:2a:9f:36:35:28:1b:23:97:50:0f:0e:86:87:
                    25:71:2e:b5:45:80:ca:e1:76:71:76:f5:ca:48:0e:
                    8d:a0:8c:51:33:ce:ac:7c:05:71:12:21:4a:fa:37:
                    2e:3d:b7:34:b8:62:60:9f:e6:01:b6:a9:4c:34:4e:
                    74:2f:4e:d0:51:92:63:5f:48:c8:a3:ed:95:6c:7a:
                    5b:14:24:4b:52:f1:d9:5f:32:43:de:58:6f:e1:19:
                    c8:b1:2c:6a:ea:c2:84:fa:a0:71:1e:e3:aa:c9:39:
                    ff:86:b3:68:8c:63:23:03:e5:38:d2:07:03:84:8d:
                    c7:74:22:c4:66:a5:6b:3f:10:d9:58:b4:a0:49:34:
                    38:ea:f6:78:71:22:c8:4d:6d:0a:2a:d1:89:f2:ca:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:26:05:3D:9D:26:66:15:83:24:55:69:A5:35:04:4D:19:91:EA:C0
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3135382e3135302e302f32342d3234203d3e20313332333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.158.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:43:de:84:b4:76:bb:55:10:64:6f:03:9f:98:be:39:dc:cb:
         78:bd:ba:02:4f:a9:20:ad:52:f6:51:0a:2a:7c:4e:d2:98:14:
         c0:92:d8:2f:ad:ff:08:97:ed:5c:44:17:83:40:4e:c4:6f:08:
         11:0d:65:bf:3a:89:38:59:fc:3c:68:a3:f0:11:b1:3a:37:70:
         99:d4:83:83:95:81:13:b5:c1:04:7f:b7:1f:a5:24:62:d9:53:
         c1:69:c7:7b:d5:9d:5f:f2:38:14:c2:eb:93:05:d2:0f:ff:d6:
         1d:6d:c9:6f:78:96:00:0f:3a:a8:34:37:68:e6:29:c4:fc:bc:
         f0:b5:b4:9f:8a:79:b7:09:01:f6:c7:6f:9d:3e:66:ea:22:3c:
         49:8d:d2:bb:dd:d8:9c:9f:61:2a:d3:24:d4:62:4a:9b:c6:0d:
         27:08:f6:21:4f:25:b3:22:e7:e2:12:a1:bd:73:35:b4:09:5b:
         be:89:21:00:4d:72:46:df:9a:6c:af:00:d0:b2:2b:a8:d4:57:
         33:dc:e3:03:24:93:29:ef:92:e7:19:41:22:84:19:9a:b7:9c:
         0a:83:ef:f8:66:a8:02:b3:3d:b3:fe:a7:96:97:7a:af:cf:8e:
         2f:1c:87:c3:f8:29:4e:44:68:13:5d:38:2e:41:52:d3:1e:d4:
         a6:a6:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org