Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210439.roa
File:                     AS210439.roa (raw, json)
Hash identifier:          y55FhJkKqDeDRaqxI/vp22kKfh4bNvQVbFc0W9Q08iY=
Subject key identifier:   33:84:BF:81:C4:77:71:B0:7D:B3:6D:DF:02:B4:C6:21:AB:58:A9:BF
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       522F8C4D8E48AF042167B3211AAEF16CC03D70EF
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210439.roa
Signing time:             Fri 25 Nov 2022 12:23:41 +0000
ROA not before:           Fri 25 Nov 2022 12:18:41 +0000
ROA not after:            Fri 24 Nov 2023 12:23:41 +0000
asID:                     210439
IP address blocks:        45.137.158.0/24 maxlen: 24
                          45.139.183.0/24 maxlen: 24
                          179.61.158.0/24 maxlen: 24
                          179.61.191.0/24 maxlen: 24
                          185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2f:8c:4d:8e:48:af:04:21:67:b3:21:1a:ae:f1:6c:c0:3d:70:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 12:18:41 2022 GMT
            Not After : Nov 24 12:23:41 2023 GMT
        Subject: CN=3384BF81C47771B07DB36DDF02B4C621AB58A9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:85:89:ba:df:1a:0a:00:99:ee:6e:54:e5:
                    a7:24:d0:95:aa:5e:05:a9:4a:c6:41:2b:c0:e7:b9:
                    6a:4a:24:10:df:b9:8c:07:69:b3:4e:ca:c0:a4:55:
                    14:e3:78:b8:c1:94:0b:67:3f:fc:89:e6:e9:e6:f2:
                    e1:3b:c9:7c:2b:6b:ea:d6:1e:5e:79:be:07:f4:11:
                    94:31:b2:82:7c:84:bb:51:88:08:4d:7d:12:86:81:
                    fd:b0:c3:50:03:3c:40:ff:40:b4:f5:c2:c1:a9:63:
                    65:88:e3:7b:ce:81:c3:61:8f:30:d3:49:8a:af:98:
                    43:d9:62:9f:a9:0f:11:b0:f0:e2:40:bd:2a:c3:48:
                    b6:34:af:ae:b7:87:76:41:a3:e1:a2:eb:a1:1c:45:
                    67:e2:07:af:07:42:7e:56:9e:cf:94:44:11:b8:4f:
                    5b:96:31:c7:c5:08:52:8c:b0:f8:bd:e5:cc:01:ec:
                    6f:c5:9d:7f:43:35:ac:86:2c:4b:27:7e:7d:65:16:
                    58:bc:ca:73:2e:91:c5:94:e2:e3:bb:57:88:45:ad:
                    b5:b8:6f:b3:0c:cd:51:21:80:97:ac:cc:a9:3c:b5:
                    b5:ae:65:e4:39:f4:06:7d:df:df:02:34:cb:f6:71:
                    84:7e:47:ad:0a:33:3e:6a:ca:f5:95:ca:61:79:e7:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:84:BF:81:C4:77:71:B0:7D:B3:6D:DF:02:B4:C6:21:AB:58:A9:BF
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.158.0/24
                  45.139.183.0/24
                  179.61.158.0/24
                  179.61.191.0/24
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:38:1e:b8:6d:08:f2:be:15:02:c6:0a:f3:c1:6e:98:e3:45:
         20:0a:1c:4e:fe:fa:58:da:fd:93:ab:36:ef:4e:7b:66:db:89:
         32:d1:cd:6d:08:61:d4:05:95:3c:7b:2b:72:69:bf:e3:78:60:
         a6:77:bd:13:10:22:ea:82:0e:5c:82:7f:4c:4d:c2:4f:5f:f3:
         41:29:04:3d:17:5e:e9:7b:c8:8a:13:c7:43:d7:81:2d:85:ab:
         3e:40:31:a8:bf:08:54:87:6c:7e:8c:e5:07:d6:d6:47:c9:02:
         9f:8c:04:7e:45:55:d6:37:15:dc:b7:7d:c7:64:83:95:41:fe:
         15:01:07:5f:ae:cc:7f:9d:dd:60:a4:e6:ae:5d:a3:c8:0b:ec:
         6b:cd:74:f9:a6:57:92:c7:d9:4f:2b:3b:73:53:4d:fa:62:36:
         5c:9c:8e:38:1e:cf:ae:34:0f:dc:31:bb:7f:26:77:b0:6e:70:
         c6:2f:a1:a6:2b:ee:46:7d:b6:43:f1:45:75:8a:f4:11:d7:08:
         83:04:4e:06:fc:16:35:80:7a:56:29:f3:33:7a:84:b0:d7:2e:
         f5:2f:a7:d8:70:02:0d:a4:3c:ee:ae:51:77:81:cd:66:6d:f5:
         1b:9e:60:99:06:d1:34:15:ff:60:9d:38:f7:41:fb:6d:cd:52:
         0a:b9:bd:b6
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUUi+MTY5IrwQhZ7MhGq7xbMA9cO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjExMjUxMjE4NDFaFw0yMzExMjQxMjIzNDFaMDMxMTAvBgNV
BAMTKDMzODRCRjgxQzQ3NzcxQjA3REIzNkRERjAyQjRDNjIxQUI1OEE5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PIWJut8aCgCZ7m5U5ack0JWq
XgWpSsZBK8DnuWpKJBDfuYwHabNOysCkVRTjeLjBlAtnP/yJ5unm8uE7yXwra+rW
Hl55vgf0EZQxsoJ8hLtRiAhNfRKGgf2ww1ADPED/QLT1wsGpY2WI43vOgcNhjzDT
SYqvmEPZYp+pDxGw8OJAvSrDSLY0r663h3ZBo+Gi66EcRWfiB68HQn5Wns+URBG4
T1uWMcfFCFKMsPi95cwB7G/FnX9DNayGLEsnfn1lFli8ynMukcWU4uO7V4hFrbW4
b7MMzVEhgJeszKk8tbWuZeQ59AZ9398CNMv2cYR+R60KMz5qyvWVymF555BRAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUM4S/gcR3cbB9s23fArTGIatYqb8wHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMTA0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYB
BQUHAQcBAf8EKDAmMCQEAgABMB4DBAAtiZ4DBAAti7cDBACzPZ4DBACzPb8DBAC5
qjswDQYJKoZIhvcNAQELBQADggEBAIQ4HrhtCPK+FQLGCvPBbpjjRSAKHE7++lja
/ZOrNu9Oe2bbiTLRzW0IYdQFlTx7K3Jpv+N4YKZ3vRMQIuqCDlyCf0xNwk9f80Ep
BD0XXul7yIoTx0PXgS2Fqz5AMai/CFSHbH6M5QfW1kfJAp+MBH5FVdY3Fdy3fcdk
g5VB/hUBB1+uzH+d3WCk5q5do8gL7GvNdPmmV5LH2U8rO3NTTfpiNlycjjgez640
D9wxu38md7BucMYvoaYr7kZ9tkPxRXWK9BHXCIMETgb8FjWAelYp8zN6hLDXLvUv
p9hwAg2kPO6uUXeBzWZt9RueYJkG0TQV/2CdOPdB+23NUgq5vbY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org