Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213060.roa
File:                     AS213060.roa (raw, json)
Hash identifier:          NWjpXKxnsstRQ0XP+/W3NyJ14Q7Ix4ID9JQ7qFIab7U=
Subject key identifier:   6F:9F:09:EC:6F:8D:09:06:E2:26:EF:55:C1:10:68:46:04:7E:3F:8B
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0457626C6CCD0AF9FF125EE54AABE908D6C9440A
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213060.roa
Signing time:             Fri 25 Nov 2022 16:48:51 +0000
ROA not before:           Fri 25 Nov 2022 16:43:51 +0000
ROA not after:            Fri 24 Nov 2023 16:48:51 +0000
asID:                     213060
IP address blocks:        181.215.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:57:62:6c:6c:cd:0a:f9:ff:12:5e:e5:4a:ab:e9:08:d6:c9:44:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 16:43:51 2022 GMT
            Not After : Nov 24 16:48:51 2023 GMT
        Subject: CN=6F9F09EC6F8D0906E226EF55C1106846047E3F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:bd:22:ea:b4:5c:bc:4c:3a:55:ca:e8:af:
                    4f:fd:a1:7e:5d:ea:a6:70:43:93:3a:9b:6b:7f:e3:
                    16:65:f7:9b:e2:f9:15:89:00:44:c8:27:0c:77:7e:
                    ac:75:20:26:8a:12:bd:c0:e1:e2:db:d5:52:be:1b:
                    23:c8:ee:55:74:71:6a:3e:cb:cd:ee:86:db:9e:a2:
                    7e:22:eb:53:e5:3d:38:6f:3a:4e:32:66:9f:9b:26:
                    69:97:0b:0a:4e:4e:dd:93:56:df:a2:43:85:cb:73:
                    2a:27:13:48:33:a4:6e:d0:00:7b:b6:4b:ae:b0:c4:
                    45:ee:60:4f:07:38:6e:7b:b6:5b:ef:49:9d:97:5d:
                    72:dd:a8:ca:55:8f:d0:46:67:76:0d:ed:e4:87:c7:
                    42:1e:bf:4e:aa:29:d4:c5:5a:ab:88:c9:ac:49:65:
                    21:e4:40:e4:f6:d4:02:98:05:4e:a8:c1:43:a9:75:
                    ef:9f:d7:58:e1:ce:4d:41:5e:8a:3c:ca:fd:a0:71:
                    66:6a:7f:37:6d:57:40:7a:20:3a:ac:68:b8:63:a9:
                    f4:e2:b5:be:c6:3c:0c:fe:9d:3a:5f:a8:87:3a:0c:
                    cc:dc:40:da:8f:d0:b6:7f:5f:7f:14:d9:10:9d:b0:
                    80:2d:9e:09:bb:57:fe:eb:a9:8e:a7:bc:06:5e:c4:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:09:EC:6F:8D:09:06:E2:26:EF:55:C1:10:68:46:04:7E:3F:8B
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213060.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e4:d6:0e:1d:5d:3a:87:4f:99:d4:a4:86:37:26:a5:c7:1d:
         4c:9b:4f:7f:ea:2c:28:ad:56:38:5d:96:93:61:27:b0:c0:cd:
         1a:47:da:1c:0d:1d:9f:52:82:b8:a5:3b:da:84:4b:45:2a:7a:
         2c:97:78:99:26:fe:53:b5:a7:d3:96:79:a7:34:af:eb:aa:a7:
         b8:b7:d4:e6:53:c3:e0:4a:30:18:43:cb:bc:f1:60:9d:2b:59:
         47:c5:89:48:04:52:79:82:30:12:a8:72:8a:4b:ec:73:d3:fa:
         76:6e:3f:cc:1f:8e:7e:e4:30:b1:16:e1:cc:38:3e:6c:23:a7:
         32:36:65:df:a1:15:e7:1f:14:f4:09:47:e0:e0:0f:35:9a:98:
         6c:32:db:68:9b:07:50:48:9f:ef:8a:4f:7d:56:d2:8e:1e:2d:
         61:65:45:8a:91:4a:6e:ab:2f:8f:80:f9:b6:58:fe:52:7a:57:
         0f:67:63:64:18:e7:56:40:11:b9:7b:6b:b8:4f:38:f1:c5:50:
         9d:5c:c2:29:4f:d1:21:6d:3f:01:f6:58:c9:a3:f3:b5:15:62:
         52:86:85:97:8d:19:07:72:26:19:d8:6a:dd:77:ed:06:af:d4:
         c9:ee:14:38:de:ae:8d:4f:e8:02:38:f0:a0:07:4e:ed:b8:94:
         95:18:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org