Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37332e302f32342d3234203d3e20323039313831.roa
File:                     38352e3230382e37332e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier:          f3ZrgWolX016WSTtYPVpuhC59wLBwQ1GSgZ12bbin4w=
Subject key identifier:   3F:63:39:B7:F3:77:E2:F8:8F:00:D4:92:E8:27:7C:7A:D6:4C:A1:A6
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       266A9394495741004DABA18AAB75F56293FC0DA9
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37332e302f32342d3234203d3e20323039313831.roa
Signing time:             Mon 29 Nov 2021 08:03:43 +0000
ROA not before:           Mon 29 Nov 2021 07:58:43 +0000
ROA not after:            Mon 28 Nov 2022 08:03:43 +0000
asID:                     209181
IP address blocks:        85.208.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6a:93:94:49:57:41:00:4d:ab:a1:8a:ab:75:f5:62:93:fc:0d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:43 2021 GMT
            Not After : Nov 28 08:03:43 2022 GMT
        Subject: CN=3082010A0282010100A376D17B6AF8760957309343454C8307BCF2806F6DF3F24D968F75AA64F99CD9E1950C6D03C9A48C948F03126B4D68AC5DBE2DB8F97D5C59B4559A623A69C45BD79A8AECE164886A9FE12B102E767AEE8FB725F1B80A4AC7E07D72429832CD8581183A4F8505F725409DD7FF59B81ADE0D8C3D4B55BD3BD18CC300D8B8F54CE5D9637A463FCF89A0756BA96A88065981076A71F9DAA8BAB9B59E088501206E41CE66680B5978024D0F2EBBFB4102ED396E13808C6FB155BEF7465C3BDF0D1871564ADE33A4E4059735D0B4D6C097C72B86036F4586E8A66C3688B432529B49C33FD01C0D58FCAEF5210142B69C70BD355A941967204AA7E2DF65A5EC7FDB1FC30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:d1:7b:6a:f8:76:09:57:30:93:43:45:4c:
                    83:07:bc:f2:80:6f:6d:f3:f2:4d:96:8f:75:aa:64:
                    f9:9c:d9:e1:95:0c:6d:03:c9:a4:8c:94:8f:03:12:
                    6b:4d:68:ac:5d:be:2d:b8:f9:7d:5c:59:b4:55:9a:
                    62:3a:69:c4:5b:d7:9a:8a:ec:e1:64:88:6a:9f:e1:
                    2b:10:2e:76:7a:ee:8f:b7:25:f1:b8:0a:4a:c7:e0:
                    7d:72:42:98:32:cd:85:81:18:3a:4f:85:05:f7:25:
                    40:9d:d7:ff:59:b8:1a:de:0d:8c:3d:4b:55:bd:3b:
                    d1:8c:c3:00:d8:b8:f5:4c:e5:d9:63:7a:46:3f:cf:
                    89:a0:75:6b:a9:6a:88:06:59:81:07:6a:71:f9:da:
                    a8:ba:b9:b5:9e:08:85:01:20:6e:41:ce:66:68:0b:
                    59:78:02:4d:0f:2e:bb:fb:41:02:ed:39:6e:13:80:
                    8c:6f:b1:55:be:f7:46:5c:3b:df:0d:18:71:56:4a:
                    de:33:a4:e4:05:97:35:d0:b4:d6:c0:97:c7:2b:86:
                    03:6f:45:86:e8:a6:6c:36:88:b4:32:52:9b:49:c3:
                    3f:d0:1c:0d:58:fc:ae:f5:21:01:42:b6:9c:70:bd:
                    35:5a:94:19:67:20:4a:a7:e2:df:65:a5:ec:7f:db:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:63:39:B7:F3:77:E2:F8:8F:00:D4:92:E8:27:7C:7A:D6:4C:A1:A6
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37332e302f32342d3234203d3e20323039313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:81:74:7a:97:db:b2:88:8d:e0:79:5c:67:d3:31:a2:61:88:
         12:d7:dc:e3:40:8b:5b:5b:da:53:bc:20:73:20:86:3b:c7:01:
         37:44:1f:eb:f2:c4:8a:6a:53:5d:bb:16:89:14:7c:be:7b:44:
         d4:e8:fe:18:32:c4:c7:8b:23:e4:e9:4e:2f:8a:16:93:48:d7:
         7e:12:50:bd:e5:1b:2d:76:43:7e:4f:4a:ac:83:33:5d:38:0e:
         5f:ac:c8:65:fa:1f:b7:16:29:84:c9:2f:f7:a2:13:93:e8:31:
         ad:16:5c:13:20:b0:ee:d1:d0:c6:4c:27:9b:b0:c3:10:89:77:
         d3:9a:bb:c8:42:16:13:75:24:ff:26:8b:3e:94:dc:a9:fd:cb:
         a3:79:08:2a:92:b8:4d:3a:aa:6b:96:84:69:9a:21:11:d7:da:
         a6:7d:02:93:68:52:1e:62:fb:95:1c:6e:16:b4:38:98:5b:41:
         c9:f0:14:51:d5:07:32:7c:c5:e1:24:af:5a:f7:81:5d:54:19:
         66:f3:6d:84:b0:79:be:51:02:fc:f1:3f:50:0e:f3:ec:e5:1a:
         2e:b6:42:1b:8f:85:ba:b0:b0:c5:76:9a:55:96:4a:9c:ff:48:
         3f:6d:a8:98:34:d8:bf:37:bc:f4:f8:dc:c9:fb:19:b6:34:39:
         c6:86:83:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org