Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211975.roa
File:                     AS211975.roa (raw, json)
Hash identifier:          +U2CGCxz8u/1u7LppOFsLe1D3PfbRacxCgb1IO3NbeM=
Subject key identifier:   E7:90:73:EE:8A:F0:25:DA:67:E0:D5:4D:87:B0:E6:99:A3:88:7A:5B
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       60FFFB6537FF3F3FC3F499ED5339A819522B8100
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211975.roa
Signing time:             Thu 10 Nov 2022 23:58:17 +0000
ROA not before:           Thu 10 Nov 2022 23:53:17 +0000
ROA not after:            Thu 09 Nov 2023 23:58:17 +0000
asID:                     211975
IP address blocks:        185.135.8.0/24 maxlen: 24
                          185.137.15.0/24 maxlen: 24
                          191.96.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ff:fb:65:37:ff:3f:3f:c3:f4:99:ed:53:39:a8:19:52:2b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 10 23:53:17 2022 GMT
            Not After : Nov  9 23:58:17 2023 GMT
        Subject: CN=E79073EE8AF025DA67E0D54D87B0E699A3887A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:fd:96:bb:7f:60:20:9b:74:06:23:9b:b1:
                    f9:e9:53:b8:26:c0:7d:dd:65:c8:7a:50:dc:5a:78:
                    52:69:71:df:f2:4d:35:dc:cc:e0:be:2b:60:0d:f2:
                    9e:1c:ff:08:e7:0f:3c:d7:68:24:ee:4b:d0:3a:cc:
                    61:f3:d7:2b:e2:fa:80:7e:27:06:93:e2:5a:e3:82:
                    1c:7d:a2:dc:67:2a:6d:cd:ca:7b:33:78:41:ce:66:
                    d0:a1:22:df:e2:42:f4:58:fa:95:ac:99:18:84:45:
                    7a:05:3e:c5:4f:e7:0e:23:9d:dc:f7:ed:48:fa:83:
                    42:2a:63:91:c5:c4:e5:2f:79:86:ea:76:82:12:a0:
                    d6:69:d7:14:2f:c1:65:fe:5b:a8:6c:3d:f5:22:30:
                    87:c1:42:6e:ae:83:7f:f3:82:96:9b:d5:3c:5d:44:
                    3f:f6:15:4e:75:3f:4a:d1:40:a2:81:ec:c0:18:16:
                    2a:a0:30:33:b4:40:fc:1a:64:ed:e7:04:e7:7e:68:
                    08:cc:4d:c6:94:bc:55:1a:2a:76:79:32:27:4e:76:
                    71:d7:cc:a5:30:66:c6:1e:fe:96:c0:33:54:e5:d9:
                    b3:d8:72:8b:9e:e0:48:62:f0:c4:88:fc:57:e5:a3:
                    5f:8e:c7:dc:10:1d:8b:4f:cd:54:40:ec:5f:71:45:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:73:EE:8A:F0:25:DA:67:E0:D5:4D:87:B0:E6:99:A3:88:7A:5B
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211975.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.8.0/24
                  185.137.15.0/24
                  191.96.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:84:cd:2b:db:c2:a9:79:68:9f:c2:ae:2b:86:c3:49:3a:
         f1:03:c2:c4:7a:ff:23:ee:57:e9:40:b2:87:cc:c9:de:2d:09:
         54:5e:47:67:dc:2b:39:6f:75:bf:8e:1d:d5:e6:d1:a1:fb:ba:
         de:5c:96:5f:c5:1d:7c:c7:f4:bd:65:2e:6c:80:74:57:bb:08:
         a1:26:10:b0:d7:e9:c8:3b:1b:95:3d:4a:ac:60:45:03:b7:74:
         e9:53:2a:40:9e:0a:72:21:7a:a7:83:46:32:02:99:65:6f:fb:
         96:38:d6:0e:11:d4:41:5a:12:3d:be:78:c6:3d:e6:96:69:02:
         1b:60:f8:96:fb:12:c6:82:a3:1d:b6:64:1f:4f:d2:18:29:a7:
         78:83:4c:54:50:53:6e:43:cf:58:4d:18:c8:ea:1e:90:46:de:
         4d:51:f1:74:a6:c9:92:0d:3a:38:81:04:19:e6:2a:13:5f:2e:
         d0:b4:da:62:c5:69:74:7f:0e:43:ab:4d:89:66:03:fe:1f:d8:
         50:c2:8c:ce:83:29:56:e3:a4:16:e0:4a:d5:37:2e:f4:3e:0e:
         9f:56:84:ca:c0:b5:f0:8f:2c:cd:27:9d:33:3f:12:a3:39:0d:
         ca:4d:a8:32:44:1d:75:36:54:f1:f3:95:69:57:f8:6a:2c:19:
         55:ce:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org