Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS200651.roa
File:                     AS200651.roa (raw, json)
Hash identifier:          L489oxsLxinQlQdnlosJoZZ79ZA8C48VirfL+AvuxeA=
Subject key identifier:   54:EB:9B:60:8B:C4:B1:99:80:5B:F9:FB:57:1D:27:42:CA:C6:BF:F4
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       294CE7417AE469C7D1DE6E93473F7DADBF17E442
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS200651.roa
Signing time:             Sat 27 Aug 2022 09:51:04 +0000
ROA not before:           Sat 27 Aug 2022 09:46:04 +0000
ROA not after:            Sat 26 Aug 2023 09:51:04 +0000
asID:                     200651
IP address blocks:        45.95.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4c:e7:41:7a:e4:69:c7:d1:de:6e:93:47:3f:7d:ad:bf:17:e4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:46:04 2022 GMT
            Not After : Aug 26 09:51:04 2023 GMT
        Subject: CN=54EB9B608BC4B199805BF9FB571D2742CAC6BFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:05:03:e0:55:fe:53:f1:7f:dd:19:fa:a0:
                    8b:68:1f:b7:04:a6:5b:75:b1:9f:be:90:45:d3:7a:
                    65:21:15:6d:a4:4f:1d:fd:2d:8b:4c:91:84:ac:88:
                    fa:f4:f3:30:b8:ba:a9:5e:96:31:3e:08:e3:20:0d:
                    c3:3b:76:1a:5a:0c:dd:cc:d2:ad:83:c5:cf:82:b6:
                    87:d2:9f:29:47:8a:00:ca:c6:ba:ae:34:1e:4d:74:
                    44:23:c9:2d:60:6f:f1:4c:d1:32:bf:4c:91:4c:4e:
                    11:c1:5b:e5:8a:0a:8a:0e:54:7e:d7:f7:91:da:e2:
                    04:2b:ef:5e:da:68:d9:5e:0f:43:5d:c4:6f:b8:f4:
                    1a:55:28:dd:0c:65:25:0d:8f:a0:f3:1f:33:e7:50:
                    ea:0f:fd:ff:1c:39:dc:e0:74:32:cd:8c:23:8c:41:
                    fa:4c:f8:13:f9:05:df:2e:65:e7:d9:24:f7:c9:77:
                    6f:c6:ae:8d:5a:9e:b2:d0:88:81:4f:ab:a1:28:88:
                    92:ed:0c:c2:1a:ec:49:a5:0a:21:59:05:a2:21:99:
                    6a:e9:d8:31:7c:25:2f:6a:63:87:6b:7b:d7:2f:5f:
                    86:bf:0c:b0:4e:8e:03:f6:2d:90:fd:64:cc:bf:f1:
                    07:a8:46:c3:5a:64:d6:93:90:de:8d:31:a6:fd:28:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EB:9B:60:8B:C4:B1:99:80:5B:F9:FB:57:1D:27:42:CA:C6:BF:F4
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS200651.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:59:95:93:f0:90:89:91:1e:e8:ed:b3:64:76:96:a6:7c:
         60:32:61:e8:16:f1:1a:0f:bd:de:b2:19:21:71:7e:a6:98:af:
         6d:68:37:4b:b9:a2:2a:0c:14:dc:ff:78:d7:16:66:3b:de:3b:
         09:fa:2f:0f:21:5e:af:79:8a:11:af:3a:e1:f8:9f:97:15:7d:
         00:7d:36:82:11:f8:ca:53:33:78:f6:e5:32:3f:c9:07:d4:5e:
         7f:ef:e4:c6:2a:5c:53:1f:42:c7:d4:e5:1d:ea:c1:e6:9f:ff:
         88:25:8c:8d:48:79:61:9f:63:65:75:54:7a:7e:58:a4:e3:7d:
         be:16:dc:9a:52:82:b7:c4:fe:f8:ad:6b:0c:30:0f:8a:b8:79:
         28:69:30:ca:34:33:9b:13:1d:52:09:e3:fc:32:4b:a7:69:64:
         27:f3:f7:8c:37:3b:f8:3e:05:a1:91:97:41:cf:60:ea:63:80:
         00:c3:2b:a6:ec:39:70:2b:fd:21:b9:e6:36:5e:30:ca:c4:ff:
         86:5f:b4:89:a2:b8:06:3b:6f:d3:ff:9f:c4:34:44:34:c9:3c:
         b5:47:b7:b6:bf:37:d5:a1:13:af:43:76:93:42:87:9c:06:69:
         73:c4:42:fb:e3:a9:df:8f:db:8f:03:bf:12:55:dd:4a:ad:76:
         0b:10:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org