Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137342e36312e302f32342d3234203d3e20323039343636.roa
File:                     3138352e3137342e36312e302f32342d3234203d3e20323039343636.roa (raw, json)
Hash identifier:          /BVMAgXexd7Y06ykxl+wuuDwoeGyo1BNLF8rli+mqSY=
Subject key identifier:   B1:40:63:22:38:54:F1:47:3B:5B:A4:D9:01:C7:F4:40:89:55:96:CC
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3C470BB25766B367F37887A582D4A5F77D86947B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137342e36312e302f32342d3234203d3e20323039343636.roa
Signing time:             Sun 27 Feb 2022 07:31:04 +0000
ROA not before:           Sun 27 Feb 2022 07:26:04 +0000
ROA not after:            Sun 26 Feb 2023 07:31:04 +0000
asID:                     209466
IP address blocks:        185.174.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:47:0b:b2:57:66:b3:67:f3:78:87:a5:82:d4:a5:f7:7d:86:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb 27 07:26:04 2022 GMT
            Not After : Feb 26 07:31:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:fa:6f:d0:93:7a:6d:93:b3:40:86:5d:6b:
                    0b:e9:8b:b6:72:02:f8:ef:49:1b:d2:2e:ca:d4:ef:
                    74:39:a4:ec:bc:11:d0:f9:4f:88:fd:cd:2a:3a:10:
                    06:b1:b4:aa:24:16:52:d9:03:e9:f2:77:ef:7a:68:
                    41:d0:84:d7:9c:58:4d:86:8f:16:ba:e8:6e:12:2c:
                    1a:e4:e8:47:73:f1:42:8b:13:0d:b2:b0:ca:d3:bc:
                    ca:ad:38:98:39:4e:b1:26:92:5a:6a:53:08:3c:9c:
                    e1:a8:88:b6:f7:2a:ab:79:de:a1:a5:51:94:de:76:
                    18:37:1a:4a:1a:9d:1f:5a:01:a9:03:e9:1e:8a:67:
                    7b:5c:4d:d2:47:45:c9:a6:00:dc:4d:d9:68:46:f0:
                    38:36:b3:a2:80:59:98:bd:e6:74:b9:72:74:e4:e1:
                    d7:aa:45:15:ad:3b:3a:ff:11:30:8b:a4:c1:f7:b0:
                    6d:9d:73:d7:58:b0:03:5e:d5:84:48:98:bc:51:78:
                    96:23:09:f5:f9:fb:38:51:b4:c0:1b:da:cb:82:1a:
                    6b:43:9f:0d:d1:c8:52:48:5f:98:fa:f3:19:f5:fc:
                    70:71:6c:a2:79:83:2f:27:19:3e:ea:7b:ec:69:d1:
                    32:94:92:f9:13:dc:86:79:20:a9:64:cd:3c:2c:9a:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:40:63:22:38:54:F1:47:3B:5B:A4:D9:01:C7:F4:40:89:55:96:CC
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3137342e36312e302f32342d3234203d3e20323039343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:80:34:22:b9:de:3c:36:e6:01:83:53:7f:72:1c:fd:a6:89:
         4f:78:36:7b:6f:fb:7e:ff:33:ad:88:a0:43:3c:2a:93:b1:06:
         f3:6d:bb:a2:90:7e:f4:e5:7d:cb:7a:da:36:a5:f1:60:f9:94:
         24:4b:23:d1:90:ce:fb:9a:2d:9d:c7:ce:4d:e1:4f:ff:7d:2f:
         c6:51:0e:ff:3d:40:33:a3:0c:4d:a2:b7:69:68:d3:73:e5:40:
         44:02:cd:33:f1:27:89:93:e1:cc:05:55:b1:35:ff:68:2f:a9:
         26:8d:35:93:71:75:bf:03:5b:14:d3:b2:06:7e:b3:33:a3:d3:
         67:bb:b4:38:2a:57:cc:8f:8f:81:0c:2f:e8:0b:7e:00:22:48:
         46:97:3b:5d:51:ea:09:b2:fa:8f:e7:43:ba:59:e8:56:46:cd:
         1e:3a:1f:63:8d:10:42:e4:da:d4:51:bd:e9:09:23:88:29:39:
         a4:98:42:60:2e:99:b8:2a:c9:a9:cc:57:e3:79:47:cf:ce:3b:
         86:1e:5f:33:dc:f8:31:ac:c4:48:1c:c6:dd:e4:13:c0:a0:3b:
         30:aa:51:96:35:51:b9:3b:dc:c2:96:6f:ba:b3:27:92:29:b2:
         d7:51:f4:ce:6e:7f:d3:af:4a:d4:14:bc:6a:1e:4d:9c:79:ef:
         f3:74:de:17
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUPEcLsldms2fzeIelgtSl932GlHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAyMjcwNzI2MDRaFw0yMzAyMjYwNzMxMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJEM0ZBNkZEMDkzN0E2RDkz
QjM0MDg2NUQ2QjBCRTk4QkI2NzIwMkY4RUY0OTFCRDIyRUNBRDRFRjc0MzlBNEVD
QkMxMUQwRjk0Rjg4RkRDRDJBM0ExMDA2QjFCNEFBMjQxNjUyRDkwM0U5RjI3N0VG
N0E2ODQxRDA4NEQ3OUM1ODREODY4RjE2QkFFODZFMTIyQzFBRTRFODQ3NzNGMTQy
OEIxMzBEQjJCMENBRDNCQ0NBQUQzODk4Mzk0RUIxMjY5MjVBNkE1MzA4M0M5Q0Ux
QTg4OEI2RjcyQUFCNzlERUExQTU1MTk0REU3NjE4MzcxQTRBMUE5RDFGNUEwMUE5
MDNFOTFFOEE2NzdCNUM0REQyNDc0NUM5QTYwMERDNEREOTY4NDZGMDM4MzZCM0Ey
ODA1OTk4QkRFNjc0Qjk3Mjc0RTRFMUQ3QUE0NTE1QUQzQjNBRkYxMTMwOEJBNEMx
RjdCMDZEOUQ3M0Q3NThCMDAzNUVENTg0NDg5OEJDNTE3ODk2MjMwOUY1RjlGQjM4
NTFCNEMwMUJEQUNCODIxQTZCNDM5RjBERDFDODUyNDg1Rjk4RkFGMzE5RjVGQzcw
NzE2Q0EyNzk4MzJGMjcxOTNFRUE3QkVDNjlEMTMyOTQ5MkY5MTNEQzg2NzkyMEE5
NjRDRDNDMkM5QTAxMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwtP6b9CTem2Ts0CGXWsL6Yu2cgL470kb0i7K1O90OaTsvBHQ+U+I
/c0qOhAGsbSqJBZS2QPp8nfvemhB0ITXnFhNho8WuuhuEiwa5OhHc/FCixMNsrDK
07zKrTiYOU6xJpJaalMIPJzhqIi29yqred6hpVGU3nYYNxpKGp0fWgGpA+keimd7
XE3SR0XJpgDcTdloRvA4NrOigFmYveZ0uXJ05OHXqkUVrTs6/xEwi6TB97BtnXPX
WLADXtWESJi8UXiWIwn1+fs4UbTAG9rLghprQ58N0chSSF+Y+vMZ9fxwcWyieYMv
Jxk+6nvsadEylJL5E9yGeSCpZM08LJoBGwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FLFAYyI4VPFHO1uk2QHH9ECJVZbMMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zMTM4MzUyZTMx
MzczNDJlMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM0MzYzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEALmuPTANBgkqhkiG9w0BAQsFAAOCAQEAV4A0IrnePDbmAYNTf3Ic
/aaJT3g2e2/7fv8zrYigQzwqk7EG8227opB+9OV9y3raNqXxYPmUJEsj0ZDO+5ot
ncfOTeFP/30vxlEO/z1AM6MMTaK3aWjTc+VARALNM/EniZPhzAVVsTX/aC+pJo01
k3F1vwNbFNOyBn6zM6PTZ7u0OCpXzI+PgQwv6At+ACJIRpc7XVHqCbL6j+dDulno
VkbNHjofY40QQuTa1FG96QkjiCk5pJhCYC6ZuCrJqcxX43lHz847hh5fM9z4MazE
SBzG3eQTwKA7MKpRljVRuTvcwpZvurMnkimy11H0zm5/069K1BS8ah5NnHnv83Te
Fw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org