Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38312e302f32342d3234203d3e203230383630.roa
File:                     352e3235322e38312e302f32342d3234203d3e203230383630.roa (raw, json)
Hash identifier:          uSuFg3aJJqp0MmYGFi3eonQCcEmlAiwHVIoffdAwjYs=
Subject key identifier:   19:56:AE:7D:5C:5F:69:2D:12:D0:3C:CA:F8:A7:8B:07:34:96:7D:C7
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1F480DBA5D655E3B444375C5D6268ED8A89FBE33
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38312e302f32342d3234203d3e203230383630.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     20860
IP address blocks:        5.252.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:48:0d:ba:5d:65:5e:3b:44:43:75:c5:d6:26:8e:d8:a8:9f:be:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ec:04:2b:94:10:93:41:02:41:1c:11:d8:5d:
                    c3:53:89:82:31:3c:da:b4:e3:bd:ee:fe:97:36:ba:
                    d0:cd:b8:ca:f7:3e:97:60:a0:7f:a8:7e:4a:e9:48:
                    83:03:82:b0:66:84:95:12:29:44:c9:9a:12:06:9d:
                    cb:10:04:96:96:c5:4a:49:c2:3e:cb:e7:c7:05:9a:
                    e8:41:c1:33:2a:24:9e:17:c3:61:97:f5:af:a3:26:
                    30:56:46:12:18:b2:f6:a6:c2:58:65:9c:ba:bf:20:
                    38:8f:69:c7:c2:61:ec:e2:b9:17:fa:0d:5a:f5:54:
                    67:2b:a0:8f:32:f0:e7:40:04:e2:15:8b:9c:ae:de:
                    e4:7b:1e:fd:26:79:cf:8c:9a:bf:de:2d:bf:fb:f2:
                    dd:57:54:7d:43:68:de:54:51:39:8f:82:26:7e:4b:
                    26:10:a5:71:f3:fd:7b:0b:c3:3f:b7:da:75:30:08:
                    29:34:e4:37:bb:fc:72:27:bc:1b:d1:fc:db:35:23:
                    90:f4:6c:5a:6d:8b:4f:00:01:30:62:cd:26:14:67:
                    b0:d4:a6:01:e0:b3:d1:52:cb:f1:b5:9d:7b:93:ba:
                    47:df:6c:5b:4c:15:36:5a:f7:ac:57:86:25:ff:c2:
                    bc:f8:f6:27:f9:7d:52:5f:50:36:7a:65:8d:52:35:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:AE:7D:5C:5F:69:2D:12:D0:3C:CA:F8:A7:8B:07:34:96:7D:C7
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38312e302f32342d3234203d3e203230383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:38:da:f7:a3:3c:6d:88:36:6c:09:5f:31:81:73:6e:69:
         1c:18:d7:8d:b6:23:f6:7a:64:f6:1f:3f:1f:c8:b6:ed:93:90:
         37:95:80:b8:4a:db:b8:e9:3e:0c:52:b1:48:00:0a:5e:91:a4:
         7e:7a:c7:16:7b:86:c2:a0:01:d4:91:4a:3b:9c:37:69:03:aa:
         c8:e3:bc:cf:e9:5b:40:4d:b1:dc:35:8a:ed:85:b7:70:17:1a:
         62:87:28:27:73:04:ae:49:30:de:7d:11:62:02:95:94:2b:d8:
         db:7d:be:e4:ee:3c:6e:03:fb:c5:00:78:0a:37:8e:a4:ce:05:
         7c:ba:93:31:bb:0e:53:34:14:5a:7d:1d:b8:ce:cc:ef:f3:6b:
         f9:d9:91:24:2d:0e:58:cc:fa:fa:aa:35:3c:c5:18:f1:63:73:
         ba:30:2b:8a:85:26:22:69:a2:d3:32:ce:7b:3f:a3:9b:3e:b4:
         eb:b3:a6:c2:c1:ba:34:8b:68:61:80:5d:7a:e0:82:13:6f:ce:
         51:59:d0:05:84:c4:3a:74:fb:f4:6f:27:47:33:20:fd:d8:ca:
         9f:22:50:ef:5f:40:89:61:92:33:1c:fa:e0:d7:8b:82:ec:81:
         39:ec:14:48:c4:f4:42:8e:6b:55:14:5e:09:03:2b:65:2b:7c:
         a0:24:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org