Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3231312e302f32342d3234203d3e203138333435.roa
File:                     3139312e3130312e3231312e302f32342d3234203d3e203138333435.roa (raw, json)
Hash identifier:          XWh8u4NWOyI229cfZg52ER/HkPnJlK7CdswBHxLhl+g=
Subject key identifier:   21:F2:84:54:5E:3B:9C:D1:BD:89:EE:12:1A:3A:5F:C3:4A:C8:E5:AE
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3D9106A353A101C33D1A41542DAADF67F938F2A8
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3231312e302f32342d3234203d3e203138333435.roa
Signing time:             Thu 03 Mar 2022 13:13:37 +0000
ROA not before:           Thu 03 Mar 2022 13:08:37 +0000
ROA not after:            Thu 02 Mar 2023 13:13:37 +0000
asID:                     18345
IP address blocks:        191.101.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:91:06:a3:53:a1:01:c3:3d:1a:41:54:2d:aa:df:67:f9:38:f2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  3 13:08:37 2022 GMT
            Not After : Mar  2 13:13:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:d6:c6:de:35:dc:40:6d:38:88:18:75:93:
                    e8:a8:ab:10:98:d1:db:13:20:84:b4:f5:e5:38:2b:
                    5c:42:7b:16:47:11:ac:4e:85:da:4b:82:7f:69:e0:
                    81:d1:c7:ad:bf:02:86:5c:f7:0e:42:f1:89:4e:47:
                    be:79:21:04:06:5b:c8:23:ea:7f:94:d1:2b:85:01:
                    50:46:e0:7d:17:42:2d:d7:2b:79:72:a2:28:a3:a5:
                    03:b3:2a:2b:fc:25:10:31:d2:fb:09:1e:fc:e8:00:
                    ca:54:7a:cb:58:d4:f2:86:51:29:5b:eb:7b:8d:46:
                    3e:37:23:73:12:da:07:69:6f:54:a4:b5:6c:e5:e1:
                    cb:79:a8:b3:dd:3c:0c:4e:63:85:a7:ed:8b:82:ee:
                    ad:79:3e:e2:a3:25:da:03:4d:cb:27:d1:91:0a:9d:
                    66:84:9a:e4:ec:35:bf:e9:2e:fa:f7:10:9f:d2:de:
                    4b:19:75:77:94:eb:8a:2f:1f:22:12:fd:16:61:e4:
                    17:1a:04:aa:0e:cc:61:be:f5:17:24:b7:de:c8:ed:
                    e8:f5:39:76:8b:90:02:bf:f1:cd:fe:0c:61:0d:fd:
                    21:ec:b3:b9:62:6f:d6:cf:14:37:7d:6d:40:5e:b6:
                    0a:7a:b1:12:a4:36:cd:f8:ed:97:79:43:cb:33:e4:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F2:84:54:5E:3B:9C:D1:BD:89:EE:12:1A:3A:5F:C3:4A:C8:E5:AE
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139312e3130312e3231312e302f32342d3234203d3e203138333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:18:b9:2a:1d:4e:06:4d:f1:d4:f6:1d:97:04:f2:14:cc:62:
         ac:19:de:14:1c:fb:2c:1d:f9:ab:c3:60:29:6f:01:a5:e8:3d:
         42:06:2a:13:54:e0:0a:4a:97:8d:a5:18:98:8a:06:c8:a2:85:
         4f:32:96:50:18:96:39:65:7b:d6:bd:96:46:8a:47:ec:9f:3d:
         69:ba:36:2a:a9:92:d6:03:f8:a8:dc:79:9c:5b:5b:62:64:81:
         91:59:c3:eb:32:3a:12:fe:64:fe:55:6c:00:d6:33:39:83:84:
         3c:e1:1c:01:45:63:b5:18:36:79:f9:10:e0:c6:92:3e:6f:ec:
         3f:65:33:7b:68:9a:29:fe:32:e1:84:ff:d2:32:06:60:41:13:
         2c:9d:1f:d7:15:88:12:3c:ad:83:31:b9:90:a8:6c:88:91:80:
         2b:68:c7:ec:cd:c0:b3:12:ff:6e:7b:db:58:6c:29:1f:a4:a5:
         5e:6f:24:55:c0:7b:31:bc:6d:ed:74:a7:68:83:d5:73:a4:61:
         e5:8f:81:14:4d:9a:ed:c1:37:58:ef:bd:be:20:eb:92:4c:17:
         b1:3d:d8:7e:ee:96:f9:a8:74:04:bb:36:dc:c3:88:f9:d6:7f:
         33:57:db:2a:9b:8b:d2:19:aa:96:1b:ff:a8:5b:76:0f:b2:66:
         fd:3e:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org