Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/39322e3131392e33322e302f32342d3234203d3e203631333137.roa
File:                     39322e3131392e33322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Ll5pXelH4bRdB/BNv2Ak76r3M3buDqXbRKYiq5pHVLY=
Subject key identifier:   F4:56:6D:1E:88:3F:E7:C5:22:0E:F9:4B:40:CE:39:4F:1C:94:FA:DE
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       78ABAD305FA868914C9C5DE1F0EA869EE9E2EC86
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/39322e3131392e33322e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 04 Jan 2022 14:22:38 +0000
ROA not before:           Tue 04 Jan 2022 14:17:38 +0000
ROA not after:            Tue 03 Jan 2023 14:22:38 +0000
asID:                     61317
IP address blocks:        92.119.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ab:ad:30:5f:a8:68:91:4c:9c:5d:e1:f0:ea:86:9e:e9:e2:ec:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan  4 14:17:38 2022 GMT
            Not After : Jan  3 14:22:38 2023 GMT
        Subject: CN=3082010A0282010100CB9E9D23B106E3E96DEC186F6B770E4C1D4C301422A23656A53B440C06987C8C2CD496F2209435035E143FF97BAE8E9C8AE440645171EB2A4295AAB82421563365CCEA7BEB93036671082FE2389497B5BD97DB4FDADFBEC9E6C8E5AC02DF11AC0A9B980B82639EDF764F242866821E9817F4B6A5B5CA5FEE8565D5F0EE96D85F8742FDE6996E517F2F6ADE43A76A532621C0CDA7334ACF2FE31A8B16D3BF40EEB9E43CAC90A93BEC03791B2DADB3854229FD7281BEBBB368F2A17D26FBF44043B296DFF79B5CBB2301D095859DE896D39164C06F4844C87068D600520AE996F0D0C2BCB13C9AE228562D8C651F7CF7296592A14927D2BE9C57BAA9E0B79D39430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:9d:23:b1:06:e3:e9:6d:ec:18:6f:6b:77:
                    0e:4c:1d:4c:30:14:22:a2:36:56:a5:3b:44:0c:06:
                    98:7c:8c:2c:d4:96:f2:20:94:35:03:5e:14:3f:f9:
                    7b:ae:8e:9c:8a:e4:40:64:51:71:eb:2a:42:95:aa:
                    b8:24:21:56:33:65:cc:ea:7b:eb:93:03:66:71:08:
                    2f:e2:38:94:97:b5:bd:97:db:4f:da:df:be:c9:e6:
                    c8:e5:ac:02:df:11:ac:0a:9b:98:0b:82:63:9e:df:
                    76:4f:24:28:66:82:1e:98:17:f4:b6:a5:b5:ca:5f:
                    ee:85:65:d5:f0:ee:96:d8:5f:87:42:fd:e6:99:6e:
                    51:7f:2f:6a:de:43:a7:6a:53:26:21:c0:cd:a7:33:
                    4a:cf:2f:e3:1a:8b:16:d3:bf:40:ee:b9:e4:3c:ac:
                    90:a9:3b:ec:03:79:1b:2d:ad:b3:85:42:29:fd:72:
                    81:be:bb:b3:68:f2:a1:7d:26:fb:f4:40:43:b2:96:
                    df:f7:9b:5c:bb:23:01:d0:95:85:9d:e8:96:d3:91:
                    64:c0:6f:48:44:c8:70:68:d6:00:52:0a:e9:96:f0:
                    d0:c2:bc:b1:3c:9a:e2:28:56:2d:8c:65:1f:7c:f7:
                    29:65:92:a1:49:27:d2:be:9c:57:ba:a9:e0:b7:9d:
                    39:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:56:6D:1E:88:3F:E7:C5:22:0E:F9:4B:40:CE:39:4F:1C:94:FA:DE
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/39322e3131392e33322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:8f:1f:7e:ca:9b:86:2a:1c:8a:a8:df:d0:13:09:1a:88:
         52:69:9b:75:8a:f2:83:74:1d:29:76:04:31:2e:3b:8e:23:ca:
         a9:a0:e3:11:a0:37:1d:b3:74:1d:da:37:e3:6a:02:86:38:d6:
         6a:3f:1e:7b:00:bc:5f:de:a3:6b:9b:98:34:70:6b:84:2d:50:
         9f:89:3f:57:4c:6a:ac:e3:c0:af:34:c5:44:3a:d0:68:9c:99:
         c6:c8:46:bc:fa:cd:29:c7:6e:02:bc:db:e6:f5:b3:ca:95:e7:
         38:06:80:28:c6:27:a5:44:a4:80:b3:3f:68:f1:af:5b:f2:b5:
         3c:5f:2d:9c:be:ec:77:31:9c:34:95:ed:d8:7f:f8:92:ee:4b:
         bb:6f:46:2f:f2:96:41:a5:db:6e:f8:fe:0a:1b:c8:6a:25:28:
         08:1a:54:b3:e5:64:d1:25:fe:d6:8a:a2:a0:40:ce:0c:c1:e9:
         a5:39:32:14:78:b9:49:c0:d0:f9:15:97:6a:28:3d:4b:91:94:
         34:79:3f:62:32:21:1d:5f:a2:a7:91:00:13:18:15:02:cc:4c:
         74:1a:ab:1d:44:1a:59:df:3c:0e:86:86:f2:a4:44:6e:16:c4:
         78:ac:b5:1a:02:34:41:4d:3f:7a:93:0e:f4:c9:ca:ff:31:8a:
         fb:57:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org