Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3131312e302f32342d3234203d3e203430363736.roa
File:                     352e3138322e3131312e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          XPxfstQBhADUG04WHuRLPNFxGOYRTpJS/kxT9AecFdI=
Subject key identifier:   07:61:49:F7:70:8F:E4:B5:43:13:D4:E6:C1:D9:55:32:DD:53:6A:0F
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       33FAF17D3FD5B5E301FAEAEADA6D9A09292E899A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3131312e302f32342d3234203d3e203430363736.roa
Signing time:             Wed 26 Jan 2022 21:52:30 +0000
ROA not before:           Wed 26 Jan 2022 21:47:30 +0000
ROA not after:            Wed 25 Jan 2023 21:52:30 +0000
asID:                     40676
IP address blocks:        5.182.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fa:f1:7d:3f:d5:b5:e3:01:fa:ea:ea:da:6d:9a:09:29:2e:89:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan 26 21:47:30 2022 GMT
            Not After : Jan 25 21:52:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:ca:4e:26:11:98:cb:1a:58:91:dc:58:62:
                    17:40:c8:98:1a:7f:a5:62:d6:8c:18:a9:6b:f7:af:
                    02:96:28:4b:b5:f0:79:5e:10:1a:59:32:36:43:63:
                    e0:a4:c7:20:ae:36:eb:d1:3c:3e:a5:d4:95:f9:a2:
                    88:28:00:06:72:39:d8:df:c8:23:fb:40:e3:8f:ce:
                    cd:aa:49:f1:1f:76:a1:6d:4d:ae:dd:7d:70:6a:9c:
                    fd:84:4a:04:74:f4:34:4b:77:8a:93:4f:b5:4d:aa:
                    41:56:ec:c6:f0:aa:63:88:b5:c9:ed:8f:7c:4e:66:
                    34:33:45:e5:d3:59:37:56:61:b1:77:83:9e:71:77:
                    c8:9a:5a:79:89:f1:8e:f5:7a:d1:cf:da:c2:0c:e2:
                    95:79:51:53:6b:a2:6a:cc:8b:9c:fe:da:bc:80:3a:
                    02:d3:ef:e5:34:69:ae:6b:fa:9f:98:f4:bf:f9:31:
                    cc:2e:58:5f:c6:42:4e:8c:0d:a0:b6:68:47:49:81:
                    0f:fe:c1:03:ac:f4:70:4c:3d:ae:2c:78:74:90:68:
                    4d:48:37:f1:a6:3c:fe:ef:0e:30:a1:e4:b0:0a:4b:
                    af:3a:d0:0f:0e:c6:35:ba:39:ac:1c:48:48:c2:af:
                    83:5f:0a:e6:6e:7c:c9:6b:8b:8e:c7:4d:d6:a1:0f:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:49:F7:70:8F:E4:B5:43:13:D4:E6:C1:D9:55:32:DD:53:6A:0F
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3131312e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:79:69:60:ec:3e:02:9e:94:dd:3e:48:08:7f:c5:78:25:
         4e:75:25:d5:65:bc:b2:75:bd:d3:04:f8:f3:bf:e2:0e:02:4c:
         7b:8e:31:2a:a6:7b:1a:18:2f:f5:a0:e2:88:2f:a9:5f:03:9a:
         f2:be:eb:8a:33:74:3b:6e:5c:b8:7e:c9:36:fb:5d:ac:a7:82:
         a0:c8:3d:f5:18:03:eb:88:c1:b0:49:a6:e7:af:88:92:94:2c:
         b4:38:6e:8c:f4:c6:fd:53:c5:ec:5c:f6:5a:ce:51:e1:f8:e9:
         3b:02:9a:bd:b3:9a:5c:ef:4d:b6:f5:88:5a:f1:b3:57:a4:fc:
         40:17:26:7d:b7:f7:44:c6:fe:71:4b:3a:40:d7:f5:da:f0:47:
         9e:3d:6f:f8:b0:bc:ba:6a:4f:ba:58:0a:13:1f:62:5c:3b:79:
         46:69:20:ce:93:51:de:61:e0:f0:41:77:a1:32:aa:73:fb:64:
         07:df:56:42:79:19:c1:89:3f:d6:6c:eb:f5:3a:f4:29:fe:75:
         e2:d5:a3:21:fb:d3:28:c8:1f:f5:f9:ed:6e:57:5f:da:4b:bc:
         e5:51:c1:3c:a4:6c:fd:43:9c:5a:23:49:e5:65:84:dc:b4:42:
         9e:d7:8d:1e:a8:6c:2e:23:52:fb:7b:91:14:3b:8b:cb:74:2f:
         3e:09:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org