Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137332e32362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137332e32362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          wbHbdD+m7aHDOVzJtjlwrmwkXXNh9hq/8dwMgC9rDJU=
Subject key identifier:   EB:3A:35:97:2B:80:1B:E0:59:C8:55:6C:5F:99:FF:E6:F1:CB:16:AB
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1E0825597C7BD62547524348AB8A9059A2FFE4AB
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137332e32362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 16 Dec 2021 12:05:12 +0000
ROA not before:           Thu 16 Dec 2021 12:00:12 +0000
ROA not after:            Thu 15 Dec 2022 12:05:12 +0000
asID:                     61317
IP address blocks:        185.173.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:08:25:59:7c:7b:d6:25:47:52:43:48:ab:8a:90:59:a2:ff:e4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 16 12:00:12 2021 GMT
            Not After : Dec 15 12:05:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:f1:03:c1:0f:fb:b5:ee:9d:a7:5a:2c:23:
                    5a:77:25:08:87:d9:19:ff:0e:ea:40:3c:91:34:5d:
                    5d:3b:63:2d:18:6d:54:ad:f0:9d:5c:17:42:38:9d:
                    ff:9d:87:e1:9e:49:fa:e0:76:90:c3:79:3b:c4:ff:
                    d2:14:76:03:9e:80:64:69:4c:15:70:6f:c5:a3:d5:
                    2c:90:80:c9:be:d6:be:8a:02:f1:88:e9:ad:73:b3:
                    21:07:7f:17:ee:00:1a:2f:ec:48:53:89:87:5b:4b:
                    9e:51:0e:24:69:a6:8b:2a:69:4a:67:44:30:22:be:
                    bc:92:0d:a2:f8:b2:b6:93:b3:11:f9:70:75:76:e9:
                    f1:18:88:c7:73:00:4d:38:da:f9:5e:53:92:13:de:
                    b5:37:ab:59:ae:7b:f3:4a:4c:70:45:d1:d9:ea:4b:
                    cf:79:19:4f:67:c9:d3:5a:36:1b:a8:53:fe:4b:bb:
                    37:b3:31:71:f5:2d:49:15:61:64:37:9f:17:6b:ba:
                    95:87:1c:8b:c4:24:41:ae:61:d0:34:30:a8:aa:ca:
                    31:17:64:d7:cf:c0:1d:bc:ed:e0:ae:d3:c4:60:73:
                    c6:ba:07:66:a8:2a:00:b2:e7:a4:f5:0a:c5:25:c7:
                    e8:3d:a0:fd:db:45:02:d0:c3:1c:21:8f:3d:a5:b7:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3A:35:97:2B:80:1B:E0:59:C8:55:6C:5F:99:FF:E6:F1:CB:16:AB
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137332e32362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:38:06:f2:ce:33:23:c2:68:1c:fa:af:b3:0c:53:8a:b0:
         7e:e2:9b:7b:e8:b6:6b:95:1a:97:da:4a:c6:91:7c:a8:97:25:
         00:93:5c:0a:4f:7f:5f:3d:d5:13:eb:f5:3b:24:6a:c4:dc:29:
         d9:0c:3d:c4:fa:f5:42:25:b2:1a:09:1a:a0:60:4e:83:88:3f:
         7b:40:2d:f3:b1:d9:e2:00:15:0f:a2:38:cf:c1:c1:df:56:01:
         e4:f9:3f:a1:68:0f:b4:6f:db:55:9c:64:60:58:22:3c:63:98:
         a3:0b:a6:64:81:52:7e:89:86:28:f2:48:0b:3a:17:b2:71:e9:
         77:2a:8e:84:b2:84:6c:74:a2:54:ab:49:1f:21:cc:26:34:06:
         54:b8:96:6e:de:cd:c9:15:c7:5f:10:d3:62:21:c1:98:79:00:
         22:de:ab:29:e8:09:75:fc:3d:cc:57:ec:7f:aa:9c:83:92:a6:
         16:87:85:0e:8b:d9:1e:f8:67:4d:19:a2:cb:0a:16:74:b9:ea:
         1d:77:3d:27:e3:3d:47:73:bb:19:f4:76:a7:99:f4:70:b5:93:
         70:97:ba:96:9e:2a:e0:1a:4d:ac:8d:ec:e3:6c:86:79:eb:18:
         65:44:05:9d:34:0c:50:18:77:8c:29:33:79:c9:1c:c9:6e:aa:
         00:2d:35:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org