Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS139648.roa
File:                     AS139648.roa (raw, json)
Hash identifier:          LWd++3dE9XR7fEbRzZ5CoICFimCrQNtvaRHYErECbHg=
Subject key identifier:   23:A2:E9:CD:9B:A8:22:9E:CB:5D:50:6A:49:B4:07:6C:94:11:3D:C0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       70384D8A3BD6E1451A5932718440C501C7766CF7
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS139648.roa
Signing time:             Sat 27 Aug 2022 09:49:36 +0000
ROA not before:           Sat 27 Aug 2022 09:44:36 +0000
ROA not after:            Sat 26 Aug 2023 09:49:36 +0000
asID:                     139648
IP address blocks:        45.89.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:38:4d:8a:3b:d6:e1:45:1a:59:32:71:84:40:c5:01:c7:76:6c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:44:36 2022 GMT
            Not After : Aug 26 09:49:36 2023 GMT
        Subject: CN=23A2E9CD9BA8229ECB5D506A49B4076C94113DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:d3:18:ff:9c:98:ae:ac:4f:d3:69:f1:55:
                    05:5b:30:fb:f2:55:f9:59:a6:48:77:9a:82:36:d2:
                    6a:38:68:6c:96:51:19:2a:2b:1c:51:30:0d:35:57:
                    e3:ff:f8:82:d1:dc:7d:f3:05:0b:83:c3:ff:94:f3:
                    b0:0e:30:dc:91:24:b5:d9:98:d1:c7:fa:8f:2d:c0:
                    1a:9a:a0:5f:2e:c6:6e:d4:00:f7:79:35:f6:d3:47:
                    d9:7a:a2:22:9f:03:75:10:82:30:20:a2:2c:8c:ca:
                    0a:fb:8e:52:f2:95:3c:cb:c2:a0:66:47:07:63:64:
                    33:6e:89:ff:2c:c7:4d:7f:f2:5f:7c:72:6c:ea:c6:
                    6e:b1:df:ed:81:5d:0c:b8:79:d2:4a:f3:47:dd:6d:
                    4b:d2:00:5d:d1:9d:f6:e5:0a:68:a5:8f:dc:1b:6e:
                    6c:c6:66:f8:a1:c7:aa:34:42:30:b7:04:50:96:5f:
                    29:46:ae:3b:d5:b0:26:4d:85:41:41:e1:7f:1b:ad:
                    09:19:26:b0:a9:dc:38:50:2a:3c:47:bf:a8:5c:5d:
                    5e:0d:af:16:fb:0d:2a:9e:33:10:55:2f:ce:36:4c:
                    60:9c:00:16:f5:98:f1:8a:6b:be:87:db:cb:6f:65:
                    56:89:e5:03:4c:06:ec:70:c8:11:20:e8:54:44:b6:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:E9:CD:9B:A8:22:9E:CB:5D:50:6A:49:B4:07:6C:94:11:3D:C0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS139648.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:82:03:5e:8f:67:11:20:24:e3:80:9c:7c:52:54:7f:41:
         cf:8b:40:00:3b:7a:48:86:5c:1a:65:ce:a1:d2:e8:97:3b:a1:
         33:65:5e:4d:88:6a:8a:56:26:ba:13:ca:c2:10:c9:e3:1e:b8:
         5a:66:1f:db:2e:9a:07:d6:3a:89:ca:fb:08:e4:df:1b:8a:96:
         ec:9e:3d:df:89:70:20:d1:90:3f:d7:9d:f8:ca:6b:fa:cc:16:
         0c:41:29:4e:21:ea:dd:0f:49:ff:d6:bd:c3:38:17:ac:35:08:
         82:db:9e:e8:8c:e6:3d:cd:5e:c6:74:cc:6a:5d:30:be:72:4f:
         45:26:60:d8:96:65:c3:08:3a:22:a8:b3:e2:df:c3:bd:c7:17:
         f3:64:f8:cb:6e:d1:1e:ba:e2:d5:db:2c:ad:24:99:8c:7b:a6:
         a4:2e:67:f0:e1:c0:9c:d8:87:8b:31:3e:a8:a6:b0:62:a6:78:
         67:1c:7d:d5:14:b3:c8:33:6f:5f:72:bd:d6:7f:f1:cb:83:0b:
         00:91:d9:85:1c:f2:06:c6:cc:de:87:7c:9c:c9:e0:39:da:26:
         84:da:e0:7d:6f:72:58:82:74:ec:e7:8e:1e:7a:b4:15:64:90:
         7c:1a:07:1e:58:65:09:04:ab:5a:55:83:55:fe:00:f0:d7:d6:
         5f:f0:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org