Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          oqkCxIPWQnHsUQg7hhD5oxK8FeEYSfY4W0UBtLvBzhg=
Subject key identifier:   F4:AF:74:90:5F:C3:58:D2:BF:78:1D:46:1E:9F:3D:7A:7E:AB:52:4D
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       666668CEB29F9185D7D86468877423312CE7246B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20473.roa
Signing time:             Wed 09 Nov 2022 11:11:38 +0000
ROA not before:           Wed 09 Nov 2022 11:06:38 +0000
ROA not after:            Wed 08 Nov 2023 11:11:38 +0000
asID:                     20473
IP address blocks:        179.61.203.0/24 maxlen: 24
                          181.215.26.0/24 maxlen: 24
                          181.215.70.0/24 maxlen: 24
                          191.96.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:68:ce:b2:9f:91:85:d7:d8:64:68:87:74:23:31:2c:e7:24:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  9 11:06:38 2022 GMT
            Not After : Nov  8 11:11:38 2023 GMT
        Subject: CN=F4AF74905FC358D2BF781D461E9F3D7A7EAB524D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:fb:55:cb:34:9f:22:9b:64:ff:75:4d:80:
                    18:19:35:3d:1f:60:75:e5:28:63:53:4d:40:0b:05:
                    56:22:6d:50:b7:c0:d4:cf:ab:65:50:f4:41:a0:3d:
                    f9:0f:64:c4:b5:d2:2b:47:66:ac:aa:bb:af:bb:04:
                    6e:6c:54:a7:a3:b9:aa:2f:a8:37:c2:b9:7e:2e:10:
                    e6:b1:a2:bb:8f:9c:c3:ef:86:9a:5d:8a:76:e3:28:
                    a5:01:83:04:7c:0d:3b:42:6c:07:cd:9c:d8:f8:81:
                    fa:c6:02:f3:2c:51:86:7a:82:3e:ec:36:4f:f3:13:
                    70:a7:e1:e1:70:54:bf:87:1c:f7:2b:a1:d6:d3:24:
                    0d:6e:7b:bb:2b:ad:5b:bc:a2:a2:d8:b6:d6:50:27:
                    f5:b5:90:de:26:b3:ab:2f:03:09:3c:69:06:cc:e1:
                    4c:54:c6:16:1d:34:17:3e:f9:b0:0f:63:ae:f1:fb:
                    3d:2a:1e:3e:3e:3b:af:9c:5a:fd:8e:b7:ff:e9:1f:
                    f2:53:4e:e4:a6:7d:9b:c3:28:6b:c7:f5:01:9f:8f:
                    d2:51:c0:01:c8:97:65:94:2d:8b:21:32:a6:a6:96:
                    0a:f6:83:60:30:07:01:ac:25:17:d6:fe:18:9f:ad:
                    63:06:e7:7e:40:e5:46:36:ca:66:15:18:5c:21:56:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:74:90:5F:C3:58:D2:BF:78:1D:46:1E:9F:3D:7A:7E:AB:52:4D
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.203.0/24
                  181.215.26.0/24
                  181.215.70.0/24
                  191.96.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:42:2f:43:69:77:f0:37:29:52:c9:ea:8c:dd:5d:e4:b6:
         b0:b7:8b:c2:86:3f:8e:65:9e:10:03:58:5f:0d:c2:33:26:d6:
         28:36:4d:2e:11:21:98:7c:2d:3e:b6:cb:e4:6e:9b:02:e1:bc:
         c4:ae:4a:3c:b7:60:88:35:21:c6:35:c5:8c:c5:76:4a:ad:44:
         77:93:56:8f:14:6d:4c:a0:17:5b:23:a0:88:eb:fe:b1:20:06:
         d2:59:77:b4:04:39:10:11:7c:2b:c2:26:be:f9:54:ca:f8:a5:
         bb:a7:a0:d7:64:1d:0c:7c:05:1d:7c:7e:ea:20:1e:4a:90:ca:
         40:ff:4f:8b:cb:3d:63:62:c1:d4:75:88:0b:1b:6f:e5:36:39:
         8d:c5:b7:52:f4:90:e7:9b:13:9b:f6:5f:ba:13:d4:bd:02:e2:
         b5:e9:5b:b7:dc:0a:ae:05:a2:88:aa:b3:ff:50:ed:bf:0b:3e:
         34:39:ed:df:dd:27:86:6a:d9:ed:e1:73:6d:97:73:51:bc:d7:
         7f:fe:cc:44:99:59:06:95:0e:8a:01:e8:83:55:07:7c:4e:b1:
         ed:0e:5d:47:2c:15:c3:e7:5b:5d:b2:7c:8c:77:5b:ab:25:72:
         09:a8:41:e1:d6:0e:08:df:f1:c8:78:89:3b:2b:c8:ee:a1:14:
         52:68:45:6f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUZmZozrKfkYXX2GRoh3QjMSznJGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjExMDkxMTA2MzhaFw0yMzExMDgxMTExMzhaMDMxMTAvBgNV
BAMTKEY0QUY3NDkwNUZDMzU4RDJCRjc4MUQ0NjFFOUYzRDdBN0VBQjUyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHvtVyzSfIptk/3VNgBgZNT0f
YHXlKGNTTUALBVYibVC3wNTPq2VQ9EGgPfkPZMS10itHZqyqu6+7BG5sVKejuaov
qDfCuX4uEOaxoruPnMPvhppdinbjKKUBgwR8DTtCbAfNnNj4gfrGAvMsUYZ6gj7s
Nk/zE3Cn4eFwVL+HHPcrodbTJA1ue7srrVu8oqLYttZQJ/W1kN4ms6svAwk8aQbM
4UxUxhYdNBc++bAPY67x+z0qHj4+O6+cWv2Ot//pH/JTTuSmfZvDKGvH9QGfj9JR
wAHIl2WULYshMqamlgr2g2AwBwGsJRfW/hifrWMG535A5UY2ymYVGFwhVoMbAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU9K90kF/DWNK/eB1GHp89en6rUk0wHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMDQ3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEF
BQcBBwEB/wQiMCAwHgQCAAEwGAMEALM9ywMEALXXGgMEALXXRgMEAL9g9TANBgkq
hkiG9w0BAQsFAAOCAQEANX1CL0Npd/A3KVLJ6ozdXeS2sLeLwoY/jmWeEANYXw3C
MybWKDZNLhEhmHwtPrbL5G6bAuG8xK5KPLdgiDUhxjXFjMV2Sq1Ed5NWjxRtTKAX
WyOgiOv+sSAG0ll3tAQ5EBF8K8ImvvlUyvilu6eg12QdDHwFHXx+6iAeSpDKQP9P
i8s9Y2LB1HWICxtv5TY5jcW3UvSQ55sTm/ZfuhPUvQLitelbt9wKrgWiiKqz/1Dt
vws+NDnt390nhmrZ7eFzbZdzUbzXf/7MRJlZBpUOigHog1UHfE6x7Q5dRywVw+db
XbJ8jHdbqyVyCahB4dYOCN/xyHiJOyvI7qEUUmhFbw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org