Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e35382e3130372e302f32342d3234203d3e20323131313933.roa
File:                     3139332e35382e3130372e302f32342d3234203d3e20323131313933.roa (raw, json)
Hash identifier:          rPIzDEpi26XrEIqOCfYJucrbE1iQkso8i1uMap1J5ZU=
Subject key identifier:   0A:6A:78:D5:6B:93:96:82:53:27:47:AD:4E:1B:A3:B5:16:CE:69:BD
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4F842419D0C6D74D9F471E7B152DC9BB43765D21
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e35382e3130372e302f32342d3234203d3e20323131313933.roa
Signing time:             Tue 04 Jan 2022 12:37:36 +0000
ROA not before:           Tue 04 Jan 2022 12:32:36 +0000
ROA not after:            Tue 03 Jan 2023 12:37:36 +0000
asID:                     211193
IP address blocks:        193.58.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:84:24:19:d0:c6:d7:4d:9f:47:1e:7b:15:2d:c9:bb:43:76:5d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan  4 12:32:36 2022 GMT
            Not After : Jan  3 12:37:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:9c:5a:ce:a7:0a:5d:ce:99:64:05:1e:2d:
                    77:60:0e:1e:e8:07:df:ae:e0:a4:79:86:04:21:68:
                    c4:2b:3f:de:3d:61:91:99:f0:9f:39:f9:a6:0c:15:
                    94:11:b4:48:d9:4d:df:44:9e:a3:9c:0f:f1:99:4c:
                    85:31:91:a0:32:e8:53:13:a8:9b:d1:0b:91:01:a2:
                    43:b6:ec:40:46:96:d4:51:47:3d:9e:76:9a:6a:0c:
                    6f:e7:11:67:18:ec:bf:77:dd:e0:05:dc:4a:77:12:
                    bd:6c:95:4a:87:3d:af:a7:69:5d:cc:58:ba:fa:cb:
                    ea:f6:a2:f8:db:d3:96:58:07:a9:a7:67:ef:cc:24:
                    43:6e:5b:c5:30:d7:bf:ba:d5:86:3a:67:cd:a9:57:
                    1f:4b:83:b0:3b:0c:fb:ca:ba:d4:14:84:93:2c:00:
                    91:73:c7:7f:54:f5:78:4c:1b:34:e0:43:85:52:4e:
                    bf:5b:d7:78:81:ae:4a:75:a5:4c:26:11:db:c9:ed:
                    05:67:e8:a8:47:49:16:41:41:9e:06:29:5d:a8:32:
                    17:1e:99:47:4d:a8:e7:af:6b:32:5e:e1:f7:b6:98:
                    a7:c2:3b:38:a0:92:1a:c2:ad:a1:27:d9:b1:7c:a6:
                    e7:cd:14:fa:20:27:d8:57:a0:df:ac:3a:7a:ab:5c:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6A:78:D5:6B:93:96:82:53:27:47:AD:4E:1B:A3:B5:16:CE:69:BD
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e35382e3130372e302f32342d3234203d3e20323131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:08:63:8d:06:4f:f1:fd:72:30:6d:c2:38:67:e7:2e:f7:
         81:39:0c:99:02:dd:6f:64:70:fd:ea:86:03:ab:a7:9d:81:ac:
         83:66:21:50:eb:a4:97:56:e8:77:1e:b8:ab:e3:fb:75:e6:7c:
         2d:49:f4:14:81:86:ae:bb:c3:17:41:57:e8:d8:ec:f8:35:14:
         d4:c2:9a:3c:cd:0e:8c:af:ff:c7:90:5b:98:b9:ee:50:92:bb:
         dd:8e:d4:dd:a2:8f:ad:4e:0c:cb:dd:e6:44:66:1b:9b:63:ee:
         a0:9c:e0:7b:b7:b2:66:84:cb:2c:d1:ad:b1:68:a5:c3:8a:29:
         c9:61:07:f4:bc:01:60:bd:f5:79:83:fa:fd:fa:e3:d5:83:f7:
         0b:2c:df:38:a6:b8:81:3a:9f:f6:b0:fc:a2:47:0e:5f:85:c9:
         bf:dc:7e:9f:ff:97:77:f6:e1:18:ec:bb:e1:68:fc:13:b2:74:
         59:5a:b9:db:ef:20:22:04:56:67:b2:05:f6:63:3f:86:2a:3a:
         02:98:15:2f:20:93:92:f8:65:66:6f:43:36:55:a3:26:7d:13:
         29:1d:91:a1:28:be:44:45:b2:7a:b2:4d:75:55:f6:76:43:28:
         df:13:fb:76:61:cc:51:f9:a8:df:06:67:1e:66:96:f2:b4:d7:
         fe:8c:35:99
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUT4QkGdDG102fRx57FS3Ju0N2XSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAxMDQxMjMyMzZaFw0yMzAxMDMxMjM3MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURBMDlDNUFDRUE3MEE1RENF
OTk2NDA1MUUyRDc3NjAwRTFFRTgwN0RGQUVFMEE0Nzk4NjA0MjE2OEM0MkIzRkRF
M0Q2MTkxOTlGMDlGMzlGOUE2MEMxNTk0MTFCNDQ4RDk0RERGNDQ5RUEzOUMwRkYx
OTk0Qzg1MzE5MUEwMzJFODUzMTNBODlCRDEwQjkxMDFBMjQzQjZFQzQwNDY5NkQ0
NTE0NzNEOUU3NjlBNkEwQzZGRTcxMTY3MThFQ0JGNzdEREUwMDVEQzRBNzcxMkJE
NkM5NTRBODczREFGQTc2OTVEQ0M1OEJBRkFDQkVBRjZBMkY4REJEMzk2NTgwN0E5
QTc2N0VGQ0MyNDQzNkU1QkM1MzBEN0JGQkFENTg2M0E2N0NEQTk1NzFGNEI4M0Iw
M0IwQ0ZCQ0FCQUQ0MTQ4NDkzMkMwMDkxNzNDNzdGNTRGNTc4NEMxQjM0RTA0Mzg1
NTI0RUJGNUJENzc4ODFBRTRBNzVBNTRDMjYxMURCQzlFRDA1NjdFOEE4NDc0OTE2
NDE0MTlFMDYyOTVEQTgzMjE3MUU5OTQ3NERBOEU3QUY2QjMyNUVFMUY3QjY5OEE3
QzIzQjM4QTA5MjFBQzJBREExMjdEOUIxN0NBNkU3Q0QxNEZBMjAyN0Q4NTdBMERG
QUMzQTdBQUI1Q0EzNDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAraCcWs6nCl3OmWQFHi13YA4e6AffruCkeYYEIWjEKz/ePWGRmfCf
OfmmDBWUEbRI2U3fRJ6jnA/xmUyFMZGgMuhTE6ib0QuRAaJDtuxARpbUUUc9nnaa
agxv5xFnGOy/d93gBdxKdxK9bJVKhz2vp2ldzFi6+svq9qL429OWWAepp2fvzCRD
blvFMNe/utWGOmfNqVcfS4OwOwz7yrrUFISTLACRc8d/VPV4TBs04EOFUk6/W9d4
ga5KdaVMJhHbye0FZ+ioR0kWQUGeBildqDIXHplHTajnr2syXuH3tpinwjs4oJIa
wq2hJ9mxfKbnzRT6ICfYV6DfrDp6q1yjRwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FApqeNVrk5aCUydHrU4bo7UWzmm9MB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zMTM5MzMyZTM1
MzgyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMxMzkzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAME6azANBgkqhkiG9w0BAQsFAAOCAQEAl5wIY40GT/H9cjBtwjhn
5y73gTkMmQLdb2Rw/eqGA6unnYGsg2YhUOukl1bodx64q+P7deZ8LUn0FIGGrrvD
F0FX6Njs+DUU1MKaPM0OjK//x5BbmLnuUJK73Y7U3aKPrU4My93mRGYbm2PuoJzg
e7eyZoTLLNGtsWilw4opyWEH9LwBYL31eYP6/frj1YP3CyzfOKa4gTqf9rD8okcO
X4XJv9x+n/+Xd/bhGOy74Wj8E7J0WVq52+8gIgRWZ7IF9mM/hio6ApgVLyCTkvhl
Zm9DNlWjJn0TKR2RoSi+REWyerJNdVX2dkMo3xP7dmHMUfmo3wZnHmaW8rTX/ow1
mQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org