Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e203132383539.roa
File:                     352e3138312e3133342e302f32342d3234203d3e203132383539.roa (raw, json)
Hash identifier:          3y8K8lA1fIXT1TCEQ46FXse8D4rF2p2yi88IA75Nq40=
Subject key identifier:   14:AF:F1:91:EB:AA:80:E0:35:43:76:8C:5A:C6:27:1C:EF:17:44:67
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1F8E088DE1C67C7B797A0A9D3D5FFFB892397C8A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e203132383539.roa
Signing time:             Tue 07 Dec 2021 16:39:25 +0000
ROA not before:           Tue 07 Dec 2021 16:34:25 +0000
ROA not after:            Tue 06 Dec 2022 16:39:25 +0000
asID:                     12859
IP address blocks:        5.181.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8e:08:8d:e1:c6:7c:7b:79:7a:0a:9d:3d:5f:ff:b8:92:39:7c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec  7 16:34:25 2021 GMT
            Not After : Dec  6 16:39:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:3d:fb:3c:e1:67:4e:7f:7f:6a:c5:d5:2a:
                    b3:f0:af:83:20:54:bd:ce:69:1e:fe:dc:0f:b1:56:
                    b6:b8:7c:51:a2:f1:95:7d:b5:17:65:37:ec:63:35:
                    0e:19:32:3e:6d:da:b6:56:45:e0:f5:d5:7c:1a:b1:
                    9c:a2:f1:4c:d3:df:19:2a:e3:08:a2:91:ee:aa:3c:
                    2f:35:65:f9:40:8d:d3:f8:cf:22:35:65:00:c1:81:
                    7c:f5:79:e1:6b:1f:c6:f1:ec:ba:5d:69:f4:6d:9b:
                    d0:fc:e2:bd:06:ce:8d:b5:e1:25:a5:0b:60:98:2b:
                    2e:07:a4:56:87:07:bf:e7:ed:25:bc:ed:ca:ee:39:
                    c1:e8:58:6e:7c:6c:bb:61:ad:84:64:15:7f:28:87:
                    84:91:6b:95:7c:a9:d0:56:66:cb:61:3f:3e:77:43:
                    97:6d:63:06:91:98:c3:62:f0:51:cb:71:23:73:51:
                    cb:d7:d2:d8:4d:4f:30:be:eb:49:85:9c:3b:af:83:
                    cb:4e:4f:c1:5d:a2:26:cf:96:97:56:3b:69:29:c3:
                    ac:ec:dd:dc:fb:c3:ec:23:6f:2c:6e:59:79:a4:a2:
                    52:ed:e1:df:06:b4:a8:93:46:8a:e8:8f:55:d4:db:
                    20:a5:fb:a3:8b:6e:9e:d8:31:6b:3b:f6:c3:47:76:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:F1:91:EB:AA:80:E0:35:43:76:8C:5A:C6:27:1C:EF:17:44:67
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e203132383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:19:08:a2:70:2b:b3:7a:4d:6d:8e:dc:a9:36:35:7c:34:fb:
         b4:5b:dd:82:ac:f5:73:1d:9f:22:eb:1b:55:6b:3c:32:a7:83:
         c3:30:90:ab:a4:ea:98:3b:fc:57:2e:c1:1e:a4:16:ca:0d:2f:
         41:c2:7c:2b:f1:6e:42:8b:ea:3a:65:52:10:0f:12:68:36:72:
         ee:12:0e:e1:66:32:34:65:99:b1:ac:40:48:33:fa:0c:bd:e0:
         6d:42:28:d4:5a:c9:48:6f:5e:2e:c4:32:fd:ab:08:45:28:47:
         7b:12:13:a0:d8:85:cc:45:df:e2:de:2d:b4:8f:e2:ef:b0:e5:
         e8:a6:2a:1e:75:40:85:ee:97:70:4d:6b:63:0b:cb:79:e0:ef:
         3e:10:45:ca:6b:4e:e4:b4:5b:f0:35:c4:41:3d:7e:42:58:8b:
         19:94:96:8a:01:28:ff:5e:b1:a4:22:11:19:1c:a0:e5:68:1e:
         29:1d:07:47:49:7d:68:cb:3b:a6:11:51:09:7c:b9:96:dd:c2:
         fe:c5:99:b5:03:ab:eb:4d:1c:a4:5b:66:1c:b8:25:0f:27:be:
         20:2a:34:5b:e9:4a:ad:e3:40:66:c7:58:2f:d3:96:94:fc:ff:
         d9:ee:a1:05:7a:3a:c3:5d:d0:8a:bb:22:9d:a0:6b:55:23:cc:
         c4:af:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org