Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS206092.roa
File:                     AS206092.roa (raw, json)
Hash identifier:          6p0sDZ4/zdsPJzkMZLOjvCCHG/ygGzc2zzPeVTmD9sw=
Subject key identifier:   FB:28:C2:50:F5:A1:FC:45:A1:1E:77:A2:68:27:8D:DB:C0:9F:8B:FD
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       BB376CB31E10CCAFE0CA836949F62DD889ED5C
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS206092.roa
Signing time:             Thu 24 Nov 2022 10:51:44 +0000
ROA not before:           Thu 24 Nov 2022 10:46:44 +0000
ROA not after:            Thu 23 Nov 2023 10:51:44 +0000
asID:                     206092
IP address blocks:        45.133.176.0/24 maxlen: 24
                          45.137.124.0/24 maxlen: 24
                          181.214.175.0/24 maxlen: 24
                          185.173.35.0/24 maxlen: 24
                          191.101.41.0/24 maxlen: 24
                          191.101.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bb:37:6c:b3:1e:10:cc:af:e0:ca:83:69:49:f6:2d:d8:89:ed:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 24 10:46:44 2022 GMT
            Not After : Nov 23 10:51:44 2023 GMT
        Subject: CN=FB28C250F5A1FC45A11E77A268278DDBC09F8BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:36:a2:84:0c:a6:54:a5:9c:65:ba:e5:f4:
                    db:5a:9c:ef:57:fa:07:d2:bd:48:29:b7:9c:c4:b8:
                    c3:b4:80:53:3e:0e:22:b4:2b:46:71:bb:7f:c1:be:
                    e2:e4:a9:24:57:fe:cf:0b:97:95:4c:e0:29:df:a6:
                    d5:6c:84:dd:9d:2d:63:91:07:b2:ff:70:52:99:c1:
                    34:dd:fb:c9:6f:12:c4:32:ee:bc:4d:3b:46:45:57:
                    98:4b:03:4d:91:00:4d:4d:40:b0:75:81:ef:c9:d6:
                    91:07:b1:5f:c1:4e:72:19:e4:23:c9:d5:9e:58:41:
                    30:08:00:c3:ac:ad:26:0c:0b:82:0f:8c:c1:7d:ee:
                    a1:79:72:fd:2d:01:e6:01:97:9f:43:74:77:67:08:
                    83:49:a6:f8:a8:31:b6:8d:85:55:df:65:b2:a8:32:
                    1b:70:a5:53:44:6e:29:5f:68:98:f7:4a:6e:3b:f8:
                    9d:f4:cb:25:0c:8c:e0:cf:bc:a1:62:91:53:2c:a6:
                    cc:e9:e6:c5:ad:96:1f:54:b8:77:f2:81:56:b4:5b:
                    df:e9:cb:02:0f:c9:37:c8:77:f3:56:eb:3b:22:39:
                    4e:1e:7b:aa:35:d0:bc:a1:2b:cb:87:19:a9:c3:22:
                    1d:50:f6:29:04:9a:75:fa:c0:24:2f:68:55:ac:7d:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:28:C2:50:F5:A1:FC:45:A1:1E:77:A2:68:27:8D:DB:C0:9F:8B:FD
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS206092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.176.0/24
                  45.137.124.0/24
                  181.214.175.0/24
                  185.173.35.0/24
                  191.101.41.0/24
                  191.101.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:48:f0:e6:60:ea:6f:63:e3:5a:09:1c:09:68:a0:38:da:7b:
         ba:b0:2e:c6:53:b9:cb:52:6b:b8:03:0e:0e:ec:3e:a9:08:73:
         84:d0:c9:44:9c:7a:57:77:7e:5a:c6:80:dc:6c:fa:95:47:57:
         f3:fa:71:05:d6:4d:fd:92:3e:fc:f5:79:4d:3c:96:79:2e:d8:
         f1:bc:42:f8:66:50:fd:9e:fd:ae:0b:57:16:65:e0:42:48:15:
         5a:58:9f:78:8f:27:8a:2e:94:41:10:a4:d5:6d:5c:71:57:e4:
         41:1e:23:a8:aa:23:22:1c:ae:53:c5:02:12:78:50:cd:59:d1:
         2e:d2:10:90:7e:00:3b:8a:88:c5:77:b2:a8:26:47:0c:c0:30:
         82:ea:80:33:0c:6c:56:e1:f2:ba:d3:d1:63:b4:1b:29:d0:44:
         1a:0a:6b:89:0e:e3:df:f3:b3:63:92:55:57:a3:97:01:b4:aa:
         36:09:6a:e7:3a:78:eb:53:6b:1f:a7:b8:5d:ff:3c:6e:93:a3:
         0f:2a:f5:f9:35:c3:bc:cf:27:5b:23:21:90:77:55:bd:9d:26:
         c4:1e:c3:42:4e:8e:02:76:96:20:9a:f9:24:54:b8:c8:a5:1f:
         3d:34:37:bb:89:38:a6:95:e7:64:10:f9:fd:f5:7b:9a:3c:07:
         49:4e:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org