Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS204843.roa
File:                     AS204843.roa (raw, json)
Hash identifier:          47nJqGMswa1TPPJr/VygiY3Daos3k4ycG1FTwp3wzls=
Subject key identifier:   C0:0A:AF:EA:EE:09:32:A1:70:AF:17:93:3F:E7:A9:78:A2:16:3B:FD
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       45E23482292C50D9AA0F1F6C2EB3F4447217A2CB
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS204843.roa
Signing time:             Thu 06 Oct 2022 14:23:51 +0000
ROA not before:           Thu 06 Oct 2022 14:18:51 +0000
ROA not after:            Thu 05 Oct 2023 14:23:51 +0000
asID:                     204843
IP address blocks:        179.61.138.0/24 maxlen: 24
                          179.61.140.0/24 maxlen: 24
                          179.61.148.0/24 maxlen: 24
                          179.61.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:34:82:29:2c:50:d9:aa:0f:1f:6c:2e:b3:f4:44:72:17:a2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct  6 14:18:51 2022 GMT
            Not After : Oct  5 14:23:51 2023 GMT
        Subject: CN=C00AAFEAEE0932A170AF17933FE7A978A2163BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:c5:18:0d:67:86:59:41:d6:c8:06:33:74:
                    ba:dc:c2:06:45:c3:bd:b4:ba:ea:c8:7f:2d:36:4b:
                    29:e6:f7:67:f3:f0:26:bf:37:65:b9:31:e3:3e:6d:
                    fe:a1:e3:4d:1b:c3:67:cf:3a:9b:b8:08:92:0d:66:
                    f4:f4:e6:3d:e1:9f:97:93:c5:d3:19:40:a7:3e:1e:
                    69:3b:cb:b5:c9:5b:44:88:2b:6a:57:6c:52:6e:d2:
                    99:2b:37:0e:e9:27:34:8d:2b:64:da:bf:40:f6:57:
                    a6:6c:76:61:dc:19:8e:9b:ab:6c:b0:2a:db:b2:66:
                    04:21:04:f1:b1:dc:62:7b:8a:2b:5d:ca:c7:d5:1f:
                    2c:59:30:97:89:5a:1b:4d:e0:51:f2:dd:1e:80:3e:
                    00:d3:95:6e:ed:87:3e:95:8e:ac:dd:a3:e2:6b:80:
                    52:a3:d5:f3:cc:38:f1:2c:b7:d5:d5:05:c5:d9:dd:
                    b2:1d:54:a0:02:35:3b:96:1b:cb:08:c2:78:69:fe:
                    9b:3f:cb:e2:65:11:60:08:49:af:70:1c:8c:63:d2:
                    24:78:78:ec:1d:a0:c1:9a:e2:51:5a:aa:96:40:05:
                    0f:b7:f4:c1:1c:7a:51:68:dd:f3:2a:4c:5e:8d:ac:
                    10:46:32:c4:42:33:65:f2:06:5e:3b:1c:4f:2b:6d:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0A:AF:EA:EE:09:32:A1:70:AF:17:93:3F:E7:A9:78:A2:16:3B:FD
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS204843.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.138.0/24
                  179.61.140.0/24
                  179.61.148.0/24
                  179.61.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:b3:87:81:89:1f:b7:46:ca:e4:cf:88:d7:b6:da:05:c4:
         e1:87:82:f4:c9:65:38:62:f7:24:88:49:43:d1:04:e2:1d:c2:
         30:2c:b6:f4:01:2c:83:b7:d9:79:52:21:11:44:e0:2f:d4:0e:
         8a:37:f0:93:a0:48:a7:68:12:3e:52:f8:c6:80:5a:1b:89:bd:
         06:9f:97:5e:86:87:92:ad:af:85:04:30:3a:e0:80:45:69:ff:
         c0:8a:42:06:a7:37:ea:1f:10:47:e4:4f:ab:f2:6b:6a:1f:39:
         f3:de:15:0f:a8:77:c6:89:a8:76:13:cd:8b:aa:1d:bc:1d:16:
         aa:fb:b2:40:95:70:4d:3d:5a:ff:f8:93:71:9b:f7:d3:bc:7d:
         81:e0:cd:ce:28:22:34:a7:84:0e:fe:d9:15:81:93:f4:16:e7:
         e2:fa:b4:06:72:a1:a4:0a:85:66:27:02:d7:af:36:10:d7:4c:
         00:88:f9:6e:3e:ba:44:23:37:30:c3:44:00:7f:91:16:93:95:
         ec:7c:8f:d0:b5:38:59:2a:e1:e0:14:8a:7a:35:86:ec:66:11:
         62:be:59:a6:02:02:da:bb:9e:56:c4:8f:8a:99:bb:58:e0:a4:
         62:30:1b:62:98:d9:a4:8e:1d:1d:11:15:cd:50:a7:90:57:d4:
         ca:31:ce:db
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUReI0giksUNmqDx9sLrP0RHIXosswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMDYxNDE4NTFaFw0yMzEwMDUxNDIzNTFaMDMxMTAvBgNV
BAMTKEMwMEFBRkVBRUUwOTMyQTE3MEFGMTc5MzNGRTdBOTc4QTIxNjNCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvscUYDWeGWUHWyAYzdLrcwgZF
w720uurIfy02Synm92fz8Ca/N2W5MeM+bf6h400bw2fPOpu4CJINZvT05j3hn5eT
xdMZQKc+Hmk7y7XJW0SIK2pXbFJu0pkrNw7pJzSNK2Tav0D2V6ZsdmHcGY6bq2yw
KtuyZgQhBPGx3GJ7iitdysfVHyxZMJeJWhtN4FHy3R6APgDTlW7thz6Vjqzdo+Jr
gFKj1fPMOPEst9XVBcXZ3bIdVKACNTuWG8sIwnhp/ps/y+JlEWAISa9wHIxj0iR4
eOwdoMGa4lFaqpZABQ+39MEcelFo3fMqTF6NrBBGMsRCM2XyBl47HE8rbUhnAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUwAqv6u4JMqFwrxeTP+epeKIWO/0wHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMDQ4NDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYB
BQUHAQcBAf8EIjAgMB4EAgABMBgDBACzPYoDBACzPYwDBACzPZQDBACzPZgwDQYJ
KoZIhvcNAQELBQADggEBABhfs4eBiR+3Rsrkz4jXttoFxOGHgvTJZThi9ySISUPR
BOIdwjAstvQBLIO32XlSIRFE4C/UDoo38JOgSKdoEj5S+MaAWhuJvQafl16Gh5Kt
r4UEMDrggEVp/8CKQganN+ofEEfkT6vya2ofOfPeFQ+od8aJqHYTzYuqHbwdFqr7
skCVcE09Wv/4k3Gb99O8fYHgzc4oIjSnhA7+2RWBk/QW5+L6tAZyoaQKhWYnAtev
NhDXTACI+W4+ukQjNzDDRAB/kRaTlex8j9C1OFkq4eAUino1huxmEWK+WaYCAtq7
nlbEj4qZu1jgpGIwG2KY2aSOHR0RFc1Qp5BX1Moxzts=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org