Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS133973.roa
File:                     AS133973.roa (raw, json)
Hash identifier:          SX1idV54DapwiAEt9N/lx1KC2MNbwGFnrwu1iN1cb38=
Subject key identifier:   52:D8:ED:38:26:90:1A:F1:F5:4A:63:78:9D:A8:27:01:AF:29:29:6C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       073486C1F327B6133E96704E4058236002574244
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS133973.roa
Signing time:             Wed 04 May 2022 07:32:36 +0000
ROA not before:           Wed 04 May 2022 07:27:36 +0000
ROA not after:            Wed 03 May 2023 07:32:36 +0000
asID:                     133973
IP address blocks:        181.214.131.0/24 maxlen: 24
                          181.214.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:34:86:c1:f3:27:b6:13:3e:96:70:4e:40:58:23:60:02:57:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: May  4 07:27:36 2022 GMT
            Not After : May  3 07:32:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:93:5d:4e:e0:ae:1b:7a:f6:a9:b5:ef:78:
                    a9:3f:b0:57:25:41:fa:9c:28:b2:fb:f9:c5:f0:31:
                    9e:24:06:71:9d:2a:95:29:ab:17:57:21:ec:ee:b6:
                    af:d3:97:d0:27:4f:31:dc:39:04:50:cd:98:78:b7:
                    d7:13:49:4d:05:26:f4:3b:e3:dc:60:7f:24:ac:e4:
                    b6:98:9e:70:7b:cb:06:6c:48:c1:83:66:fc:06:1a:
                    b8:28:9b:62:10:03:30:42:c6:79:a1:2c:66:6a:a3:
                    83:05:d6:0d:4c:95:f4:13:d5:ea:63:70:1a:b4:35:
                    0e:c5:01:2f:66:c1:d8:d4:d4:04:94:26:f6:fb:6f:
                    e0:40:9d:a6:34:ad:89:60:d2:3b:0c:89:80:3b:fe:
                    eb:7e:fa:36:5f:0b:ff:d1:30:4d:64:16:19:28:34:
                    ed:53:67:62:2e:de:2c:4f:9f:94:57:0f:de:a0:08:
                    5a:e4:7d:16:83:72:f6:2b:96:f4:85:e7:b3:3b:eb:
                    31:ef:02:89:c0:88:c1:46:d1:a7:d3:1f:9c:b3:89:
                    d0:1e:77:b8:27:80:4a:2e:46:bd:c0:b3:fe:d4:00:
                    fd:5c:7f:86:9d:c4:f5:e4:e6:7b:17:7e:81:41:6e:
                    e6:b9:ee:70:6a:e4:da:27:46:f4:1a:d3:be:5e:9c:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D8:ED:38:26:90:1A:F1:F5:4A:63:78:9D:A8:27:01:AF:29:29:6C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS133973.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.131.0/24
                  181.214.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:50:fd:75:54:11:8a:8e:60:33:04:4a:3b:ff:33:9e:89:a6:
         c4:6e:b1:04:a9:99:6a:21:f2:55:25:e7:e3:af:7b:91:45:a4:
         66:4e:19:a9:3f:9a:b4:50:95:6b:07:9b:4b:31:21:7b:c2:76:
         ec:bb:69:a6:63:a5:72:f0:2a:4c:96:99:b9:08:2a:e1:42:6e:
         33:e5:02:d5:29:a4:e0:ab:35:04:de:dc:b8:4f:4a:53:b9:1b:
         6c:ff:3f:c5:58:ff:fb:8e:64:98:ef:e4:43:84:09:94:2d:06:
         13:a1:01:37:37:af:69:5d:0f:fb:9e:26:1b:8d:b7:9a:8f:c3:
         8f:9f:20:a7:c3:c2:7a:3d:e5:23:ee:f8:2b:42:68:2a:e4:00:
         5d:ff:8f:de:df:cf:eb:8f:2d:0f:16:14:0b:9d:27:59:44:2b:
         e0:3e:b6:f7:9f:a4:45:f8:cd:09:5a:84:44:26:23:f3:55:e2:
         8b:c8:0a:36:b7:1d:30:ca:ce:14:23:03:35:cc:9a:01:13:67:
         17:e7:21:07:40:e9:89:ee:04:43:98:8c:b5:67:59:c9:ff:97:
         a0:50:ea:b5:fb:62:95:38:6d:f9:9e:c3:b9:d1:9a:01:8c:6d:
         1b:b1:42:fb:00:de:b9:8b:f6:b7:bc:9d:4a:68:07:88:b9:ba:
         ee:5b:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org