Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e35382e3130342e302f32342d3234203d3e20323131313132.roa
File:                     3139332e35382e3130342e302f32342d3234203d3e20323131313132.roa (raw, json)
Hash identifier:          lWckr0BRD8M3m7kmTL52LdJRpkZd/YP03x2y+VBAkJ0=
Subject key identifier:   BE:B6:91:FE:C5:0E:97:1A:A6:F8:00:48:16:50:B6:E8:DC:27:E0:A4
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7B1E49BF3B10AFA7159C8498F958D9EE48B6C69A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e35382e3130342e302f32342d3234203d3e20323131313132.roa
Signing time:             Wed 02 Mar 2022 16:14:35 +0000
ROA not before:           Wed 02 Mar 2022 16:09:35 +0000
ROA not after:            Wed 01 Mar 2023 16:14:35 +0000
asID:                     211112
IP address blocks:        193.58.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1e:49:bf:3b:10:af:a7:15:9c:84:98:f9:58:d9:ee:48:b6:c6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  2 16:09:35 2022 GMT
            Not After : Mar  1 16:14:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:73:4c:9a:22:51:00:e7:1c:03:5e:2d:e3:
                    6c:cd:c7:db:28:77:fe:33:3d:93:f0:9f:bc:91:8b:
                    6c:72:bd:a0:fa:3d:5f:6d:48:f5:a0:a6:45:8f:37:
                    97:a0:ad:31:47:46:b9:05:13:3c:fa:f2:a0:19:d4:
                    7d:f2:f3:fc:93:91:47:25:8d:21:6f:b2:e0:20:c4:
                    46:2f:5f:91:f9:02:42:71:8c:d1:72:f2:f5:fa:9e:
                    6a:4b:c7:ad:32:4f:cb:82:b6:16:e4:b0:39:ae:4f:
                    0b:1e:33:46:90:b3:3f:6c:41:29:d8:41:69:0a:61:
                    be:2f:dc:00:19:2b:72:49:d9:f9:31:7a:d1:e9:f9:
                    b4:58:79:f4:a3:8b:2f:1c:0b:ca:80:de:a1:0e:b2:
                    a2:30:d9:a9:52:8c:41:be:53:a5:14:6b:23:ad:df:
                    e0:bc:da:c9:2e:cf:2d:aa:4d:f9:2e:84:9e:47:64:
                    44:4c:86:a5:3d:31:d1:f0:c9:6e:6c:27:90:06:73:
                    39:32:3d:53:f8:66:4c:69:8f:54:c9:14:26:83:27:
                    52:63:21:57:cc:c9:96:87:a5:42:45:e9:71:0a:72:
                    43:dd:8f:b8:0f:22:fd:80:b9:3a:45:b1:6c:94:6c:
                    2c:a6:48:be:c7:de:24:51:99:58:a1:7c:f0:12:80:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:91:FE:C5:0E:97:1A:A6:F8:00:48:16:50:B6:E8:DC:27:E0:A4
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e35382e3130342e302f32342d3234203d3e20323131313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:ff:e9:88:44:f0:f8:57:e3:5c:e6:3c:cf:e7:3c:ce:9b:
         5f:f7:98:72:7d:70:f3:db:c1:22:64:fc:06:97:9b:a4:31:6d:
         bf:24:cc:78:f6:74:2a:f2:35:73:4b:a5:80:f1:b9:e8:de:a4:
         93:18:72:0f:23:e9:2c:2a:c2:d4:bc:8a:a2:d7:ea:1a:d0:9c:
         de:d0:dc:67:79:36:8e:38:2a:27:44:65:cc:f1:3e:03:1e:b3:
         3d:2c:0c:dc:27:d4:12:30:29:99:db:bd:70:a3:89:7b:81:36:
         e4:0c:82:52:98:f4:11:2c:7a:6c:ea:91:8c:b6:e3:b4:26:8c:
         59:da:fc:d8:7c:35:28:df:fb:07:f9:a6:31:bf:58:92:a9:1c:
         fa:f9:b8:06:43:94:9b:de:6b:7e:1b:50:31:cc:6f:c2:2a:d5:
         b7:56:56:d8:f0:04:24:80:1b:06:b6:58:60:d9:a4:dc:37:d0:
         db:a1:e0:99:e9:ac:7f:d3:a2:57:42:e6:c0:30:24:62:2a:98:
         fb:13:2d:c3:76:f3:35:c6:33:47:e3:5c:98:2b:30:83:ee:f1:
         29:80:2e:73:cb:d7:a9:20:bc:50:21:7c:57:ee:e5:29:ff:8c:
         f9:13:54:45:20:40:d0:a0:ac:d4:a5:89:a3:63:31:1e:6a:ce:
         df:f3:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org