Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS133398.roa
File:                     AS133398.roa (raw, json)
Hash identifier:          CQ+cMwVn7R3sKnnFUQ4R8X0X66MBhYoMdYdwXbqQvrI=
Subject key identifier:   7B:54:79:5A:A9:FE:14:54:04:C2:22:7A:26:6E:00:BA:04:4A:11:93
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       5C28E528E03CC856EF19EB930E50B8F2135725FB
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS133398.roa
Signing time:             Sat 27 Aug 2022 09:41:04 +0000
ROA not before:           Sat 27 Aug 2022 09:36:04 +0000
ROA not after:            Sat 26 Aug 2023 09:41:04 +0000
asID:                     133398
IP address blocks:        191.101.180.0/24 maxlen: 24
                          193.31.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:28:e5:28:e0:3c:c8:56:ef:19:eb:93:0e:50:b8:f2:13:57:25:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:36:04 2022 GMT
            Not After : Aug 26 09:41:04 2023 GMT
        Subject: CN=7B54795AA9FE145404C2227A266E00BA044A1193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:65:36:f5:cd:6e:bb:49:05:1e:56:11:c1:
                    ba:22:99:44:b4:7c:1a:78:65:d7:4c:34:c0:eb:08:
                    45:d0:7c:8a:6f:47:65:95:2d:d4:ed:b5:6f:76:2b:
                    65:64:65:2c:98:1c:a2:22:d8:56:84:0a:c2:81:5c:
                    73:a5:ac:4b:b9:a7:b2:c9:f0:0b:21:4d:20:dc:4a:
                    cd:ee:a4:df:c2:32:21:c7:2a:d9:2d:5a:c7:86:76:
                    48:63:b1:94:71:13:e1:9e:25:d1:d4:11:5e:55:4b:
                    33:60:0b:62:33:89:5e:d3:72:78:aa:04:39:d9:89:
                    0b:1f:9d:7c:d9:6c:7d:70:88:1b:12:d6:bb:9b:ed:
                    fd:b7:d9:98:d9:32:89:57:2f:4d:46:95:b6:2e:66:
                    f7:68:8a:b9:be:57:30:d3:df:49:b2:50:b6:51:38:
                    b3:2a:ce:3a:38:1d:a1:eb:9a:82:46:81:f1:9b:79:
                    fc:9c:22:a0:84:3f:85:25:9c:69:f0:95:dc:9e:bc:
                    d6:35:18:9a:83:83:e7:f0:93:1f:45:70:9b:43:db:
                    61:e2:12:eb:f9:ff:8d:6f:66:8a:1c:2a:91:f6:17:
                    70:14:1a:dc:d7:bd:a5:6f:97:07:4d:46:34:1f:66:
                    26:25:1f:15:1f:56:34:c5:cf:77:51:7e:c0:54:30:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:54:79:5A:A9:FE:14:54:04:C2:22:7A:26:6E:00:BA:04:4A:11:93
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS133398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.180.0/24
                  193.31.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:e9:a6:55:de:1c:97:1c:d2:88:43:ba:fa:fb:35:fe:e7:
         c5:9b:ac:44:d3:ff:9a:8d:ba:1f:61:bb:0d:39:15:b7:d5:19:
         d4:c6:16:0c:1e:b2:db:52:1e:aa:17:7b:99:c9:44:9f:c4:78:
         a5:c3:2d:df:4d:e3:b0:53:4d:f1:86:e7:b0:c8:74:f4:f0:7e:
         5d:a4:55:44:a1:4a:c8:e0:0a:1b:5c:23:8a:24:61:1b:e6:88:
         7d:c3:a4:22:fe:09:6a:e8:c5:16:54:40:75:68:69:bc:87:96:
         83:df:1c:df:54:d0:be:2e:55:e4:66:80:4e:76:9a:99:31:62:
         c8:15:66:2c:ca:a8:8c:4e:be:9f:17:c9:91:d5:ce:d9:65:5c:
         d9:9b:18:1c:86:32:ab:f7:42:6d:62:1d:9e:1f:60:99:7f:27:
         7e:22:e0:8b:37:f9:ba:a9:75:b6:81:61:04:6c:ef:c0:90:e1:
         f8:e1:c3:41:5b:b0:97:15:7a:95:b7:e5:50:0e:0d:b0:44:50:
         14:c9:b1:fa:ab:58:90:3b:91:9e:0b:a6:84:f5:14:38:02:46:
         04:38:6a:5a:8a:d8:c1:72:04:2e:9b:d1:4e:02:f7:1d:07:e7:
         41:1a:b3:85:60:6a:29:e4:46:08:6c:20:40:27:72:da:82:1a:
         fb:52:ca:e0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIUXCjlKOA8yFbvGeuTDlC48hNXJfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTM2MDRaFw0yMzA4MjYwOTQxMDRaMDMxMTAvBgNV
BAMTKDdCNTQ3OTVBQTlGRTE0NTQwNEMyMjI3QTI2NkUwMEJBMDQ0QTExOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwmU29c1uu0kFHlYRwboimUS0
fBp4ZddMNMDrCEXQfIpvR2WVLdTttW92K2VkZSyYHKIi2FaECsKBXHOlrEu5p7LJ
8AshTSDcSs3upN/CMiHHKtktWseGdkhjsZRxE+GeJdHUEV5VSzNgC2IziV7Tcniq
BDnZiQsfnXzZbH1wiBsS1rub7f232ZjZMolXL01GlbYuZvdoirm+VzDT30myULZR
OLMqzjo4HaHrmoJGgfGbefycIqCEP4UlnGnwldyevNY1GJqDg+fwkx9FcJtD22Hi
Euv5/41vZoocKpH2F3AUGtzXvaVvlwdNRjQfZiYlHxUfVjTFz3dRfsBUMEtBAgMB
AAGjggH6MIIB9jAdBgNVHQ4EFgQUe1R5Wqn+FFQEwiJ6Jm4AugRKEZMwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMxMzMzOTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYB
BQUHAQcBAf8EFjAUMBIEAgABMAwDBAC/ZbQDBADBHykwDQYJKoZIhvcNAQELBQAD
ggEBAA7t6aZV3hyXHNKIQ7r6+zX+58WbrETT/5qNuh9huw05FbfVGdTGFgwesttS
HqoXe5nJRJ/EeKXDLd9N47BTTfGG57DIdPTwfl2kVUShSsjgChtcI4okYRvmiH3D
pCL+CWroxRZUQHVoabyHloPfHN9U0L4uVeRmgE52mpkxYsgVZizKqIxOvp8XyZHV
ztllXNmbGByGMqv3Qm1iHZ4fYJl/J34i4Is3+bqpdbaBYQRs78CQ4fjhw0FbsJcV
epW35VAODbBEUBTJsfqrWJA7kZ4LpoT1FDgCRgQ4alqK2MFyBC6b0U4C9x0H50Ea
s4VgainkRghsIEAnctqCGvtSyuA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org