Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139342e3131302e31322e302f32342d3234203d3e203434303932.roa
File:                     3139342e3131302e31322e302f32342d3234203d3e203434303932.roa (raw, json)
Hash identifier:          z/Ybnm/lGfz5QPTEDi1m7N1/tKiXFPCd17LFbqo0GE0=
Subject key identifier:   75:E8:2C:C1:14:06:AD:98:FD:3B:51:78:F2:C4:5D:DF:A6:45:F0:98
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       337E124127E70D51A18C92E59823F3FC9EA21DFA
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139342e3131302e31322e302f32342d3234203d3e203434303932.roa
Signing time:             Mon 29 Nov 2021 08:20:42 +0000
ROA not before:           Mon 29 Nov 2021 08:15:42 +0000
ROA not after:            Mon 28 Nov 2022 08:20:42 +0000
asID:                     44092
IP address blocks:        194.110.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7e:12:41:27:e7:0d:51:a1:8c:92:e5:98:23:f3:fc:9e:a2:1d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 08:15:42 2021 GMT
            Not After : Nov 28 08:20:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:74:df:06:bb:54:ce:16:d6:03:27:2f:b5:
                    3b:10:8e:b9:a4:22:5d:68:4b:f9:17:d1:a8:bf:11:
                    a3:32:34:8f:0e:99:3a:8d:47:3f:b6:02:03:46:e2:
                    d7:59:de:77:29:c7:07:86:b1:37:67:f7:d8:e5:ee:
                    77:2d:ed:ec:ba:ed:97:c0:a1:9d:a4:19:45:de:19:
                    39:97:67:76:af:ea:ba:d3:d8:22:d2:17:46:6d:c3:
                    ba:80:40:db:c2:6d:57:5a:27:1f:47:94:75:4a:e9:
                    bf:62:fe:07:82:35:bb:7e:99:18:e9:14:e3:48:b7:
                    04:6f:5c:c4:b5:a4:af:e5:c2:a9:07:0f:cd:ea:5d:
                    9e:e6:3d:d5:e8:5d:82:4c:12:56:1b:97:50:0c:88:
                    26:61:56:78:f6:05:69:b7:37:cc:b0:8b:30:85:08:
                    9d:f7:4d:52:1a:f6:50:83:2a:b6:a0:3f:25:4c:2f:
                    ac:13:46:e1:6a:d5:21:08:d2:4e:e8:c0:bb:b4:86:
                    4e:c7:86:8d:ea:4a:32:c9:19:b2:c3:73:20:08:94:
                    d0:70:d7:5b:a2:77:ac:c6:b2:90:e8:25:df:6c:4d:
                    03:d2:e2:04:9d:bd:fa:b4:2e:85:fd:4e:ce:68:d1:
                    80:8c:e2:52:4e:3d:50:d5:13:61:c3:7e:25:2a:74:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:2C:C1:14:06:AD:98:FD:3B:51:78:F2:C4:5D:DF:A6:45:F0:98
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139342e3131302e31322e302f32342d3234203d3e203434303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:b9:9c:7c:d9:70:12:ac:8e:d0:7a:b7:de:b3:22:64:52:
         05:35:99:22:f8:92:17:69:35:38:01:b6:9d:4f:0c:44:64:a0:
         75:3f:de:8d:09:2d:7c:72:bf:c7:8a:1b:4d:b8:31:7a:08:3d:
         19:e7:7c:64:7d:b1:88:f5:5b:e9:b3:90:65:b2:ea:5c:1b:c1:
         3b:e9:cf:fb:87:7c:23:7a:5d:ca:ec:aa:1f:c8:d8:c7:b8:b7:
         4f:58:42:34:df:b4:59:fd:63:7c:e1:be:01:8f:a6:df:09:ed:
         1b:72:20:cf:e1:52:0a:1c:a5:67:25:29:9d:2f:2e:be:58:e6:
         7a:0a:af:59:f8:c5:41:a6:6a:fa:78:ae:8d:61:22:8a:b1:2a:
         5e:14:b2:36:99:80:60:4b:a1:ad:00:f5:15:1c:a2:a2:df:db:
         40:33:2e:a8:3d:0d:f1:40:0f:e1:ec:8a:4f:7d:ca:57:5f:fc:
         40:36:43:b8:1a:33:6f:f6:fa:e1:b9:bf:9e:78:57:18:ad:70:
         55:10:87:c7:8c:cf:e1:5c:9c:d5:64:16:55:04:7e:e9:de:fa:
         ff:c6:20:34:17:15:62:d0:c9:69:6d:0a:8d:22:7d:9c:17:2c:
         60:e7:86:c3:71:fc:74:15:44:35:d4:c3:ad:cb:ac:4d:3b:a2:
         30:01:60:9f
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUM34SQSfnDVGhjJLlmCPz/J6iHfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTExMjkwODE1NDJaFw0yMjExMjgwODIwNDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNFMTc0REYwNkJCNTRDRTE2
RDYwMzI3MkZCNTNCMTA4RUI5QTQyMjVENjg0QkY5MTdEMUE4QkYxMUEzMzIzNDhG
MEU5OTNBOEQ0NzNGQjYwMjAzNDZFMkQ3NTlERTc3MjlDNzA3ODZCMTM3NjdGN0Q4
RTVFRTc3MkRFREVDQkFFRDk3QzBBMTlEQTQxOTQ1REUxOTM5OTc2Nzc2QUZFQUJB
RDNEODIyRDIxNzQ2NkRDM0JBODA0MERCQzI2RDU3NUEyNzFGNDc5NDc1NEFFOUJG
NjJGRTA3ODIzNUJCN0U5OTE4RTkxNEUzNDhCNzA0NkY1Q0M0QjVBNEFGRTVDMkE5
MDcwRkNERUE1RDlFRTYzREQ1RTg1RDgyNEMxMjU2MUI5NzUwMEM4ODI2NjE1Njc4
RjYwNTY5QjczN0NDQjA4QjMwODUwODlERjc0RDUyMUFGNjUwODMyQUI2QTAzRjI1
NEMyRkFDMTM0NkUxNkFENTIxMDhEMjRFRThDMEJCQjQ4NjRFQzc4NjhERUE0QTMy
QzkxOUIyQzM3MzIwMDg5NEQwNzBENzVCQTI3N0FDQzZCMjkwRTgyNURGNkM0RDAz
RDJFMjA0OURCREZBQjQyRTg1RkQ0RUNFNjhEMTgwOENFMjUyNEUzRDUwRDUxMzYx
QzM3RTI1MkE3NDZGNTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw+F03wa7VM4W1gMnL7U7EI65pCJdaEv5F9GovxGjMjSPDpk6jUc/
tgIDRuLXWd53KccHhrE3Z/fY5e53Le3suu2XwKGdpBlF3hk5l2d2r+q609gi0hdG
bcO6gEDbwm1XWicfR5R1Sum/Yv4HgjW7fpkY6RTjSLcEb1zEtaSv5cKpBw/N6l2e
5j3V6F2CTBJWG5dQDIgmYVZ49gVptzfMsIswhQid901SGvZQgyq2oD8lTC+sE0bh
atUhCNJO6MC7tIZOx4aN6koyyRmyw3MgCJTQcNdbonesxrKQ6CXfbE0D0uIEnb36
tC6F/U7OaNGAjOJSTj1Q1RNhw34lKnRvUwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FHXoLMEUBq2Y/TtRePLEXd+mRfCYMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zMTM5MzQyZTMx
MzEzMDJlMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzQzMDM5MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADCbgwwDQYJKoZIhvcNAQELBQADggEBABq8uZx82XASrI7QerfesyJk
UgU1mSL4khdpNTgBtp1PDERkoHU/3o0JLXxyv8eKG024MXoIPRnnfGR9sYj1W+mz
kGWy6lwbwTvpz/uHfCN6Xcrsqh/I2Me4t09YQjTftFn9Y3zhvgGPpt8J7RtyIM/h
UgocpWclKZ0vLr5Y5noKr1n4xUGmavp4ro1hIoqxKl4UsjaZgGBLoa0A9RUcoqLf
20AzLqg9DfFAD+Hsik99yldf/EA2Q7gaM2/2+uG5v554VxitcFUQh8eMz+FcnNVk
FlUEfune+v/GIDQXFWLQyWltCo0ifZwXLGDnhsNx/HQVRDXUw63LrE07ojABYJ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org