Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207459.roa
File:                     AS207459.roa (raw, json)
Hash identifier:          MrmCnevpU5jmbItR2Sq6tI41mZG14aEkrTtD+vk4FVU=
Subject key identifier:   CE:E0:6A:D3:F2:F4:0A:B2:10:6A:F9:15:96:84:E3:64:8B:24:44:0B
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       66B90928A559D94A7F144C9F323C92A4C26B8BC7
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207459.roa
Signing time:             Sun 27 Nov 2022 00:00:16 +0000
ROA not before:           Sat 26 Nov 2022 23:55:16 +0000
ROA not after:            Sun 26 Nov 2023 00:00:16 +0000
asID:                     207459
IP address blocks:        179.61.142.0/24 maxlen: 24
                          179.61.180.0/24 maxlen: 24
                          179.61.243.0/24 maxlen: 24
                          181.41.192.0/24 maxlen: 24
                          181.214.96.0/24 maxlen: 24
                          181.215.7.0/24 maxlen: 24
                          181.215.18.0/24 maxlen: 24
                          181.215.21.0/24 maxlen: 24
                          181.215.22.0/24 maxlen: 24
                          181.215.30.0/24 maxlen: 24
                          181.215.67.0/24 maxlen: 24
                          181.215.138.0/24 maxlen: 24
                          181.215.139.0/24 maxlen: 24
                          181.215.143.0/24 maxlen: 24
                          181.215.189.0/24 maxlen: 24
                          181.215.193.0/24 maxlen: 24
                          181.215.203.0/24 maxlen: 24
                          185.143.230.0/24 maxlen: 24
                          191.96.38.0/24 maxlen: 24
                          191.96.73.0/24 maxlen: 24
                          191.96.123.0/24 maxlen: 24
                          191.96.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b9:09:28:a5:59:d9:4a:7f:14:4c:9f:32:3c:92:a4:c2:6b:8b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 26 23:55:16 2022 GMT
            Not After : Nov 26 00:00:16 2023 GMT
        Subject: CN=CEE06AD3F2F40AB2106AF9159684E3648B24440B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:bf:5f:a7:fc:bd:e3:61:9e:71:35:3a:01:
                    bc:21:88:5d:bd:8d:ac:3b:fe:3c:a1:c6:c8:c1:2f:
                    f5:13:27:fb:c3:9f:b6:73:93:19:d3:05:7a:0c:31:
                    32:e9:54:c8:2d:69:12:46:9a:b5:25:5f:fc:2f:d6:
                    21:89:49:fd:20:e6:d2:14:ba:ad:e0:f5:81:29:37:
                    d6:a3:77:47:4e:25:e8:d0:fc:e6:1d:7c:11:19:5b:
                    15:ca:12:a3:84:fb:43:95:47:ab:63:49:db:5d:9e:
                    bc:15:81:85:92:63:2c:b2:bf:c0:ed:28:0e:df:29:
                    57:2e:5e:01:fc:22:2b:f9:d1:5b:0e:9b:cf:8c:bb:
                    5b:14:ef:e3:6b:6a:e3:70:a4:c3:dd:6b:66:e8:72:
                    8f:0e:3c:5c:16:68:f0:3e:5f:dd:48:78:f1:ed:e8:
                    8a:4e:f6:e4:e6:6c:e1:8b:37:4c:db:27:2a:30:1c:
                    e7:46:93:a9:c5:87:b5:8d:33:5d:30:af:e2:b6:16:
                    57:b1:d6:a9:a3:22:c8:5d:58:6f:5c:5d:99:df:ce:
                    a1:b4:2a:30:c2:10:75:21:07:58:1d:af:a4:e7:dc:
                    a7:ef:a5:db:74:f7:42:f6:d7:fc:d6:c8:87:9e:81:
                    03:6c:9d:33:d6:4b:96:e8:26:54:a9:84:d6:7b:99:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:6A:D3:F2:F4:0A:B2:10:6A:F9:15:96:84:E3:64:8B:24:44:0B
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.142.0/24
                  179.61.180.0/24
                  179.61.243.0/24
                  181.41.192.0/24
                  181.214.96.0/24
                  181.215.7.0/24
                  181.215.18.0/24
                  181.215.21.0-181.215.22.255
                  181.215.30.0/24
                  181.215.67.0/24
                  181.215.138.0/23
                  181.215.143.0/24
                  181.215.189.0/24
                  181.215.193.0/24
                  181.215.203.0/24
                  185.143.230.0/24
                  191.96.38.0/24
                  191.96.73.0/24
                  191.96.123.0-191.96.124.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:95:59:d0:fb:04:c8:48:6a:ad:2f:93:e4:96:99:c0:78:
         0a:b4:55:b8:e6:89:62:85:db:e8:63:a5:8b:e3:0d:10:8f:69:
         90:60:c3:1e:dc:99:07:b7:f0:17:4c:a6:5d:b0:3a:ee:54:c8:
         8f:07:93:66:13:3c:cf:fb:8b:57:1b:e2:83:f4:99:fb:31:b4:
         db:16:c7:85:10:b0:b4:b6:ac:4d:5a:1f:e1:46:9b:9d:88:e9:
         a9:e9:8b:e5:76:dc:09:c2:22:94:9f:d2:91:85:ad:a4:60:1c:
         84:82:52:bc:1d:b5:c9:93:cb:82:e8:ff:8d:11:0c:ee:d9:36:
         3b:ed:ea:00:e7:54:e6:b7:af:05:53:5a:69:c9:cf:37:dc:90:
         e6:7f:04:1d:89:b2:dd:cd:a9:b1:9a:b8:4f:f3:1c:07:fd:1e:
         f5:2d:47:eb:d1:7f:69:bb:cc:08:b0:6f:43:2a:a4:37:9e:cd:
         e6:30:e6:e3:9e:98:2f:af:f0:30:60:18:e8:dd:be:1f:3f:07:
         99:22:86:e1:8f:31:1a:73:ae:0a:f4:2c:0f:e3:12:28:56:65:
         6f:02:9c:ee:98:b4:3e:88:ba:75:f9:1a:89:31:a8:53:3d:fb:
         6f:ea:26:cc:53:0e:83:90:c6:6f:93:f5:23:58:f2:b7:54:7d:
         c5:be:5c:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org