Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34332e302f32342d3234203d3e20323131353835.roa
File:                     3139332e33312e34332e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          oHtQytB8LlKu9ciJOwmIf6XKzO7Mi/3lqLs/hl/CvEM=
Subject key identifier:   64:EC:84:32:FD:AB:09:87:56:18:AC:AC:58:36:16:FA:CE:18:47:A9
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       2159CA177275CA361EB0D1567B76E052EF237928
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34332e302f32342d3234203d3e20323131353835.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     211585
IP address blocks:        193.31.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:ca:17:72:75:ca:36:1e:b0:d1:56:7b:76:e0:52:ef:23:79:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:bb:ce:99:74:9e:21:81:2e:ba:9d:64:a5:
                    d6:5b:6a:27:d4:8c:d6:ba:60:a8:e0:f0:08:b7:c0:
                    9e:26:a4:17:0f:4e:7d:87:a5:6a:6e:b2:06:fe:05:
                    fa:ef:59:6d:ee:1d:3e:65:26:29:5a:fc:66:8f:04:
                    0a:44:7c:1e:86:0a:7e:31:51:c3:2f:9f:59:b6:b3:
                    ae:fd:ae:df:98:d6:e4:2d:c2:7c:26:c1:a6:10:84:
                    f7:ef:8d:45:a0:de:2a:22:60:54:bc:94:4b:7a:4b:
                    cd:62:bb:c7:90:d7:0b:4b:02:cd:3e:a2:aa:51:25:
                    ab:ae:b4:7e:9e:6e:63:f4:49:e8:75:e3:29:71:c4:
                    5f:4e:75:b7:30:f0:c1:70:45:3b:69:b2:0b:09:94:
                    9f:cf:b4:c5:57:60:6f:30:da:2a:54:8e:b5:58:18:
                    09:78:6b:62:f8:49:07:5a:7d:d6:5f:20:8d:f4:ef:
                    82:2c:44:8c:1c:95:37:c3:de:94:16:21:4f:ca:ea:
                    b3:09:65:d0:a3:88:8e:3c:94:f7:a7:83:22:1a:a2:
                    0d:38:c2:e0:2b:2b:8d:ef:f3:d5:21:46:e8:7c:1f:
                    a4:29:96:9c:eb:b6:3b:91:e8:06:14:88:0a:3b:bd:
                    22:22:b1:89:47:da:cc:9f:74:21:df:d1:4e:b2:b9:
                    bc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EC:84:32:FD:AB:09:87:56:18:AC:AC:58:36:16:FA:CE:18:47:A9
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e33312e34332e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9b:81:cd:b9:ad:9d:a3:e5:5a:09:7b:2f:95:55:72:80:96:
         e2:ea:88:f9:93:a5:88:b8:68:59:f7:8b:56:01:79:c0:a7:e7:
         19:35:00:23:fa:e0:60:8e:cb:0f:78:d3:95:32:b2:f1:3b:21:
         fd:f3:89:c3:bc:92:d4:99:77:bf:3f:5e:f7:a0:a2:d5:26:72:
         32:de:42:49:9d:6c:04:58:27:96:08:63:67:85:54:41:a3:be:
         7d:9a:07:fb:64:00:b2:8c:09:e3:e5:37:c7:c0:11:25:1b:53:
         27:75:41:f8:54:e6:8c:4b:89:62:be:27:d9:19:ae:c5:0b:e1:
         2f:c9:41:a4:61:6c:01:3c:fb:0a:16:09:b7:d6:c2:be:5c:61:
         ab:11:41:4d:e0:d6:e9:4f:0b:cc:54:78:9a:13:aa:3c:ad:d8:
         7a:f7:83:1f:81:fb:7a:ba:79:a1:d0:11:b8:49:9c:ca:14:58:
         a7:43:b5:4d:dc:15:83:ad:64:a9:7e:29:c3:e7:bf:57:31:b0:
         5a:9b:6f:c8:5b:69:8a:d9:4c:17:cb:ae:5c:23:70:ce:be:db:
         75:93:78:0a:b4:ae:be:1e:16:57:b1:00:06:59:60:8f:28:16:
         8a:f7:8e:31:e2:eb:d1:a8:37:f4:d4:eb:13:c0:79:d7:34:19:
         ce:48:d5:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org