Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203726.roa
File:                     AS203726.roa (raw, json)
Hash identifier:          LwIi8ZmtYR49IrMLA6DeHswC6aGnPOdwx/JzsdJb17Q=
Subject key identifier:   25:E7:C0:61:85:38:55:27:9D:68:99:D1:D0:F9:C7:8B:05:36:DA:CF
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       5DC164B96EAB85801BDB88015B08453317BB20EB
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203726.roa
Signing time:             Sat 27 Aug 2022 09:41:48 +0000
ROA not before:           Sat 27 Aug 2022 09:36:48 +0000
ROA not after:            Sat 26 Aug 2023 09:41:48 +0000
asID:                     203726
IP address blocks:        45.89.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c1:64:b9:6e:ab:85:80:1b:db:88:01:5b:08:45:33:17:bb:20:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:36:48 2022 GMT
            Not After : Aug 26 09:41:48 2023 GMT
        Subject: CN=25E7C061853855279D6899D1D0F9C78B0536DACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:e5:48:78:d9:39:a7:78:4a:e1:61:32:35:
                    a9:75:5b:02:4d:af:f3:7c:f3:2f:16:8e:b2:25:4d:
                    3f:6e:49:62:63:f0:bd:cc:14:21:7a:e4:43:3d:d7:
                    d3:13:b4:be:14:f9:d2:4c:26:00:58:fc:68:ef:6b:
                    08:77:2e:83:f8:b2:f5:e7:ce:33:dc:ae:58:29:ed:
                    b6:e6:ff:d9:d7:97:88:63:a6:8a:e4:7a:e8:e9:23:
                    06:88:80:8d:db:df:7e:d8:14:1a:e4:5b:82:43:c0:
                    84:78:08:35:93:e7:9f:44:ed:87:03:f5:71:e6:39:
                    11:c4:7d:ec:f6:ac:21:9d:d1:62:d5:0f:2d:fd:1a:
                    49:c9:eb:96:4b:5c:23:68:21:68:86:09:9b:14:f9:
                    2f:b0:c7:58:03:3f:d7:23:b9:1f:9e:56:27:8e:73:
                    23:4a:1a:87:a9:0c:89:7e:82:cc:09:7f:cf:50:a1:
                    8a:f9:e5:1f:f0:16:18:76:75:d8:1f:e8:8a:57:4d:
                    6d:49:c8:f1:57:1e:e2:d2:95:c4:d9:bb:af:4b:3a:
                    dc:7a:9d:e6:90:d5:10:f7:d2:12:ea:44:11:d8:0a:
                    19:81:c1:e3:aa:75:5e:18:a6:29:ca:37:79:2a:25:
                    07:6e:ce:9f:71:ad:9a:0d:b6:1e:c0:0e:24:43:af:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E7:C0:61:85:38:55:27:9D:68:99:D1:D0:F9:C7:8B:05:36:DA:CF
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:b0:df:8e:34:5e:9f:c0:42:59:5f:fe:51:9d:48:e6:f6:
         a5:86:95:d4:73:4e:a2:ad:d2:a8:01:22:02:98:d4:b7:6e:ac:
         7c:13:fe:a6:17:35:68:20:ab:de:62:cb:da:90:5f:a2:c0:fc:
         6d:dc:a3:30:68:1a:e7:f7:77:87:d3:51:6d:c0:44:95:45:42:
         cd:c5:94:50:58:b7:84:c9:37:fa:65:9d:b2:f8:99:d3:65:8e:
         5d:3d:dc:53:15:18:86:46:6d:8c:93:f8:be:b8:0c:d9:64:a6:
         48:62:7d:ec:c0:7b:c3:a5:63:35:7c:85:d4:4b:b3:8e:1d:41:
         e9:79:63:d6:03:ba:05:7a:83:0a:0b:d4:2e:34:2e:40:44:7e:
         f3:78:fe:b8:11:5a:64:61:f6:f6:88:4a:60:35:33:3a:87:b5:
         6b:a5:cd:68:f7:ed:7d:43:dd:bb:de:7b:51:6d:1f:d4:d6:36:
         bd:f8:e1:59:53:5a:4c:bd:2a:d7:7d:a6:94:00:f7:f1:cf:fa:
         a5:91:42:a4:8b:c1:40:f5:47:6a:a9:25:68:d0:30:16:a1:cf:
         1c:49:ce:75:89:d9:8d:37:5b:26:69:fb:78:ce:56:a1:5a:bf:
         60:74:de:d7:d9:2d:3b:91:65:11:3f:0e:8e:7d:84:89:b5:65:
         fb:9b:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org