Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3130382e302f32342d3234203d3e20323132323338.roa
File:                     352e3138322e3130382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          btgtz70pjK4SNGghHWpQvd8XRPtqXDl0NitrwV+yNKE=
Subject key identifier:   A5:1D:D1:90:1F:9D:52:74:07:9E:62:F8:47:AE:41:6A:60:8F:33:33
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4C07586C681FB66E4CF349B7C2040D023521C44E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3130382e302f32342d3234203d3e20323132323338.roa
Signing time:             Wed 08 Dec 2021 19:57:37 +0000
ROA not before:           Wed 08 Dec 2021 19:52:37 +0000
ROA not after:            Wed 07 Dec 2022 19:57:37 +0000
asID:                     212238
IP address blocks:        5.182.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:07:58:6c:68:1f:b6:6e:4c:f3:49:b7:c2:04:0d:02:35:21:c4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec  8 19:52:37 2021 GMT
            Not After : Dec  7 19:57:37 2022 GMT
        Subject: CN=3082010A0282010100CAAFF0C39B9AA9018EDBCE1124DCAF9280AB0004FA805C97543D9A1B687244C0297AE5101D2A92EBDDE9A8FF93F75384068ADF5B8B879C8E56A80951E2B771B8F9612379A9D593B1E1B6D997579C52B53F8E01451FB465D93EBC7DAF2B0768BEA2827B64A94630196C89934E3DBC978919DEB0B849033A3180FC920B795AC572A672737B9EC162F1A15CE19E07E089A0DFB88786469BD8592F984902832C2D4B214C31CEFE89FE705AFDA0F7BBCFC6E7453C7949771C3556FD0CDC02682AB41F5446C2A1F24A85C667CF394306AF1D7A3FD2ABB18A6367626BCA84C30E538D8601A18F6F3A38BE8D886B24A08525E081442B9264F7F087E51E4A97DA8345AD6F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:f0:c3:9b:9a:a9:01:8e:db:ce:11:24:dc:
                    af:92:80:ab:00:04:fa:80:5c:97:54:3d:9a:1b:68:
                    72:44:c0:29:7a:e5:10:1d:2a:92:eb:dd:e9:a8:ff:
                    93:f7:53:84:06:8a:df:5b:8b:87:9c:8e:56:a8:09:
                    51:e2:b7:71:b8:f9:61:23:79:a9:d5:93:b1:e1:b6:
                    d9:97:57:9c:52:b5:3f:8e:01:45:1f:b4:65:d9:3e:
                    bc:7d:af:2b:07:68:be:a2:82:7b:64:a9:46:30:19:
                    6c:89:93:4e:3d:bc:97:89:19:de:b0:b8:49:03:3a:
                    31:80:fc:92:0b:79:5a:c5:72:a6:72:73:7b:9e:c1:
                    62:f1:a1:5c:e1:9e:07:e0:89:a0:df:b8:87:86:46:
                    9b:d8:59:2f:98:49:02:83:2c:2d:4b:21:4c:31:ce:
                    fe:89:fe:70:5a:fd:a0:f7:bb:cf:c6:e7:45:3c:79:
                    49:77:1c:35:56:fd:0c:dc:02:68:2a:b4:1f:54:46:
                    c2:a1:f2:4a:85:c6:67:cf:39:43:06:af:1d:7a:3f:
                    d2:ab:b1:8a:63:67:62:6b:ca:84:c3:0e:53:8d:86:
                    01:a1:8f:6f:3a:38:be:8d:88:6b:24:a0:85:25:e0:
                    81:44:2b:92:64:f7:f0:87:e5:1e:4a:97:da:83:45:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1D:D1:90:1F:9D:52:74:07:9E:62:F8:47:AE:41:6A:60:8F:33:33
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3130382e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:25:47:ce:bb:bc:bd:2d:d3:b7:97:bb:93:23:b5:f9:b1:
         90:eb:df:b1:92:70:95:09:01:96:55:92:31:7a:4e:e6:45:5c:
         69:61:e9:5c:23:dd:ed:03:3b:e9:e9:7a:9f:e4:59:b1:b3:aa:
         2b:e6:09:6f:0f:61:0d:de:be:45:e7:22:40:ce:fc:b8:6d:72:
         09:3a:4c:73:d2:b0:7b:ce:91:04:ac:ab:92:50:71:a2:ee:f7:
         7c:27:cd:0c:d8:54:b1:1a:e7:7e:b1:12:fb:56:f4:99:ab:11:
         38:07:cc:be:57:17:99:06:1f:eb:f4:ae:08:d5:13:a7:c6:b3:
         38:6d:3c:e4:73:e9:08:a1:b6:49:d3:ff:10:22:e2:eb:37:39:
         95:fa:8a:83:93:e3:0f:22:a1:33:ba:3f:80:a6:15:2e:64:25:
         af:f2:58:4b:b8:a7:32:fd:3f:51:f6:a3:70:53:86:fd:d9:37:
         14:f8:33:d5:e6:a7:d9:5e:d9:19:72:59:0d:60:b9:1e:84:04:
         43:bb:70:ee:45:fc:bd:0a:d7:19:d6:9e:79:b0:61:eb:ce:7f:
         2e:9a:5d:eb:6c:d7:01:6c:e2:4e:9b:5d:f9:3d:30:ec:cf:59:
         e8:5e:7a:7c:97:d8:78:6d:94:d6:cf:86:c4:76:10:97:6d:4e:
         b5:4b:50:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org