Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e20323130393737.roa
File:                     352e3138312e3133342e302f32342d3234203d3e20323130393737.roa (raw, json)
Hash identifier:          dFAK/+SXQ40R47mFHeuOiMl2Jf/pgyN8GrzJ1+gsfn4=
Subject key identifier:   27:2C:A6:44:18:C8:83:E6:E4:9C:D7:E8:1D:5C:14:97:31:E8:DB:30
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       702C4D6EF6B79B1F522ACE8C9C7F4FE88DD6F6DC
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e20323130393737.roa
Signing time:             Sat 01 Jan 2022 13:04:43 +0000
ROA not before:           Sat 01 Jan 2022 12:59:43 +0000
ROA not after:            Sat 31 Dec 2022 13:04:43 +0000
asID:                     210977
IP address blocks:        5.181.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2c:4d:6e:f6:b7:9b:1f:52:2a:ce:8c:9c:7f:4f:e8:8d:d6:f6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan  1 12:59:43 2022 GMT
            Not After : Dec 31 13:04:43 2022 GMT
        Subject: CN=3082010A0282010100D7BCFB079C0DC8DE1F3E7756D5D0F03458908B080F12C4D88D32F0BF1B003D6C82650CFE6B27E71BDEC6304BE7C9157C6ADD9EA937E0C95FF664E0A5D2CC02B4D3E12C5F13FFA266496719C52A77F2CAE11681CC53794F8272E6DDB36B07E87A2B08A3B51E46FF24D089FB676B261F0AF750EF68A30126762BD528AE6CD3E4E4DE913F51ACD98B4E8D3EB60B10F91945C9D9EAB5AC57BEB26D2F96DA2EC4CC2E3C177660745A85C4BC6FCEEBE91AD2FC4E29FA22AC084341CE678D5DD4C25F04382887DA5EC1A31ABFA35692AF709D192BC5ECE99751BCCA2A5C568B4F095823F2D2058A55B4C5EE3A585AE6739A8E28286BDBF46E6543A6B5A33427CCF920690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:fb:07:9c:0d:c8:de:1f:3e:77:56:d5:d0:
                    f0:34:58:90:8b:08:0f:12:c4:d8:8d:32:f0:bf:1b:
                    00:3d:6c:82:65:0c:fe:6b:27:e7:1b:de:c6:30:4b:
                    e7:c9:15:7c:6a:dd:9e:a9:37:e0:c9:5f:f6:64:e0:
                    a5:d2:cc:02:b4:d3:e1:2c:5f:13:ff:a2:66:49:67:
                    19:c5:2a:77:f2:ca:e1:16:81:cc:53:79:4f:82:72:
                    e6:dd:b3:6b:07:e8:7a:2b:08:a3:b5:1e:46:ff:24:
                    d0:89:fb:67:6b:26:1f:0a:f7:50:ef:68:a3:01:26:
                    76:2b:d5:28:ae:6c:d3:e4:e4:de:91:3f:51:ac:d9:
                    8b:4e:8d:3e:b6:0b:10:f9:19:45:c9:d9:ea:b5:ac:
                    57:be:b2:6d:2f:96:da:2e:c4:cc:2e:3c:17:76:60:
                    74:5a:85:c4:bc:6f:ce:eb:e9:1a:d2:fc:4e:29:fa:
                    22:ac:08:43:41:ce:67:8d:5d:d4:c2:5f:04:38:28:
                    87:da:5e:c1:a3:1a:bf:a3:56:92:af:70:9d:19:2b:
                    c5:ec:e9:97:51:bc:ca:2a:5c:56:8b:4f:09:58:23:
                    f2:d2:05:8a:55:b4:c5:ee:3a:58:5a:e6:73:9a:8e:
                    28:28:6b:db:f4:6e:65:43:a6:b5:a3:34:27:cc:f9:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:A6:44:18:C8:83:E6:E4:9C:D7:E8:1D:5C:14:97:31:E8:DB:30
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e20323130393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b2:25:29:b7:44:74:48:eb:6b:8b:c1:cf:89:47:b1:a3:4f:
         1a:fd:83:74:41:fe:ea:17:1b:72:b9:e1:8f:3d:d6:23:80:68:
         b1:3d:5b:6f:c0:b4:76:0b:65:74:ca:05:98:a5:fc:ce:12:e4:
         a0:58:a0:81:d3:7f:12:ef:35:bf:f4:82:ff:19:75:2c:35:f2:
         60:9e:aa:f3:fd:72:d1:58:66:1b:bd:4d:05:14:92:c2:01:e5:
         fc:6b:6b:1b:fb:7a:61:d8:a3:90:6b:55:e0:8b:c3:5d:0c:cf:
         13:5f:41:63:b8:3e:10:f5:d3:c8:0c:84:b1:8b:0e:cf:0d:e7:
         15:d4:2d:78:15:b3:37:22:a6:3a:2c:a9:f9:dc:0e:ee:e4:44:
         6b:4e:9d:b6:cd:d8:fe:1d:fc:26:a2:89:84:b2:62:72:c5:78:
         7d:99:81:11:f9:db:a2:11:4f:1e:cc:f8:58:77:52:04:d3:d3:
         cd:de:8a:7d:83:2e:44:43:15:71:31:4e:1d:ee:53:2e:4e:46:
         e9:28:92:95:26:5f:36:1f:84:80:e2:66:e7:14:af:b3:13:6b:
         5c:b9:6e:b4:a3:9a:a3:ff:bf:8c:40:cb:56:75:15:42:81:65:
         e3:80:6b:5f:2c:d5:81:5e:5f:1e:10:e1:78:fd:23:a9:87:45:
         ef:a3:08:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org