Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34312e302f32342d3234203d3e20313333333938.roa
File:                     3139332e33312e34312e302f32342d3234203d3e20313333333938.roa (raw, json)
Hash identifier:          ojfU1a/s/xvgJ5BQI83tWzDRKkRHB4/9kp1fHmLz39s=
Subject key identifier:   4B:BE:9C:14:EC:35:B6:EB:CA:86:99:7A:53:EC:2C:47:37:06:93:75
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       36CB04AFD19D50799B623075F80F7E5D440CF376
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34312e302f32342d3234203d3e20313333333938.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     133398
IP address blocks:        193.31.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cb:04:af:d1:9d:50:79:9b:62:30:75:f8:0f:7e:5d:44:0c:f3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject: CN=3082010A0282010100F2F36CD207782ED73990CF7016CC9106A24D98B0A038BEE821609942C2B5D51AE33768884DC45BFD86AD207C076C7575E6245F02258628CC8603EBEA25BDE832BD8493450CA2CC6800F2D215F63EB877A1EDA38F2CA7B36E5916E43EC5041ECDD80115BF85F6B2433D843114A7E378E0646BF92BB90B64F63FB462D7BCF9B0E89FF73DDCCCF62F1598047244A3DBA33CAAFE78662F581955E142C2FF4A8CA0A77D831032650829CCC68D05C7F974310D9F1B995BD439F338B42681D3D76E5AF5B39B81AB0C9944735037A40D1F24149CB81203317ABB6B3255302A071E5E0BEDE82AF76BD3C9BA1E1F2E62527CA715389EBADCF6E07F6D26632A1D827059BE150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f3:6c:d2:07:78:2e:d7:39:90:cf:70:16:cc:
                    91:06:a2:4d:98:b0:a0:38:be:e8:21:60:99:42:c2:
                    b5:d5:1a:e3:37:68:88:4d:c4:5b:fd:86:ad:20:7c:
                    07:6c:75:75:e6:24:5f:02:25:86:28:cc:86:03:eb:
                    ea:25:bd:e8:32:bd:84:93:45:0c:a2:cc:68:00:f2:
                    d2:15:f6:3e:b8:77:a1:ed:a3:8f:2c:a7:b3:6e:59:
                    16:e4:3e:c5:04:1e:cd:d8:01:15:bf:85:f6:b2:43:
                    3d:84:31:14:a7:e3:78:e0:64:6b:f9:2b:b9:0b:64:
                    f6:3f:b4:62:d7:bc:f9:b0:e8:9f:f7:3d:dc:cc:f6:
                    2f:15:98:04:72:44:a3:db:a3:3c:aa:fe:78:66:2f:
                    58:19:55:e1:42:c2:ff:4a:8c:a0:a7:7d:83:10:32:
                    65:08:29:cc:c6:8d:05:c7:f9:74:31:0d:9f:1b:99:
                    5b:d4:39:f3:38:b4:26:81:d3:d7:6e:5a:f5:b3:9b:
                    81:ab:0c:99:44:73:50:37:a4:0d:1f:24:14:9c:b8:
                    12:03:31:7a:bb:6b:32:55:30:2a:07:1e:5e:0b:ed:
                    e8:2a:f7:6b:d3:c9:ba:1e:1f:2e:62:52:7c:a7:15:
                    38:9e:ba:dc:f6:e0:7f:6d:26:63:2a:1d:82:70:59:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BE:9C:14:EC:35:B6:EB:CA:86:99:7A:53:EC:2C:47:37:06:93:75
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34312e302f32342d3234203d3e20313333333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:d2:5f:05:98:36:9f:cb:47:9a:09:82:d9:25:33:e6:d4:
         e2:6b:42:04:50:b1:cc:e0:a1:ec:18:62:36:b5:7f:a4:9b:9a:
         a8:7f:90:84:e9:99:1c:19:f4:69:e5:65:4b:35:9f:01:94:18:
         8c:42:50:b6:08:1b:46:db:71:1f:0a:b0:bb:0f:28:f1:db:d4:
         69:3a:54:88:4b:a5:56:94:11:8c:20:d8:44:63:27:bd:4b:bf:
         40:e5:fc:e4:f2:89:4f:a3:f8:c6:17:e7:84:3e:c0:b1:be:63:
         06:0e:4e:ad:8b:1e:84:e1:31:df:8c:6d:36:1f:e7:1e:c4:c8:
         77:bd:f4:72:7a:1b:a1:ef:c9:bf:6c:ff:eb:74:86:4b:d6:49:
         54:56:d8:94:cc:c6:73:6b:d0:44:dc:f9:ea:74:2e:d3:ce:ef:
         f5:b8:df:d7:5c:48:4e:b6:10:7d:fc:1e:21:4b:c0:3a:52:23:
         45:af:b9:77:f1:02:d1:98:89:9d:18:f0:2c:c3:ca:ab:3b:50:
         aa:bb:94:d6:7f:04:53:94:a6:5f:1f:70:fb:91:27:af:f2:32:
         68:95:23:03:7a:36:3c:d2:e8:c0:c7:f5:8a:f6:86:e6:63:bb:
         de:72:fc:5e:0a:c4:48:13:76:73:1c:2e:02:03:7a:3e:34:4c:
         bb:a7:0b:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org