Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136332e302f32342d3234203d3e203332313831.roa
File:                     352e3235322e3136332e302f32342d3234203d3e203332313831.roa (raw, json)
Hash identifier:          n5A9ortMM+Z3szDKowcxJdBsUl1xxFkyZQ2keuDoMiM=
Subject key identifier:   8A:78:4E:40:3F:48:6B:E4:78:C6:38:00:DA:64:E6:7D:A7:01:AF:0C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6AB8C805138B776ADE6CEA352D128DC0708F11FF
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136332e302f32342d3234203d3e203332313831.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     32181
IP address blocks:        5.252.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b8:c8:05:13:8b:77:6a:de:6c:ea:35:2d:12:8d:c0:70:8f:11:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:35:06:29:43:55:e6:d6:b1:b4:41:9e:c3:
                    05:fc:0c:ff:21:44:85:4e:f3:fc:00:6d:77:1d:d2:
                    71:19:ad:a8:7a:82:c8:f3:bc:45:ce:9a:3b:0f:dc:
                    63:50:56:24:1c:54:8a:19:df:1e:8a:0d:37:fe:19:
                    00:98:58:bc:1c:74:df:66:08:e1:46:91:ed:bb:42:
                    50:a6:4d:27:3f:66:05:68:db:6c:36:f2:dc:96:e5:
                    14:83:20:75:18:7b:4b:0d:ab:4e:08:da:88:3b:28:
                    a9:56:7b:89:db:de:3f:04:89:ed:40:56:ed:32:05:
                    c4:aa:49:e3:19:11:ee:56:b0:d0:a6:50:46:fc:f2:
                    a3:68:28:b6:25:b2:5b:78:82:2d:33:88:26:01:74:
                    e9:e5:bf:1a:ea:de:fe:37:4e:8a:a3:fd:cc:85:fa:
                    fd:42:e8:a0:3f:3f:41:83:8e:c1:5d:47:da:30:42:
                    af:23:b4:87:fc:c1:36:82:0b:56:55:ba:8d:ca:3e:
                    63:99:fd:2b:3a:c7:95:9a:08:16:43:66:b6:70:42:
                    55:75:33:5b:25:21:4c:48:de:77:e1:63:34:d0:fd:
                    a2:46:75:6b:f8:31:0a:0d:30:c6:01:a4:4c:ad:fb:
                    cc:84:b7:b5:60:bc:d5:c7:1f:31:d7:b5:2b:86:6b:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:78:4E:40:3F:48:6B:E4:78:C6:38:00:DA:64:E6:7D:A7:01:AF:0C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136332e302f32342d3234203d3e203332313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:56:ff:54:db:54:65:f1:71:13:cd:57:e5:1a:ef:ca:47:c6:
         6d:7d:49:6f:5a:6b:ef:96:47:0c:18:64:de:e0:1b:70:1c:f3:
         a1:a1:6b:30:6b:72:d6:e2:91:35:a2:33:f6:75:cc:0f:7b:b5:
         e2:8c:22:74:a5:6d:20:cf:64:b4:38:55:aa:9b:79:e3:db:9c:
         83:b5:29:76:43:24:ba:00:92:ca:ff:19:b2:1a:f6:6d:7d:98:
         c5:32:e8:88:bc:02:47:ba:db:eb:fd:c5:a8:75:9c:56:e9:44:
         3b:87:f0:b9:1c:d5:d3:74:1b:71:82:c6:6b:81:c6:cc:b3:8b:
         5e:7e:78:16:9b:58:c9:f4:5d:fe:af:23:a7:10:ab:fa:ce:0d:
         56:c2:55:c6:8f:a3:28:98:d1:d2:89:75:83:61:3d:b1:58:66:
         33:cc:8d:f4:3c:78:d8:f2:f0:63:a3:e6:b8:29:1d:b9:f9:34:
         66:1e:9e:8d:c2:75:3a:b6:a8:0c:34:a9:e5:18:ae:e5:5b:aa:
         ab:38:f5:08:da:13:7a:42:0f:8c:e8:3c:a7:66:97:23:0e:ee:
         5d:02:b9:df:09:2e:11:93:8f:47:25:3e:28:db:c6:7f:a1:16:
         21:20:d9:0e:06:46:9f:34:f0:9a:03:a7:e9:d5:be:af:70:83:
         0a:dd:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org