Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS136744.roa
File:                     AS136744.roa (raw, json)
Hash identifier:          NaBWxzK+dOQxMYJrmQLak5Kk1uJMRsbQmqj4TVCxekY=
Subject key identifier:   BE:10:DF:43:15:AE:E0:94:9A:B5:FA:C8:B3:7F:0E:08:35:7B:A3:D3
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       46EFDA9FAE5C27F9001C013C91A9A9796357C77C
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS136744.roa
Signing time:             Sat 27 Aug 2022 09:46:05 +0000
ROA not before:           Sat 27 Aug 2022 09:41:05 +0000
ROA not after:            Sat 26 Aug 2023 09:46:05 +0000
asID:                     136744
IP address blocks:        92.118.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ef:da:9f:ae:5c:27:f9:00:1c:01:3c:91:a9:a9:79:63:57:c7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:41:05 2022 GMT
            Not After : Aug 26 09:46:05 2023 GMT
        Subject: CN=BE10DF4315AEE0949AB5FAC8B37F0E08357BA3D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:64:23:a1:0e:4b:5c:ba:aa:4b:69:76:e0:
                    41:17:9b:aa:9e:0c:d4:1c:dc:2a:4d:e5:0f:5b:35:
                    6d:4b:34:9a:1c:68:37:4a:98:a1:b1:61:67:9e:69:
                    e6:f2:c6:de:e1:38:d0:c0:4d:b4:81:75:ce:05:2b:
                    18:03:ea:6e:d7:c6:a8:41:22:f9:3f:c9:2c:bc:67:
                    64:de:b3:25:fc:1d:44:9b:81:86:0b:a1:7c:17:3a:
                    fc:47:7b:56:5c:de:f6:8e:e7:2d:df:b6:ea:b9:31:
                    2c:1d:ab:0d:82:36:00:b6:2e:cb:56:b4:93:c2:02:
                    0c:6c:cc:b4:b6:0e:8a:82:45:6e:6e:07:83:b1:f6:
                    55:d0:91:c2:57:20:c5:f9:c0:e5:ff:4f:d0:2e:5c:
                    7a:d8:01:4a:74:5d:28:57:d0:59:29:03:54:87:4d:
                    ec:f3:23:ab:4d:6c:c9:ca:ea:5e:67:03:98:83:30:
                    83:af:da:88:c7:ef:32:a5:7f:6c:37:c9:4b:e8:e6:
                    dd:a1:12:ae:27:5f:37:03:10:05:34:61:9e:2e:0d:
                    21:1b:66:1c:aa:e9:83:42:a4:69:4a:95:66:a2:6a:
                    8b:dd:56:36:4e:aa:3f:7b:68:81:64:75:44:26:20:
                    6e:e2:ab:f5:be:7e:bd:29:33:35:03:f4:02:40:d0:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:10:DF:43:15:AE:E0:94:9A:B5:FA:C8:B3:7F:0E:08:35:7B:A3:D3
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS136744.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:13:01:8f:65:66:e3:e4:45:40:19:54:83:f5:50:08:7d:
         d5:1e:fa:3f:28:5f:4a:d0:5f:0d:d1:30:57:1a:42:a8:69:9e:
         e4:27:a1:43:3d:3d:87:2c:e4:f4:a8:aa:0b:3e:63:08:83:e2:
         c9:5f:59:cd:05:6b:70:ed:c0:6a:5b:01:08:c7:e2:48:ff:90:
         2a:a7:47:69:8c:f3:b0:53:c2:4f:3b:de:a7:86:22:e7:4d:89:
         20:a2:29:3b:9a:71:1f:ec:45:78:f3:f3:85:ec:65:6a:f1:ce:
         37:a3:37:89:f2:d2:22:17:16:59:c4:7b:0d:e4:32:ad:7c:c6:
         4f:3e:b5:bc:88:f3:11:1e:f3:9b:9b:ec:ec:d6:dd:17:74:9f:
         97:5c:68:00:89:5f:db:5b:c1:58:4e:43:4f:21:26:11:93:61:
         5c:79:98:73:ab:76:62:20:87:db:17:40:4a:35:8d:54:8c:21:
         44:f9:e6:17:d0:df:da:6e:7c:67:95:62:73:c3:67:3c:f6:6f:
         e2:27:cf:82:62:92:09:f6:8c:ac:fa:3a:0c:4b:b2:ef:fe:29:
         44:19:58:f2:ce:93:8c:3f:77:7d:e1:42:ac:84:57:3d:e9:28:
         03:f4:02:52:24:1c:cd:06:ba:f4:8e:13:d0:5e:22:15:1e:92:
         42:c8:07:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org