Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213074.roa
File:                     AS213074.roa (raw, json)
Hash identifier:          XgGvqbo2GN3hJ7wr77yHir8fWzA0M/RBgtBmrbWtlEk=
Subject key identifier:   D1:3D:BF:5C:D7:46:06:74:EC:B2:43:12:32:AD:AB:3A:C4:99:6D:26
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       2520317B0272AA51A3E56A00D7BEA98245C0B96C
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213074.roa
Signing time:             Thu 24 Nov 2022 13:42:25 +0000
ROA not before:           Thu 24 Nov 2022 13:37:25 +0000
ROA not after:            Thu 23 Nov 2023 13:42:25 +0000
asID:                     213074
IP address blocks:        181.215.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:20:31:7b:02:72:aa:51:a3:e5:6a:00:d7:be:a9:82:45:c0:b9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 24 13:37:25 2022 GMT
            Not After : Nov 23 13:42:25 2023 GMT
        Subject: CN=D13DBF5CD7460674ECB2431232ADAB3AC4996D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:b5:49:7a:ff:b4:8c:f6:6c:1d:2a:a8:ca:
                    62:42:09:ef:f5:65:01:dd:05:d2:7f:67:69:48:b0:
                    27:da:fa:8c:8b:4a:05:7d:15:8e:99:3d:65:1a:92:
                    ee:68:bb:31:0c:0c:45:6f:e9:d0:e7:5f:d1:a1:c3:
                    37:e6:dd:3b:f5:fb:d8:9a:9e:0e:87:08:80:75:f9:
                    f9:c1:4c:71:dd:5b:27:55:5a:13:69:be:3b:5a:60:
                    21:13:4c:33:4b:7f:6a:08:1f:38:7b:db:45:b3:81:
                    e0:f6:06:d7:8f:8b:1d:2f:c5:60:48:8e:7e:e4:92:
                    89:70:25:77:c9:0a:ce:bc:45:a1:b4:4a:ab:a4:2f:
                    28:23:e2:8c:36:be:38:a5:47:5e:f7:65:0b:7a:ab:
                    28:8e:df:6e:6a:72:96:26:92:50:85:70:c2:97:d5:
                    f8:af:77:76:10:5b:7f:c5:7b:0b:3b:22:34:08:b8:
                    62:93:01:c1:0c:be:f8:c7:d3:95:ee:07:27:50:a3:
                    e2:90:ee:d5:bf:20:97:b9:e9:a4:19:e9:38:fa:d5:
                    bf:2b:61:33:95:a4:f8:5f:fd:71:cd:53:e1:bd:a8:
                    9d:3e:21:42:12:54:97:e3:06:cb:30:25:e7:0b:d2:
                    e3:04:47:9b:04:d9:fa:40:ee:1c:41:10:16:2a:dd:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3D:BF:5C:D7:46:06:74:EC:B2:43:12:32:AD:AB:3A:C4:99:6D:26
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213074.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:c9:a5:71:4b:4d:9e:2c:b6:b1:d9:d8:3e:ea:d1:10:31:
         88:3f:86:1f:fc:e9:f6:8b:cb:8d:13:a1:64:02:92:3a:78:51:
         93:f8:12:3f:49:3c:50:b8:62:13:eb:94:48:af:38:96:0c:6e:
         2f:a6:13:b9:28:e2:fc:56:cb:b1:c4:d7:49:5d:a0:b2:f3:87:
         24:7d:1c:37:4a:0c:16:c7:92:9c:92:82:a4:ca:1f:95:32:4a:
         db:00:76:8b:67:0a:6b:c9:53:9c:e0:4f:4e:0c:42:bf:db:1e:
         32:62:21:68:23:3b:d0:95:58:03:68:51:44:84:c7:a9:cb:9e:
         3e:28:8f:ec:ca:ca:ca:cb:37:37:fc:dc:43:2f:b1:f6:31:44:
         aa:14:ac:f0:1e:b0:39:e1:7e:42:98:5e:6e:d7:02:99:f9:26:
         7a:19:dd:a9:df:d2:2b:86:cd:0e:19:91:4b:ae:cd:00:ec:73:
         4b:79:6c:8e:a9:62:fc:40:05:f3:7d:73:68:14:b6:7c:68:c0:
         a8:c5:68:8e:eb:fe:cc:c1:32:f9:d9:80:9c:5b:c2:52:5f:6c:
         22:7a:94:0b:3f:19:3a:c5:b5:9d:85:c7:7d:fd:ad:75:df:cd:
         c6:1b:73:99:a0:a9:dc:4b:f4:41:e8:0f:e4:c4:24:ad:de:6a:
         32:85:50:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org