Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34302e302f32322d3234203d3e203631333137.roa
File:                     3139332e33312e34302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          8/YMt2mYI0G02CtZvHDayj04lKrJy2RpCvHCSRqksrY=
Subject key identifier:   62:D0:AA:27:0D:58:79:FD:CD:61:50:ED:E8:0F:3C:34:25:7A:F6:6C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7A4EBE26AB96309C794835A71D3E3BC1A73AAD6C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34302e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     61317
IP address blocks:        193.31.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4e:be:26:ab:96:30:9c:79:48:35:a7:1d:3e:3b:c1:a7:3a:ad:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject: CN=3082010A0282010100A9BECA4C85465DFC072170F536DF357903A0A844E958FBBFD36DBD9353760922D7CF7B4211497DC571E04673DF9D3BABF6C8949A79CA715C08D7800E8CDC054182B6E72C2A28B3FA4739BD497F7E9664EB5A7685314B2EB77C2B7A101A68388B131C20CBD2A1592BF663D154D960C998032189D3679A1A19E2CCDA2C1DB844DD20F43E44E3C253FF3D74FE18B1A19CE5563961DA1907E5E02F0A11086DE79117E283193F62F8424F88664E60210011D89E379727DEFF36AA2082064202F1E351198B9659F83D9BFDEBD70346EB52C290DD348F8223693C854B1B61BA05A9A50A621A56BB3BB7CC96A677A1BC019FD0B8A01623B1EFECA1499D66B062C75C27DF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:ca:4c:85:46:5d:fc:07:21:70:f5:36:df:
                    35:79:03:a0:a8:44:e9:58:fb:bf:d3:6d:bd:93:53:
                    76:09:22:d7:cf:7b:42:11:49:7d:c5:71:e0:46:73:
                    df:9d:3b:ab:f6:c8:94:9a:79:ca:71:5c:08:d7:80:
                    0e:8c:dc:05:41:82:b6:e7:2c:2a:28:b3:fa:47:39:
                    bd:49:7f:7e:96:64:eb:5a:76:85:31:4b:2e:b7:7c:
                    2b:7a:10:1a:68:38:8b:13:1c:20:cb:d2:a1:59:2b:
                    f6:63:d1:54:d9:60:c9:98:03:21:89:d3:67:9a:1a:
                    19:e2:cc:da:2c:1d:b8:44:dd:20:f4:3e:44:e3:c2:
                    53:ff:3d:74:fe:18:b1:a1:9c:e5:56:39:61:da:19:
                    07:e5:e0:2f:0a:11:08:6d:e7:91:17:e2:83:19:3f:
                    62:f8:42:4f:88:66:4e:60:21:00:11:d8:9e:37:97:
                    27:de:ff:36:aa:20:82:06:42:02:f1:e3:51:19:8b:
                    96:59:f8:3d:9b:fd:eb:d7:03:46:eb:52:c2:90:dd:
                    34:8f:82:23:69:3c:85:4b:1b:61:ba:05:a9:a5:0a:
                    62:1a:56:bb:3b:b7:cc:96:a6:77:a1:bc:01:9f:d0:
                    b8:a0:16:23:b1:ef:ec:a1:49:9d:66:b0:62:c7:5c:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D0:AA:27:0D:58:79:FD:CD:61:50:ED:E8:0F:3C:34:25:7A:F6:6C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34302e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:8d:cd:62:7b:16:01:ca:c4:fc:e4:3b:80:0d:bc:c2:f1:
         5f:e1:d3:cf:a7:0f:79:c1:7a:ff:66:36:da:48:f8:54:ae:3f:
         14:90:52:41:07:b4:1d:5d:6c:39:22:3c:99:ab:59:dc:5c:1c:
         3b:47:d4:3c:9f:d6:0d:37:c5:6a:1c:95:95:6f:a1:c1:70:94:
         aa:07:56:d6:31:d0:29:a7:19:2d:97:58:20:62:41:f3:90:af:
         f6:de:f5:1c:c2:1c:79:95:a3:32:c9:16:c5:a0:55:15:33:15:
         e5:ce:f2:05:42:f9:d6:d2:19:e2:71:3c:e9:e3:23:9f:a9:d6:
         db:0c:3c:a0:79:f0:d3:76:72:ac:22:c3:7e:cd:11:a8:71:63:
         d8:29:a3:37:c9:37:54:fb:87:8d:1c:ee:e8:74:63:95:90:d7:
         e1:49:95:6a:47:53:fa:61:9a:28:fb:58:fc:13:b6:d1:31:91:
         ce:60:2f:5c:fe:b9:18:28:7f:cf:72:58:99:8f:6c:80:12:4b:
         08:da:47:49:e3:d8:e7:26:4b:d4:cd:2c:0f:bc:49:79:2c:ad:
         55:33:5b:8d:7b:b8:e4:ee:ce:fa:63:00:cd:d6:81:62:8b:0d:
         1b:86:e8:45:0b:59:6c:c5:06:65:2d:10:ff:37:51:a7:08:12:
         86:45:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org