Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3231302e302f32342d3234203d3e203138333435.roa
File:                     3139312e3130312e3231302e302f32342d3234203d3e203138333435.roa (raw, json)
Hash identifier:          jXynWxBnMrT8hWXbvfVHsCU8xe7UJaH7p1fb7vjv6r8=
Subject key identifier:   C3:44:BF:A1:46:B2:C1:EE:F1:10:50:5B:C6:E7:FF:84:BE:9C:A3:05
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       0EE0DD989C97A4C310AF9C43CC3D34B19897E6C1
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3231302e302f32342d3234203d3e203138333435.roa
Signing time:             Thu 03 Mar 2022 13:13:07 +0000
ROA not before:           Thu 03 Mar 2022 13:08:07 +0000
ROA not after:            Thu 02 Mar 2023 13:13:07 +0000
asID:                     18345
IP address blocks:        191.101.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e0:dd:98:9c:97:a4:c3:10:af:9c:43:cc:3d:34:b1:98:97:e6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  3 13:08:07 2022 GMT
            Not After : Mar  2 13:13:07 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:7d:03:c1:46:38:5b:80:b9:c1:fb:2a:9e:
                    fa:b4:41:ee:0e:e3:10:43:d1:87:95:6c:9d:77:2d:
                    cc:16:cd:90:6e:c9:dc:0b:fa:64:5c:63:44:a9:ea:
                    7e:a9:41:49:0b:c8:88:cd:86:63:68:9c:43:65:f0:
                    ee:9b:26:16:6b:91:fd:95:60:4a:09:d1:c9:dc:6a:
                    bc:01:e1:1a:a8:92:b0:04:cb:f4:be:82:fc:f9:71:
                    39:c6:cf:6d:b2:fd:37:15:4b:ac:a4:0b:7e:da:b6:
                    08:eb:52:07:ca:c6:b0:db:fe:98:c6:2d:84:80:37:
                    fa:c5:cb:d4:b5:8e:54:a3:53:51:9e:29:ed:46:8f:
                    89:bf:cc:a3:3b:3e:25:0a:29:b1:52:d1:3a:32:38:
                    ef:63:45:ae:b7:37:55:65:3e:5b:ef:66:a4:75:52:
                    8e:e1:2f:8a:c3:7e:11:76:96:66:01:3f:3b:41:67:
                    f9:c7:b2:5e:96:6f:16:f5:6d:45:68:bd:48:0c:05:
                    cb:ce:d3:ac:52:3b:0a:a5:5c:70:39:4b:5b:e6:54:
                    5c:a4:a6:07:cb:aa:29:4e:51:5d:c5:9c:ce:e1:0c:
                    ed:0e:90:ac:35:1d:d0:be:fa:9f:f1:fd:c5:4c:52:
                    d8:c9:2c:08:b4:99:f9:64:e6:29:e7:78:bc:3c:d3:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:44:BF:A1:46:B2:C1:EE:F1:10:50:5B:C6:E7:FF:84:BE:9C:A3:05
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3231302e302f32342d3234203d3e203138333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:09:94:07:2a:3c:1c:d5:8b:7f:6e:58:44:fa:b5:ed:cd:
         5f:dd:aa:5c:f8:82:c3:c6:3a:cd:ec:f3:fd:33:b7:6b:3a:04:
         16:9a:41:c8:62:d8:db:db:3b:ce:53:86:23:6a:5b:69:b2:03:
         37:99:1c:97:45:27:85:4b:a0:a1:c6:13:86:c3:b1:42:d5:15:
         59:0f:d5:61:e6:96:7d:cc:e2:3c:48:5a:9f:19:e6:6a:b6:16:
         ab:ce:ab:3f:d7:07:64:ea:42:19:9f:84:0c:5f:0b:01:8c:fb:
         76:69:97:b9:36:1d:9f:c2:5f:d4:4d:44:93:f0:aa:4c:a6:f2:
         78:69:a6:74:e5:fa:bd:25:d4:75:93:90:92:b0:84:5d:7c:51:
         90:5c:04:71:7b:32:74:d0:d2:69:74:21:da:66:93:ff:42:03:
         bf:77:93:6e:54:0e:37:24:95:99:7f:5f:f5:97:f5:2f:7f:d1:
         21:b3:5f:b6:ea:7e:6d:a2:1b:ac:c0:5c:44:46:8a:36:13:97:
         7c:d3:96:52:c0:fb:64:70:78:3b:f7:cc:6a:87:84:72:08:ce:
         82:d3:03:99:e9:c3:db:bf:3a:93:e1:e2:4d:2e:01:f3:93:63:
         82:79:4f:f8:c1:b8:24:fa:b7:47:62:4c:40:c9:98:b1:8b:ff:
         77:a4:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org