Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a636530343a313a3a2f34382d3438203d3e2039303039.roa
File:                     326130613a636530343a313a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          giUGNxmr6GSw06S/MIWRCMsDb+JYBsrasXuZiSZQ9Yo=
Subject key identifier:   92:31:48:05:1E:75:0B:EF:20:E6:7C:D6:99:72:2B:C7:58:2B:C9:32
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       367465CB3538E21CE24D609E638BB8984EFDBB2F
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a636530343a313a3a2f34382d3438203d3e2039303039.roa
Signing time:             Mon 29 Nov 2021 08:24:30 +0000
ROA not before:           Mon 29 Nov 2021 08:19:30 +0000
ROA not after:            Mon 28 Nov 2022 08:24:30 +0000
asID:                     9009
IP address blocks:        2a0a:ce04:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:74:65:cb:35:38:e2:1c:e2:4d:60:9e:63:8b:b8:98:4e:fd:bb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 08:19:30 2021 GMT
            Not After : Nov 28 08:24:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:9c:27:b1:a6:df:12:64:66:30:f7:6a:29:
                    bd:40:bf:c8:ff:f2:55:f6:4c:62:25:54:80:4f:5b:
                    8c:87:a9:c9:b9:7f:f5:e7:51:a8:ba:b1:83:2f:c7:
                    33:f3:34:ed:8c:f0:ba:c0:4f:b4:cc:ae:ac:d5:96:
                    6a:5f:42:04:63:ef:8a:62:a6:a9:85:0b:d8:4d:b3:
                    b4:a5:15:8c:e1:7e:b7:0a:75:35:18:23:dd:07:1b:
                    1b:7f:cb:05:c5:01:d6:f2:1c:dd:8e:54:ac:51:42:
                    f5:96:41:c3:86:bd:32:a5:0a:88:a8:a8:17:a2:77:
                    15:b6:4b:2a:ed:64:27:8e:d6:5c:18:17:35:ba:6c:
                    be:bc:6a:40:13:fe:7c:7b:71:df:a5:f9:8b:b9:44:
                    98:32:fd:f5:40:bc:27:a9:cd:f5:5e:7e:ee:40:09:
                    68:af:5a:29:d8:54:57:cc:0c:a3:17:7f:9b:3a:73:
                    63:eb:6b:03:a8:51:2a:e0:24:5e:e3:27:92:d3:d8:
                    0d:b0:a6:1f:79:0c:3d:bb:9c:5b:8c:41:e6:a9:2d:
                    32:86:92:f1:ab:17:32:cb:4c:9b:a2:dd:c4:12:20:
                    5a:e8:54:5a:88:58:dd:09:b7:08:89:b3:97:5b:bb:
                    e9:62:a9:d1:00:9b:be:ae:3f:bb:72:35:92:23:9b:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:48:05:1E:75:0B:EF:20:E6:7C:D6:99:72:2B:C7:58:2B:C9:32
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a636530343a313a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:ce04:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:1b:88:33:3b:94:37:53:f7:62:62:c8:1d:53:53:f5:0b:
         ec:fa:dc:1d:64:1e:6f:fd:cf:37:a6:53:85:6b:33:04:aa:86:
         f2:96:a6:ad:3f:49:c1:c0:f1:85:86:a5:17:e9:6b:09:9b:a8:
         d7:27:8a:f9:6b:96:cf:bd:86:cb:0f:04:9e:e9:10:8a:74:ac:
         43:f0:2e:1c:65:24:65:b5:91:03:5a:39:1d:ee:14:d0:aa:4f:
         e5:01:7d:89:4c:1e:6f:4d:12:ed:a4:be:d0:00:57:f9:25:96:
         bd:3e:91:d9:4a:72:7c:9f:3d:92:06:2a:8d:8b:98:5e:72:7d:
         34:e2:f7:3a:5b:34:c9:14:15:0c:3e:59:0d:73:3e:b0:22:c6:
         30:db:45:4c:69:45:b4:75:b7:a7:90:fc:ce:bb:79:79:34:df:
         0c:a4:b5:1f:af:94:59:4b:6b:62:7a:80:73:0a:a9:67:4f:7e:
         d7:1a:9b:59:c9:71:a7:87:c4:b7:db:ac:fd:26:88:28:79:d4:
         67:f5:e7:bb:a4:2f:b8:33:88:90:38:97:7d:35:3b:f2:56:e9:
         84:71:9a:ab:7f:94:5e:0a:d3:e0:33:3c:90:85:ca:fa:9c:ac:
         28:d3:dd:a5:3c:34:92:72:b4:db:c0:83:1a:01:a0:69:07:5e:
         0e:48:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org