Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139342e3131302e31342e302f32342d3234203d3e20323131313933.roa
File:                     3139342e3131302e31342e302f32342d3234203d3e20323131313933.roa (raw, json)
Hash identifier:          9mokVl4GXtlzE7R2BQmBZfyqmt9wY1HinrCM/1UoPZw=
Subject key identifier:   71:9C:2E:B3:E4:82:70:6F:2B:47:46:12:85:EA:E8:AF:59:4A:C2:88
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3265BD11BD7245B24BD78AAAAFB86A92C600B008
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139342e3131302e31342e302f32342d3234203d3e20323131313933.roa
Signing time:             Mon 29 Nov 2021 09:12:51 +0000
ROA not before:           Mon 29 Nov 2021 09:07:51 +0000
ROA not after:            Mon 28 Nov 2022 09:12:51 +0000
asID:                     211193
IP address blocks:        194.110.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:65:bd:11:bd:72:45:b2:4b:d7:8a:aa:af:b8:6a:92:c6:00:b0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 09:07:51 2021 GMT
            Not After : Nov 28 09:12:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:a6:b0:a6:79:1f:91:a6:77:da:ed:6e:d1:
                    74:96:56:0b:48:90:3b:d7:c0:9d:ef:11:ee:b7:47:
                    65:0b:fa:f3:e7:c6:18:21:6b:4c:8e:0a:8f:90:8c:
                    5d:c9:81:a6:f6:7f:d7:ac:0f:c6:45:eb:91:e4:47:
                    0c:13:73:48:47:4e:3e:a0:86:45:29:6b:66:b3:88:
                    64:ed:92:6f:19:2d:d2:64:17:b6:1e:79:e9:dc:7a:
                    62:21:51:14:27:54:c3:bd:ad:4c:bc:9c:69:2f:ef:
                    42:9c:b1:6b:52:f1:2a:7e:0c:c4:93:62:cb:a3:73:
                    6e:9d:bf:22:d6:d0:5d:6a:47:97:fe:6d:82:5e:2f:
                    5b:4e:bc:02:b9:18:57:1f:ff:65:2a:e9:7d:5d:fa:
                    c6:e9:a3:e2:48:be:1d:dd:b4:78:04:8b:c0:72:11:
                    96:56:14:33:43:83:e9:27:ee:49:8d:f7:ab:c8:bf:
                    e5:30:28:f4:96:36:ab:54:5b:fb:1b:52:7e:d1:bd:
                    3e:8d:06:42:72:f1:a0:7a:3e:31:64:56:ff:a1:13:
                    0d:9a:b0:e9:14:c1:66:97:2e:1f:ad:5d:ee:a7:b7:
                    99:6e:88:46:ff:19:ca:f7:3d:c8:f4:00:49:cc:d4:
                    20:6f:73:35:c7:68:79:41:66:36:19:85:94:b2:75:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9C:2E:B3:E4:82:70:6F:2B:47:46:12:85:EA:E8:AF:59:4A:C2:88
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139342e3131302e31342e302f32342d3234203d3e20323131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:05:de:b7:c6:7b:57:ff:eb:ca:18:a0:a4:08:13:2c:ac:d8:
         5c:10:90:26:18:6f:b1:e0:78:af:db:d0:04:f9:d6:c5:1b:ac:
         d7:c3:40:d0:bb:90:f6:74:36:61:60:e5:95:55:5d:f8:c2:6b:
         ed:90:03:5a:52:74:62:9b:35:0f:f8:ba:32:28:77:c2:f5:53:
         a9:cc:54:60:72:7c:e6:c4:f1:46:0d:00:17:b8:84:79:1a:52:
         c4:97:a8:80:b4:24:58:f0:6f:ac:db:59:d9:61:b1:07:63:34:
         f9:03:9c:b1:ef:7e:e0:e8:cc:50:05:03:32:23:14:2c:58:e3:
         1d:26:6e:cb:bf:d4:6c:0e:c6:f7:44:d1:24:17:58:8f:cc:cc:
         84:9d:63:1f:a4:58:8e:16:55:8a:a4:1f:92:2c:91:b0:0e:62:
         77:21:d4:48:06:d4:56:6c:00:3d:71:bf:71:49:4a:40:77:55:
         1f:47:fe:79:f0:6e:07:3f:85:f8:5c:5d:26:2e:a2:89:b2:c8:
         34:b7:c9:ea:c5:5b:38:14:8e:ab:cc:2d:0b:c5:ff:fa:fb:5b:
         57:71:d9:2c:db:50:2e:e6:4c:4e:84:30:51:5f:8a:fa:f3:02:
         7e:37:80:d1:0f:61:d6:57:88:c5:d1:e1:f3:06:67:d2:85:2f:
         8b:48:a3:49
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMmW9Eb1yRbJL14qqr7hqksYAsAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTExMjkwOTA3NTFaFw0yMjExMjgwOTEyNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNDNkE2QjBBNjc5MUY5MUE2
NzdEQUVENkVEMTc0OTY1NjBCNDg5MDNCRDdDMDlERUYxMUVFQjc0NzY1MEJGQUYz
RTdDNjE4MjE2QjRDOEUwQThGOTA4QzVEQzk4MUE2RjY3RkQ3QUMwRkM2NDVFQjkx
RTQ0NzBDMTM3MzQ4NDc0RTNFQTA4NjQ1Mjk2QjY2QjM4ODY0RUQ5MjZGMTkyREQy
NjQxN0I2MUU3OUU5REM3QTYyMjE1MTE0Mjc1NEMzQkRBRDRDQkM5QzY5MkZFRjQy
OUNCMTZCNTJGMTJBN0UwQ0M0OTM2MkNCQTM3MzZFOURCRjIyRDZEMDVENkE0Nzk3
RkU2RDgyNUUyRjVCNEVCQzAyQjkxODU3MUZGRjY1MkFFOTdENURGQUM2RTlBM0Uy
NDhCRTFERERCNDc4MDQ4QkMwNzIxMTk2NTYxNDMzNDM4M0U5MjdFRTQ5OERGN0FC
QzhCRkU1MzAyOEY0OTYzNkFCNTQ1QkZCMUI1MjdFRDFCRDNFOEQwNjQyNzJGMUEw
N0EzRTMxNjQ1NkZGQTExMzBEOUFCMEU5MTRDMTY2OTcyRTFGQUQ1REVFQTdCNzk5
NkU4ODQ2RkYxOUNBRjczREM4RjQwMDQ5Q0NENDIwNkY3MzM1Qzc2ODc5NDE2NjM2
MTk4NTk0QjI3NUU5NzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvMamsKZ5H5Gmd9rtbtF0llYLSJA718Cd7xHut0dlC/rz58YYIWtM
jgqPkIxdyYGm9n/XrA/GReuR5EcME3NIR04+oIZFKWtms4hk7ZJvGS3SZBe2Hnnp
3HpiIVEUJ1TDva1MvJxpL+9CnLFrUvEqfgzEk2LLo3Nunb8i1tBdakeX/m2CXi9b
TrwCuRhXH/9lKul9XfrG6aPiSL4d3bR4BIvAchGWVhQzQ4PpJ+5JjferyL/lMCj0
ljarVFv7G1J+0b0+jQZCcvGgej4xZFb/oRMNmrDpFMFmly4frV3up7eZbohG/xnK
9z3I9ABJzNQgb3M1x2h5QWY2GYWUsnXpdwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FHGcLrPkgnBvK0dGEoXq6K9ZSsKIMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zMTM5MzQyZTMx
MzEzMDJlMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMxMzkzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMJuDjANBgkqhkiG9w0BAQsFAAOCAQEAhgXet8Z7V//ryhigpAgT
LKzYXBCQJhhvseB4r9vQBPnWxRus18NA0LuQ9nQ2YWDllVVd+MJr7ZADWlJ0Yps1
D/i6Mih3wvVTqcxUYHJ85sTxRg0AF7iEeRpSxJeogLQkWPBvrNtZ2WGxB2M0+QOc
se9+4OjMUAUDMiMULFjjHSZuy7/UbA7G90TRJBdYj8zMhJ1jH6RYjhZViqQfkiyR
sA5idyHUSAbUVmwAPXG/cUlKQHdVH0f+efBuBz+F+FxdJi6iibLINLfJ6sVbOBSO
q8wtC8X/+vtbV3HZLNtQLuZMToQwUV+K+vMCfjeA0Q9h1leIxdHh8wZn0oUvi0ij
SQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org