Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3138302e302f32342d3234203d3e20313333333938.roa
File:                     3139312e3130312e3138302e302f32342d3234203d3e20313333333938.roa (raw, json)
Hash identifier:          r5xeGez1eT2anBY4YCMPD/KpMLNAmJmASuh9veZdMxY=
Subject key identifier:   1C:87:FE:64:70:55:EA:D8:66:24:B2:D7:26:D6:EE:E8:D3:D2:12:A0
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       06993E6BB06C6488B520037CA82EA3E26ADEB2F0
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3138302e302f32342d3234203d3e20313333333938.roa
Signing time:             Fri 04 Mar 2022 11:23:57 +0000
ROA not before:           Fri 04 Mar 2022 11:18:57 +0000
ROA not after:            Fri 03 Mar 2023 11:23:57 +0000
asID:                     133398
IP address blocks:        191.101.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:99:3e:6b:b0:6c:64:88:b5:20:03:7c:a8:2e:a3:e2:6a:de:b2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  4 11:18:57 2022 GMT
            Not After : Mar  3 11:23:57 2023 GMT
        Subject: CN=3082010A0282010100ACA3E1A66939F6DDE65CF4C2DB5EC6712F5A9DA99A2483D89B980150672604285C622FA49276391BAD6ED9F24B9D601BA25839450B45B51A298E60984FE20AB0F3506C3A7C49510307A3A2E4FD805FB73EA23F3D2E655C5C72BBBD7D245FAF26A0C2B61035EF9E29B8FEC5592AE34A8FFD41D1292089E781DB75642E7ED1A567E5F49AD43FD0CDD37D4A38056C9E39C0E928B2D1AFD61FA9767E3B92187972955B8B70DD80DE9450BDE94B9A3A8EDFD6311D2605DADE96D92EE3BFE0F97E05C0293F6D2C00B8537B2E1FC6391D163F190F8F75DA42C7B939361B8438BB077819A2F81AB7602333E76411A37F59210F6B5AF26E2FDB8DB1D6C2AB73C6FFC14F590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:e1:a6:69:39:f6:dd:e6:5c:f4:c2:db:5e:
                    c6:71:2f:5a:9d:a9:9a:24:83:d8:9b:98:01:50:67:
                    26:04:28:5c:62:2f:a4:92:76:39:1b:ad:6e:d9:f2:
                    4b:9d:60:1b:a2:58:39:45:0b:45:b5:1a:29:8e:60:
                    98:4f:e2:0a:b0:f3:50:6c:3a:7c:49:51:03:07:a3:
                    a2:e4:fd:80:5f:b7:3e:a2:3f:3d:2e:65:5c:5c:72:
                    bb:bd:7d:24:5f:af:26:a0:c2:b6:10:35:ef:9e:29:
                    b8:fe:c5:59:2a:e3:4a:8f:fd:41:d1:29:20:89:e7:
                    81:db:75:64:2e:7e:d1:a5:67:e5:f4:9a:d4:3f:d0:
                    cd:d3:7d:4a:38:05:6c:9e:39:c0:e9:28:b2:d1:af:
                    d6:1f:a9:76:7e:3b:92:18:79:72:95:5b:8b:70:dd:
                    80:de:94:50:bd:e9:4b:9a:3a:8e:df:d6:31:1d:26:
                    05:da:de:96:d9:2e:e3:bf:e0:f9:7e:05:c0:29:3f:
                    6d:2c:00:b8:53:7b:2e:1f:c6:39:1d:16:3f:19:0f:
                    8f:75:da:42:c7:b9:39:36:1b:84:38:bb:07:78:19:
                    a2:f8:1a:b7:60:23:33:e7:64:11:a3:7f:59:21:0f:
                    6b:5a:f2:6e:2f:db:8d:b1:d6:c2:ab:73:c6:ff:c1:
                    4f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:FE:64:70:55:EA:D8:66:24:B2:D7:26:D6:EE:E8:D3:D2:12:A0
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3138302e302f32342d3234203d3e20313333333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:07:95:e3:c3:b5:4a:21:9c:53:67:4d:66:d2:ec:14:ad:
         6b:f0:c9:c2:2c:76:00:5f:94:f5:5d:50:c2:2b:b2:7e:ee:6f:
         92:65:a9:6c:f6:e9:93:d0:9f:73:47:25:08:2a:a1:eb:5c:a1:
         5a:d8:26:b7:cb:46:9d:65:38:27:62:a5:f5:66:53:70:63:d0:
         cd:36:d5:eb:d2:32:7b:67:ba:ed:71:06:fd:f8:7d:c8:b7:51:
         e7:72:e6:48:30:71:67:10:c6:b2:0c:7d:69:85:56:4e:d2:6e:
         16:11:80:19:d2:9a:40:d8:5e:7b:24:30:78:90:77:a1:d5:79:
         e9:a6:c8:df:11:74:9e:75:42:b8:8f:b4:69:d7:26:1f:b7:52:
         d6:86:4e:d3:cb:e9:f1:ad:1a:d3:b6:3c:bf:1e:a1:1c:5e:b3:
         2f:3b:2e:8f:41:12:1a:52:e3:ca:da:97:d6:13:78:69:df:05:
         72:8c:5c:a6:9c:b4:a6:4e:1f:c8:2d:a5:26:78:8c:d3:c5:3c:
         9f:a0:7d:cf:69:33:63:9a:bb:8b:e5:81:40:c1:07:8f:d8:4e:
         26:3e:b1:58:2d:53:60:4d:6d:eb:0c:b7:d7:29:6d:a4:d7:e6:
         38:ef:37:b8:22:20:17:df:db:35:22:32:50:57:14:d7:df:2d:
         ad:41:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org