Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS132316.roa
File:                     AS132316.roa (raw, json)
Hash identifier:          NSFngfuNlaYIWV2vB9HYfbGqKmqmonq/dp7l7+ZB8+I=
Subject key identifier:   A1:A9:CA:BE:8B:66:31:9B:D2:F8:7D:4B:A0:74:3C:F2:01:ED:27:70
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       7BF4CF80A7CBAB2CBD26AAB57406D4B3EC6F43C7
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS132316.roa
Signing time:             Tue 14 Jun 2022 06:38:07 +0000
ROA not before:           Tue 14 Jun 2022 06:33:07 +0000
ROA not after:            Tue 13 Jun 2023 06:38:07 +0000
asID:                     132316
IP address blocks:        185.158.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f4:cf:80:a7:cb:ab:2c:bd:26:aa:b5:74:06:d4:b3:ec:6f:43:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Jun 14 06:33:07 2022 GMT
            Not After : Jun 13 06:38:07 2023 GMT
        Subject: CN=A1A9CABE8B66319BD2F87D4BA0743CF201ED2770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:af:28:20:69:c8:e6:01:e3:13:cb:e0:5d:
                    03:ee:14:7a:d5:45:cf:02:9e:eb:3e:0b:a3:54:99:
                    33:13:6d:3e:8a:bc:8f:d7:fd:c0:5c:d1:0d:23:39:
                    90:93:71:c6:93:57:40:ec:a1:0d:80:46:18:a4:ed:
                    b1:a4:eb:30:06:2c:64:0d:c0:5a:07:88:3a:09:86:
                    98:c8:47:e7:a9:76:5c:7e:f6:bf:96:05:49:a8:84:
                    71:74:c2:37:11:37:fb:65:8e:9f:86:bf:04:85:59:
                    33:e1:8c:ec:20:28:12:2c:d4:b6:6f:75:aa:16:27:
                    9d:87:86:b3:df:11:d3:81:c6:55:52:28:1a:98:a4:
                    ed:80:2f:c1:93:87:87:25:5e:15:cb:d2:61:c3:28:
                    67:af:ec:89:e5:23:77:46:60:e5:0c:91:39:55:df:
                    47:1f:d1:a6:0e:81:e2:a3:09:6f:0a:5f:f2:eb:b6:
                    1c:65:4a:83:71:34:80:c8:3b:4b:68:f7:87:29:45:
                    01:e6:b3:2a:e8:99:a5:cc:2f:1b:a9:79:28:8a:de:
                    e1:56:51:d1:1e:85:cb:5d:4a:1d:e9:7f:12:9b:f1:
                    94:89:f3:60:93:26:c8:73:80:dc:5e:aa:d5:12:bd:
                    da:74:ba:b9:39:b1:a7:4d:53:63:4f:d3:c6:73:f5:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A9:CA:BE:8B:66:31:9B:D2:F8:7D:4B:A0:74:3C:F2:01:ED:27:70
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS132316.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.158.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:cd:19:89:86:27:15:36:ee:f9:83:01:9d:68:c0:e5:39:
         9b:c8:ed:54:a9:83:56:a5:26:3b:0e:63:ab:d9:b8:bd:22:4c:
         7b:99:35:41:11:6f:4a:7f:a3:71:25:9b:6d:8c:b3:88:8d:8a:
         3d:13:89:83:b8:0a:ef:c0:c2:2b:21:f1:28:63:54:6b:18:bd:
         f5:59:88:88:ad:cd:bb:55:78:4a:0e:a4:1e:ab:2e:34:dd:aa:
         24:27:15:bc:3c:58:cd:45:d7:16:17:26:53:b6:51:9f:25:33:
         fb:2c:e9:ea:c3:6b:c0:76:ed:30:19:f1:e4:0c:ec:92:f9:51:
         8c:86:55:8b:72:11:1c:90:f5:2e:64:0d:4a:3f:10:ce:a7:27:
         87:ad:e4:4e:58:14:59:3f:eb:e4:8e:d8:21:8d:a9:72:e3:40:
         e9:46:24:71:14:3a:7d:41:ff:05:78:65:8e:25:1b:12:6e:14:
         2f:a0:4a:6e:e9:f0:5b:45:0f:51:7a:b9:99:b7:78:4c:de:b8:
         46:dd:04:84:20:8c:d5:d3:c0:49:12:1f:37:92:84:83:30:d7:
         a9:c0:a7:69:cc:d1:43:0d:29:4b:ee:c7:fa:00:ee:78:e5:75:
         a7:3b:84:ec:fc:07:d7:ce:cb:03:bf:08:21:80:71:43:36:9a:
         4f:54:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org