Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137302e34312e302f32342d3234203d3e203630373231.roa
File:                     3138352e3137302e34312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          NwcsInh57kiPXm3/v5qtiikja69rqHkhABuRC42KLXM=
Subject key identifier:   A1:E2:D8:9A:FE:A1:39:20:7C:3C:3C:F8:B4:F4:28:91:B2:06:29:BC
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       359E1D2C685DDE139F3DDC1697D7EBB4A1B30A92
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137302e34312e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 21 Jan 2022 16:46:44 +0000
ROA not before:           Fri 21 Jan 2022 16:41:44 +0000
ROA not after:            Fri 20 Jan 2023 16:46:44 +0000
asID:                     60721
IP address blocks:        185.170.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9e:1d:2c:68:5d:de:13:9f:3d:dc:16:97:d7:eb:b4:a1:b3:0a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan 21 16:41:44 2022 GMT
            Not After : Jan 20 16:46:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:71:99:bb:52:6d:76:54:58:2f:fd:b7:2e:
                    7e:85:83:ed:53:04:0d:39:65:eb:87:3f:4e:22:69:
                    9a:31:08:1a:c5:3d:4e:25:4d:0a:fb:71:e3:2e:d1:
                    7a:51:99:38:b9:f6:c0:f4:4c:cc:3b:fd:dd:08:c4:
                    29:c4:2e:22:8b:6c:aa:2f:7f:1c:eb:58:3b:3a:f0:
                    c9:17:fb:6d:05:a6:a3:f5:7a:c9:ec:9c:7e:6e:b1:
                    3e:61:4f:65:1b:4c:b0:ab:f2:7e:4d:a2:60:d9:46:
                    6a:7e:f2:24:1c:01:ce:70:05:ba:be:b2:ba:ca:a1:
                    f8:a5:99:e9:f8:4f:71:f9:0a:3a:bb:a8:47:74:23:
                    f5:23:31:c6:d4:73:5f:ed:cf:3e:88:4e:1d:1f:c7:
                    82:34:a7:25:45:76:10:cb:b6:15:92:a6:de:d8:9e:
                    e9:32:c2:f9:73:05:1d:5d:89:63:1f:a7:14:45:29:
                    d8:0b:5e:65:25:2c:ea:b3:45:7d:db:96:24:ec:28:
                    c5:72:e2:b7:61:03:f7:bd:88:d6:7b:83:63:20:cd:
                    ae:0f:bf:3c:5d:af:75:76:65:c7:9e:a4:d2:eb:30:
                    e3:7e:40:58:75:ee:9a:53:91:30:c3:e6:1e:fa:1f:
                    62:f4:a6:7d:5a:f3:31:8e:53:e6:54:dd:bc:15:3a:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:D8:9A:FE:A1:39:20:7C:3C:3C:F8:B4:F4:28:91:B2:06:29:BC
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137302e34312e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ab:4d:36:8b:3e:5e:36:6e:13:41:92:1b:43:e0:ee:96:73:
         01:ea:99:42:2e:56:29:22:ab:67:fd:bb:dd:f7:4b:ee:ec:3c:
         32:5f:76:fe:71:ca:82:3f:85:b8:0a:cd:25:a8:be:96:c2:56:
         5d:cf:81:e7:33:8f:65:6e:99:3c:3e:62:ff:a9:8e:62:bf:69:
         6a:33:ca:f1:58:a2:65:56:a2:5a:b1:95:60:6c:b3:23:1f:01:
         b4:5d:4c:8d:e0:c0:d9:00:30:08:0c:91:62:9d:30:b4:ae:cf:
         8a:ed:1b:ce:8e:ac:f7:91:53:12:84:a9:ba:9f:16:11:63:8a:
         bf:56:3d:9b:11:93:6f:13:7f:a9:bb:7c:09:5c:07:05:2f:74:
         e5:0b:e2:c8:7b:45:80:86:03:25:4d:5a:a0:0b:19:57:d7:f8:
         ab:cc:71:71:4d:30:13:42:d7:8d:3b:13:79:c3:7b:c5:47:e3:
         5e:d5:a5:98:d6:49:36:79:bc:ee:52:e0:1b:a4:57:d8:a3:e4:
         00:de:81:f8:27:9c:00:9f:ee:d1:a6:b8:46:40:8d:ee:2f:3e:
         32:92:62:fb:b4:94:45:f2:04:b3:5c:17:41:1a:8f:b9:46:a6:
         a5:ac:e4:98:48:19:11:d3:87:74:f0:02:fe:98:43:c0:2b:9e:
         4a:19:ab:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org