Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS206074.roa
File:                     AS206074.roa (raw, json)
Hash identifier:          034iRfiIjW32meJltRVqV95tfors+g/Qyoe+VcbNJHo=
Subject key identifier:   EA:F8:84:40:48:48:18:71:25:95:9F:79:5D:5B:4D:07:DE:14:04:4A
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4E2FC9EBA64636D3B898D0EBB05337A81B7B8058
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS206074.roa
Signing time:             Wed 09 Mar 2022 13:37:40 +0000
ROA not before:           Wed 09 Mar 2022 13:32:40 +0000
ROA not after:            Wed 08 Mar 2023 13:37:40 +0000
asID:                     206074
IP address blocks:        2a0a:4e83:120::/48 maxlen: 48
                          2a0a:4e83:f24::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2f:c9:eb:a6:46:36:d3:b8:98:d0:eb:b0:53:37:a8:1b:7b:80:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:40 2022 GMT
            Not After : Mar  8 13:37:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:c7:88:0e:a7:05:6a:67:7e:b7:3b:40:59:
                    cc:21:63:f9:de:a5:0f:d7:79:cb:21:5e:4b:0f:30:
                    29:e8:86:b6:cd:bf:db:e4:5b:c5:99:2b:de:90:fa:
                    b3:5b:5e:90:ad:de:9f:ef:d7:6f:a9:23:10:be:fa:
                    85:c1:73:5c:35:a4:44:67:47:b5:96:8a:73:38:97:
                    f7:d6:b7:cd:5c:d5:6c:9e:0a:b1:b3:66:bc:f0:4b:
                    98:db:5a:e1:69:4f:ed:30:85:c7:45:e5:5e:26:fe:
                    f9:54:e8:7d:be:0f:b2:6b:7f:00:7c:21:49:da:ac:
                    38:46:ef:97:f7:cb:7e:bf:dc:06:ee:f8:a8:6a:49:
                    07:52:cd:a7:be:19:b1:7e:ca:c3:70:ac:ea:19:aa:
                    e9:04:37:32:92:9e:12:eb:73:55:6f:17:41:df:e0:
                    64:ac:c5:5c:8b:b7:ce:0c:14:c9:84:53:7d:50:c4:
                    26:d6:ab:90:24:e7:b8:64:b9:37:d4:94:05:ce:0c:
                    da:0e:fc:45:0d:2d:0e:1b:b8:e2:24:38:92:19:7d:
                    23:b2:6a:f7:22:35:5b:4c:57:25:65:97:39:23:93:
                    ec:a0:d0:dd:b7:00:a6:8f:00:74:05:8f:76:a0:35:
                    88:b4:d4:ac:96:e9:9e:c1:b6:0e:27:12:46:db:46:
                    ae:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:84:40:48:48:18:71:25:95:9F:79:5D:5B:4D:07:DE:14:04:4A
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS206074.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:4e83:120::/48
                  2a0a:4e83:f24::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:92:5e:70:65:a0:86:02:31:d3:13:26:62:b2:1f:d6:f6:92:
         84:23:6b:fd:1d:cd:10:e4:62:33:e7:27:fe:2d:a2:47:50:8b:
         fb:af:ec:c0:62:ab:d5:b6:c4:18:5d:80:78:20:3f:f4:49:49:
         02:fe:98:e2:72:c1:5b:3b:a4:cd:4d:9e:d4:2a:13:ea:40:bc:
         a4:b8:78:8d:7e:cd:59:5d:11:00:0d:33:f2:c9:00:82:b4:6a:
         e5:56:ca:34:21:ae:8f:ba:4b:d6:8e:be:fd:4c:36:73:4d:cb:
         cd:6a:4b:40:53:39:04:8a:d0:e7:13:e1:45:68:d0:28:ba:ab:
         cd:55:6f:69:fb:85:a4:85:9d:c4:ab:28:36:4b:ff:e0:4b:09:
         07:8e:78:87:06:22:01:14:e1:0d:65:81:2c:43:b7:c8:a5:b0:
         f1:b7:02:5d:42:3b:83:7f:66:91:a1:60:09:2a:04:c1:32:1a:
         7b:26:a3:61:91:04:ed:83:6d:bb:50:92:97:f6:21:50:09:6a:
         b4:74:c2:21:44:cc:d7:50:1b:aa:20:65:80:f3:80:8f:c5:f9:
         61:3e:ba:03:5b:0c:29:7a:ab:26:73:9c:27:f7:cb:82:01:d8:
         60:ff:f0:c2:da:79:49:c1:a2:a1:05:c5:33:6f:9a:53:7c:f9:
         0b:d1:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org