Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137322e36362e302f32342d3234203d3e2039303039.roa
File:                     3138352e3137322e36362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          bUofVg5XWE7scxu07hlkidRNENQiyKuvOSVkxeEnnC4=
Subject key identifier:   77:FE:E3:B3:63:6F:96:76:4E:19:3A:C4:10:77:F7:AC:E3:78:1C:7F
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       61BD762110924D9BC3846C6E0A55A438EB771CA4
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137322e36362e302f32342d3234203d3e2039303039.roa
Signing time:             Sun 23 Jan 2022 12:55:36 +0000
ROA not before:           Sun 23 Jan 2022 12:50:36 +0000
ROA not after:            Sun 22 Jan 2023 12:55:36 +0000
asID:                     9009
IP address blocks:        185.172.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bd:76:21:10:92:4d:9b:c3:84:6c:6e:0a:55:a4:38:eb:77:1c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan 23 12:50:36 2022 GMT
            Not After : Jan 22 12:55:36 2023 GMT
        Subject: CN=3082010A0282010100D79512DC17C63D6D95B35047A5BB173EFB4A74E596B9ABCF77E6A732F86DF4E176FC8E7B417DC9B271EB7151360745797BB88AD4F8B8ED113B79982255F4717A5205DFB7ABE853307619244842753E2F0EACC901C36DEBA15C83129417685911A2596579A980488A60EE6C4DDBD96EDB968DA8E36D704C9F99E04A7631E9DDA65239ED1C53D19587D532FBA84E051A8BFA7D7D858C8963FC53E3FEA14302D9851B43E6AD2B47D1671CD212A7037AC7AE30BBA336B474F827F7C3760034473FDE2A433D557DF6C6E81F1FD634C23C51A6CB3486E62A60504A8AAF704B3ABE77B213A786440FFBB7024EF6EECDBA8F3FCA4B1AC9B79D20167672B58820E5BB1DBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:12:dc:17:c6:3d:6d:95:b3:50:47:a5:bb:
                    17:3e:fb:4a:74:e5:96:b9:ab:cf:77:e6:a7:32:f8:
                    6d:f4:e1:76:fc:8e:7b:41:7d:c9:b2:71:eb:71:51:
                    36:07:45:79:7b:b8:8a:d4:f8:b8:ed:11:3b:79:98:
                    22:55:f4:71:7a:52:05:df:b7:ab:e8:53:30:76:19:
                    24:48:42:75:3e:2f:0e:ac:c9:01:c3:6d:eb:a1:5c:
                    83:12:94:17:68:59:11:a2:59:65:79:a9:80:48:8a:
                    60:ee:6c:4d:db:d9:6e:db:96:8d:a8:e3:6d:70:4c:
                    9f:99:e0:4a:76:31:e9:dd:a6:52:39:ed:1c:53:d1:
                    95:87:d5:32:fb:a8:4e:05:1a:8b:fa:7d:7d:85:8c:
                    89:63:fc:53:e3:fe:a1:43:02:d9:85:1b:43:e6:ad:
                    2b:47:d1:67:1c:d2:12:a7:03:7a:c7:ae:30:bb:a3:
                    36:b4:74:f8:27:f7:c3:76:00:34:47:3f:de:2a:43:
                    3d:55:7d:f6:c6:e8:1f:1f:d6:34:c2:3c:51:a6:cb:
                    34:86:e6:2a:60:50:4a:8a:af:70:4b:3a:be:77:b2:
                    13:a7:86:44:0f:fb:b7:02:4e:f6:ee:cd:ba:8f:3f:
                    ca:4b:1a:c9:b7:9d:20:16:76:72:b5:88:20:e5:bb:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:E3:B3:63:6F:96:76:4E:19:3A:C4:10:77:F7:AC:E3:78:1C:7F
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137322e36362e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:ad:f9:11:74:35:35:92:c2:9a:2c:d4:49:ab:31:97:60:
         fa:ca:94:94:c7:d7:05:0b:d9:8b:97:c6:4f:e0:1d:af:c0:9e:
         a9:99:88:d7:5c:c2:e1:04:b5:06:e1:a4:b9:a5:05:5d:37:6e:
         db:df:af:d0:b1:11:89:17:da:c0:ad:47:2a:42:6c:dd:10:b7:
         30:82:41:38:ff:ee:9f:21:f0:7e:29:fb:33:9d:3b:5a:4a:23:
         31:aa:cc:1f:6c:02:12:ec:7b:67:ce:5d:4a:90:ae:4b:cf:be:
         cf:32:b0:d2:2b:48:fb:45:16:ab:c4:36:6b:6e:5f:ad:2b:cc:
         51:0f:30:e0:86:43:84:c7:1f:ad:64:8c:dd:8f:d8:a6:3d:62:
         08:be:d4:4f:50:b2:2d:51:d0:bd:78:99:ea:a3:e8:51:1f:04:
         41:2a:c7:91:3b:9f:57:32:9d:c2:94:fe:4d:62:e2:48:f3:b4:
         15:b4:20:77:6a:5a:c6:c0:00:c6:c0:c0:19:7b:0c:55:62:26:
         70:76:5e:78:2a:6f:75:30:bc:61:0f:42:6a:dd:59:a7:b1:fa:
         ac:9b:4b:e0:87:47:6f:7e:fa:86:18:6a:c0:5f:99:e7:10:b9:
         22:99:fc:69:3e:fc:14:18:f0:2c:33:53:15:15:dc:08:a9:4d:
         c8:bf:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org