Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137302e34332e302f32342d3234203d3e203433323630.roa
File:                     3138352e3137302e34332e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          sc0JkVoIl6aq0kTVAtXBWzbNl9AGTXqbgP5Zfuqpatg=
Subject key identifier:   1C:C1:C9:AF:F3:6D:BA:89:6F:99:29:D7:63:69:9E:04:AE:7F:83:40
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       60FE6238D93DFB771B114D68481914F38D553FB9
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137302e34332e302f32342d3234203d3e203433323630.roa
Signing time:             Thu 10 Feb 2022 10:38:31 +0000
ROA not before:           Thu 10 Feb 2022 10:33:31 +0000
ROA not after:            Thu 09 Feb 2023 10:38:31 +0000
asID:                     43260
IP address blocks:        185.170.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fe:62:38:d9:3d:fb:77:1b:11:4d:68:48:19:14:f3:8d:55:3f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb 10 10:33:31 2022 GMT
            Not After : Feb  9 10:38:31 2023 GMT
        Subject: CN=3082010A02820101009C1C6D63586543E513FD4A84B244FBF316659327B0DB47CCF63D3D2EC3C4AE4C0CBE4F90A7044919B1E2594C9CC8312C5A1770ED055E3BFADAD40D4F2E989077A34A07707D8D73F2B1A9E5B3CEED108857A03B9522127334B7FE4F694353E84643E567E04D4AFFD90ED04A46CDC69B16D75360EE5368AF0E429FF11B987BC11A7AC548694E53BCF211D8E3671633E237501421860AC9AF4E8DE265C5D5049DF6CBCAF420FEE7B4FFC88B78FCD3B61022BE35AC780DDF3CF63CD8DC29B031E44BE426FF22A04314610631FB4F9665B6E6129B9272142376545C257F700E2F43C5CA3CFE2A13B9F3E99D8BE566489F9E6909AF2FE218A0120FB4CC12A743196DDB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:6d:63:58:65:43:e5:13:fd:4a:84:b2:44:
                    fb:f3:16:65:93:27:b0:db:47:cc:f6:3d:3d:2e:c3:
                    c4:ae:4c:0c:be:4f:90:a7:04:49:19:b1:e2:59:4c:
                    9c:c8:31:2c:5a:17:70:ed:05:5e:3b:fa:da:d4:0d:
                    4f:2e:98:90:77:a3:4a:07:70:7d:8d:73:f2:b1:a9:
                    e5:b3:ce:ed:10:88:57:a0:3b:95:22:12:73:34:b7:
                    fe:4f:69:43:53:e8:46:43:e5:67:e0:4d:4a:ff:d9:
                    0e:d0:4a:46:cd:c6:9b:16:d7:53:60:ee:53:68:af:
                    0e:42:9f:f1:1b:98:7b:c1:1a:7a:c5:48:69:4e:53:
                    bc:f2:11:d8:e3:67:16:33:e2:37:50:14:21:86:0a:
                    c9:af:4e:8d:e2:65:c5:d5:04:9d:f6:cb:ca:f4:20:
                    fe:e7:b4:ff:c8:8b:78:fc:d3:b6:10:22:be:35:ac:
                    78:0d:df:3c:f6:3c:d8:dc:29:b0:31:e4:4b:e4:26:
                    ff:22:a0:43:14:61:06:31:fb:4f:96:65:b6:e6:12:
                    9b:92:72:14:23:76:54:5c:25:7f:70:0e:2f:43:c5:
                    ca:3c:fe:2a:13:b9:f3:e9:9d:8b:e5:66:48:9f:9e:
                    69:09:af:2f:e2:18:a0:12:0f:b4:cc:12:a7:43:19:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C1:C9:AF:F3:6D:BA:89:6F:99:29:D7:63:69:9E:04:AE:7F:83:40
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137302e34332e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:7c:55:f9:11:9d:8f:a1:8c:3a:ac:6c:b6:af:63:9c:2d:
         b0:ed:19:46:7a:a7:bc:93:43:38:3f:ba:71:c0:b0:18:75:21:
         3d:33:c5:68:99:2a:a3:0e:2e:9c:fc:c2:ac:db:e5:fc:55:c5:
         70:55:f0:7e:44:ab:c8:c4:bb:e0:99:c8:29:21:e2:12:83:9d:
         86:52:2f:1e:df:5d:95:3b:13:80:90:5a:6a:94:f3:88:1b:ed:
         5f:4d:6a:04:7e:18:3d:4e:6d:6a:a3:c2:77:79:3b:49:16:b6:
         c9:25:b5:b8:ec:f4:52:c4:4f:56:15:a3:28:9f:26:de:59:5e:
         ac:58:e5:d6:d1:cf:bc:a7:62:88:ed:dd:be:d2:32:77:62:26:
         a1:0d:22:76:6b:99:28:10:28:d9:cc:77:b1:4b:60:23:ec:41:
         d3:a1:ff:63:6e:48:8d:8f:4f:e6:b0:b9:aa:b6:58:fb:a1:31:
         7f:f2:9c:d0:38:ae:f8:2b:77:75:37:72:94:46:7c:aa:cc:e7:
         a1:21:fa:2a:17:35:40:e7:6b:a5:ea:7b:6d:09:d3:ea:62:8e:
         1e:21:f8:7c:29:78:65:0e:67:34:7c:e7:47:d2:63:b2:35:99:
         58:66:28:aa:28:92:9f:c2:bc:17:bb:52:51:21:91:bf:6d:23:
         62:cb:bc:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org