Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS12735.roa
File:                     AS12735.roa (raw, json)
Hash identifier:          LbiiV6IVAA0WiN4L73oSh46y2Uz/ddywtRmAVnLbaik=
Subject key identifier:   7B:C7:F6:73:87:20:30:8F:87:FD:88:31:7B:EE:B5:D6:C4:37:0A:3A
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       20D78CF6625076B3562517CBDCB916C7B83E8B4D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS12735.roa
Signing time:             Sat 27 Aug 2022 09:47:33 +0000
ROA not before:           Sat 27 Aug 2022 09:42:33 +0000
ROA not after:            Sat 26 Aug 2023 09:47:33 +0000
asID:                     12735
IP address blocks:        92.119.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d7:8c:f6:62:50:76:b3:56:25:17:cb:dc:b9:16:c7:b8:3e:8b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:42:33 2022 GMT
            Not After : Aug 26 09:47:33 2023 GMT
        Subject: CN=7BC7F6738720308F87FD88317BEEB5D6C4370A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:e4:bb:57:0b:e8:65:a1:b8:c0:e7:8a:88:
                    5a:4b:d6:95:c3:d3:5e:6b:ea:4b:d2:be:04:55:9e:
                    b5:27:55:a3:d4:7b:5b:0a:5f:77:7a:4d:70:a0:7c:
                    d5:7a:1a:54:96:24:0e:6e:1a:fe:ac:72:a0:3c:5b:
                    cb:4f:8e:ff:4f:c8:a1:4e:f3:31:40:b3:ca:fc:53:
                    e2:88:a3:99:88:78:ea:0b:20:04:f3:7a:c8:e3:93:
                    14:0d:05:1c:2d:7e:3b:65:03:fc:1e:56:9e:2f:78:
                    7c:6d:84:20:17:cf:08:99:fe:65:eb:7d:2f:2e:f2:
                    d2:41:46:4a:07:1d:ed:0a:f5:74:90:94:fc:f0:72:
                    73:7e:1c:e3:cc:c8:00:b8:34:09:93:85:4c:64:74:
                    47:32:e8:4d:d0:a4:b7:c7:f2:4e:c8:3a:61:df:bf:
                    c7:74:d8:b9:f8:12:82:00:4d:6d:4a:bb:9d:c4:07:
                    83:b3:07:3c:32:13:3f:9b:b3:96:84:f9:70:be:1c:
                    38:45:c6:58:1e:fb:96:96:a5:09:0c:b0:ce:e4:a0:
                    02:14:d5:0e:cf:13:10:45:37:1f:35:b3:81:03:39:
                    83:26:b9:10:7c:e5:69:25:db:91:2d:8c:a1:50:3a:
                    2e:a2:25:74:cb:9d:fa:58:67:ab:69:a2:01:4a:36:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C7:F6:73:87:20:30:8F:87:FD:88:31:7B:EE:B5:D6:C4:37:0A:3A
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS12735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:4a:d0:3c:13:8d:cf:80:db:27:d9:57:70:79:29:07:cd:
         d0:71:fc:b2:05:39:58:85:9a:61:fd:d8:8d:28:bb:8a:ab:b1:
         99:32:71:f5:a3:ac:fb:95:5e:da:49:dd:c4:98:19:b9:e3:f5:
         32:8e:9e:36:7f:c9:93:03:3e:60:dd:1a:2b:7b:48:6e:66:af:
         f0:af:b4:6f:2d:ee:6b:89:5e:79:9f:70:6f:ac:17:13:62:cd:
         f0:9d:3c:fb:64:6a:c3:cc:1a:a7:bf:1b:78:ca:f5:05:f9:b6:
         01:63:ad:36:2d:46:fd:51:93:b0:aa:19:66:f9:f0:42:77:ff:
         9c:db:1c:3c:83:42:57:be:72:b5:3f:13:4d:c9:44:96:30:76:
         55:eb:fb:30:d2:7a:f8:28:e3:3c:fe:02:1c:3a:04:d0:29:2b:
         ec:6d:d4:05:52:3f:c1:82:f6:0b:75:d6:11:47:64:89:64:c3:
         4f:04:ee:93:57:cf:ff:e6:a5:ea:e9:d3:9b:b8:9c:d6:17:39:
         50:bc:3b:7c:53:df:27:c5:ba:89:98:77:ea:4c:5d:56:60:85:
         c3:0c:36:2f:a8:91:5f:c2:74:51:75:19:f4:ed:2f:a1:a0:e5:
         fa:1e:5a:6c:28:24:ad:d5:3e:24:a4:1f:ef:f3:1e:3a:e6:ea:
         43:76:78:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org