Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212335.roa
File:                     AS212335.roa (raw, json)
Hash identifier:          6RzlwHW5edISlnOQ//uwPbtn5EExbNAisFUROrGGVoE=
Subject key identifier:   56:B8:97:07:42:81:5A:98:F2:4E:78:FD:06:25:45:5B:60:88:66:F0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       3998725A013E5FA0F49C1F72D4E9F386F8681389
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212335.roa
Signing time:             Wed 02 Nov 2022 01:02:25 +0000
ROA not before:           Wed 02 Nov 2022 00:57:25 +0000
ROA not after:            Wed 01 Nov 2023 01:02:25 +0000
asID:                     212335
IP address blocks:        45.137.157.0/24 maxlen: 24
                          191.96.18.0/24 maxlen: 24
                          191.96.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:98:72:5a:01:3e:5f:a0:f4:9c:1f:72:d4:e9:f3:86:f8:68:13:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  2 00:57:25 2022 GMT
            Not After : Nov  1 01:02:25 2023 GMT
        Subject: CN=56B8970742815A98F24E78FD0625455B608866F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:da:ae:dc:32:4c:d7:0b:c0:56:b2:8e:b8:
                    6a:02:03:1b:48:82:f0:9b:d4:a0:17:ec:15:e4:fd:
                    e1:47:75:15:46:e3:a5:53:8c:cb:9b:2f:68:0f:f4:
                    00:a0:03:5a:ac:a8:1d:c7:ea:50:9f:3d:4a:4d:d1:
                    b5:db:af:bb:f9:f4:0e:5f:a8:32:32:22:19:a0:18:
                    b0:8f:f7:82:20:70:fd:59:cd:a5:39:b0:fe:5c:e7:
                    62:ba:ca:1d:18:97:69:a1:07:bf:4d:51:d8:ce:68:
                    7c:37:ea:bd:8a:95:67:ea:b0:fc:a2:11:df:78:be:
                    01:c5:d3:55:74:b3:d7:bc:45:36:66:94:eb:57:76:
                    e2:68:87:e6:9e:fd:21:af:cc:ad:a9:7f:b6:d6:81:
                    62:06:1d:45:11:a6:ef:0f:32:4b:c6:e4:b2:0b:b2:
                    a6:d6:a5:0c:f1:a3:1e:f4:10:14:e3:ce:94:0f:69:
                    72:9a:ba:81:73:07:ac:4b:7a:4f:e2:6f:e0:1d:00:
                    43:d9:54:00:24:0f:49:5d:2c:33:13:86:c6:c7:44:
                    84:37:09:7a:27:11:4e:71:20:b9:f2:13:ef:b1:26:
                    8e:96:58:f1:c3:68:52:b7:7b:5e:3e:35:96:2b:21:
                    68:f0:2f:b6:bc:c9:79:64:45:71:dd:2c:5a:0b:13:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B8:97:07:42:81:5A:98:F2:4E:78:FD:06:25:45:5B:60:88:66:F0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.157.0/24
                  191.96.18.0/24
                  191.96.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:8f:3a:e5:b9:22:12:2b:dd:9d:0c:48:bb:c9:bf:06:c7:
         fe:67:2f:94:d6:5b:41:56:05:1d:86:43:f2:89:da:02:df:a1:
         b1:3b:04:ee:ce:bb:04:01:be:19:0b:33:67:f1:20:b3:a6:b3:
         8a:4b:6f:6b:e0:f8:31:88:13:c5:0b:88:eb:bf:cc:2b:61:26:
         d1:2b:0e:7a:ac:d8:05:28:23:78:89:f9:69:92:c3:9b:f7:ba:
         89:52:e5:01:17:d7:12:d3:35:73:69:92:37:f8:31:d4:aa:76:
         9c:59:1c:ef:f2:45:63:73:9b:e7:57:4f:80:fc:d0:78:5c:ec:
         09:06:30:a3:ef:89:26:00:13:40:d2:8d:05:0c:52:4c:94:86:
         44:24:48:05:e0:c9:a3:11:8a:c4:61:d4:a0:d1:53:7b:cb:79:
         96:62:50:99:0c:f3:af:f3:5a:95:60:31:65:3a:ae:3c:ce:6e:
         4f:3b:01:18:2e:a9:f0:f3:cb:65:aa:96:5b:4c:24:20:bf:09:
         81:a4:bd:10:3f:ab:b5:ec:77:3a:9e:26:a5:42:64:61:2e:76:
         77:0c:11:50:0a:79:11:09:14:e3:ef:f0:8d:0e:7f:6f:1e:87:
         18:f6:f9:4b:55:87:74:27:21:52:08:8b:e9:1c:ff:ac:d8:6b:
         78:ae:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org