Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203647.roa
File:                     AS203647.roa (raw, json)
Hash identifier:          Pb2tlGshrzMcHAKujtTgaGXAe7KmsGq3mpzdVcP65eY=
Subject key identifier:   D6:59:70:3D:73:D3:6A:31:9C:70:4E:7C:49:7B:B7:B8:26:5C:37:12
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4DDDA1CBFB6788C14C6E99C2D9472853B2480578
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203647.roa
Signing time:             Fri 30 Sep 2022 15:46:50 +0000
ROA not before:           Fri 30 Sep 2022 15:41:50 +0000
ROA not after:            Fri 29 Sep 2023 15:46:50 +0000
asID:                     203647
IP address blocks:        181.215.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dd:a1:cb:fb:67:88:c1:4c:6e:99:c2:d9:47:28:53:b2:48:05:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Sep 30 15:41:50 2022 GMT
            Not After : Sep 29 15:46:50 2023 GMT
        Subject: CN=D659703D73D36A319C704E7C497BB7B8265C3712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:b0:da:1f:ea:f2:b9:8b:6e:75:8f:d8:2b:
                    ae:92:b7:b4:4f:e7:27:79:bf:36:89:b4:5c:be:41:
                    6f:46:ad:73:06:1c:b4:a3:fb:55:93:65:9f:af:1d:
                    51:2f:4c:ea:64:78:e8:aa:58:4e:c4:34:d1:0e:1a:
                    57:b1:81:53:19:1d:0f:ab:96:11:f8:3e:8e:a3:b7:
                    5a:0c:54:6c:18:12:1d:c5:4c:2e:08:24:42:10:93:
                    17:9c:1c:b4:85:1f:a7:89:fe:87:14:ea:6e:28:1c:
                    45:4f:99:9e:6d:d9:49:ad:b4:22:02:a9:6a:15:08:
                    dd:91:7c:32:3e:3e:02:b1:65:f3:db:14:ea:ce:c8:
                    37:e3:0e:4e:b5:88:7f:a9:5d:51:b4:d3:53:c4:30:
                    12:8b:63:c4:ca:ca:9d:bf:0b:8b:df:a5:b8:78:48:
                    56:0a:95:8d:dc:f8:5d:5d:ca:6e:7d:05:9c:08:99:
                    00:f3:d7:25:ad:e6:b1:d7:b2:7a:0b:d7:34:13:7f:
                    b6:e0:dd:3f:35:16:4b:e5:e4:b5:93:a2:0a:64:11:
                    2c:e5:ee:7f:e8:60:5f:45:f0:7b:d7:4d:ef:51:25:
                    f1:68:e5:f2:a6:f2:da:c7:ea:ee:1e:dd:a2:e7:90:
                    26:ba:6f:99:77:3d:81:ad:48:42:6a:70:67:34:0f:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:70:3D:73:D3:6A:31:9C:70:4E:7C:49:7B:B7:B8:26:5C:37:12
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203647.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:40:4a:ce:c8:dd:71:9b:8a:04:62:7a:64:8f:21:17:2c:8c:
         1a:8a:cd:ad:22:87:a9:c4:87:71:f7:62:b2:78:d8:44:fc:02:
         a7:6a:49:29:e4:86:5f:55:c9:d9:f8:78:fc:d9:e1:b5:c3:35:
         a7:ea:3a:70:9d:ff:ab:d7:91:1a:b2:3f:ac:ea:fa:83:a9:56:
         e0:40:ba:55:b8:d2:f9:21:7a:9c:3b:50:5e:25:0f:f9:ab:25:
         d1:f4:26:df:4a:7e:4c:00:b0:88:44:12:b4:66:79:d7:2e:fb:
         1c:42:2f:f6:82:f0:76:92:7a:bb:8b:c8:0b:ca:5a:6b:8f:3b:
         33:47:56:6c:89:30:fc:32:2c:c6:bd:51:21:ee:be:d2:00:f3:
         e5:04:a4:df:9b:ef:05:2f:a1:cc:5f:00:d9:aa:b3:70:46:28:
         de:b7:fd:12:a0:a5:6b:2f:3a:eb:27:8c:89:b5:c6:fe:58:04:
         a7:4a:7a:5e:18:2d:d8:de:ae:81:35:6b:89:ca:76:85:94:c9:
         1e:21:eb:d9:d7:50:4c:10:01:ec:47:22:ba:23:be:ca:63:2a:
         23:77:1d:d2:d5:2d:9c:63:92:78:31:9e:8d:40:00:30:73:ad:
         06:02:b0:5f:62:ba:d2:e5:1b:b6:70:ea:14:dd:ef:f4:b2:ba:
         92:8b:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org