Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3257.roa
File:                     AS3257.roa (raw, json)
Hash identifier:          rlOtWfBWcZAs6W1VAmhQi7riKf6V6ku0ear2I/hsR4E=
Subject key identifier:   8A:98:E5:17:77:BE:CB:7F:45:CB:FC:C9:79:66:38:EF:89:92:D9:AE
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       546FC6AAAD7B9A5788E1FDFE9AACF1B07F9AD782
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3257.roa
Signing time:             Sat 27 Aug 2022 09:50:17 +0000
ROA not before:           Sat 27 Aug 2022 09:45:17 +0000
ROA not after:            Sat 26 Aug 2023 09:50:17 +0000
asID:                     3257
IP address blocks:        181.214.206.0/24 maxlen: 24
                          191.101.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6f:c6:aa:ad:7b:9a:57:88:e1:fd:fe:9a:ac:f1:b0:7f:9a:d7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:45:17 2022 GMT
            Not After : Aug 26 09:50:17 2023 GMT
        Subject: CN=8A98E51777BECB7F45CBFCC9796638EF8992D9AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e3:39:36:b6:9a:cc:d5:b0:ef:b5:43:77:12:
                    e6:20:da:45:c8:5a:d8:7c:7b:67:44:1b:c0:a4:28:
                    e5:ef:46:01:f3:0e:a0:bb:d7:83:37:42:2e:44:a8:
                    9e:83:1b:e1:f5:17:0b:4b:09:a3:2f:d9:ab:8b:1b:
                    e0:9f:43:5e:61:f5:3c:00:a0:26:54:a8:fd:36:ca:
                    80:96:58:76:c7:1b:9d:ee:57:c0:f2:39:96:1c:48:
                    5c:92:f3:6a:8a:fc:e5:4d:6d:2d:1c:e3:84:3a:40:
                    24:ad:f2:6e:95:04:1f:3d:86:da:27:f2:6d:5d:ac:
                    20:31:5c:4e:d3:95:f3:74:ea:1f:fe:fa:a0:30:82:
                    40:b9:74:79:c7:a6:05:1e:6a:3d:d2:fe:fc:fa:7b:
                    32:72:61:26:f4:85:66:b6:f3:50:98:ef:e3:87:a9:
                    0b:8e:85:35:4b:e8:b0:f9:68:ad:e5:7e:fa:70:48:
                    e1:45:51:22:c8:22:91:85:9b:e5:92:df:9d:59:82:
                    47:a0:37:cd:49:13:61:31:f8:67:2b:46:c3:a2:61:
                    af:5b:02:c5:99:82:b5:ae:6e:9e:ee:3d:58:21:11:
                    66:a4:6c:88:eb:0f:d9:f0:33:f3:24:eb:02:4c:d6:
                    0e:1e:40:33:c3:86:08:2a:e4:1c:4b:c5:3b:7c:ad:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:E5:17:77:BE:CB:7F:45:CB:FC:C9:79:66:38:EF:89:92:D9:AE
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.206.0/24
                  191.101.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3a:bb:ab:59:09:34:55:40:ae:62:e0:c9:87:9f:57:15:e9:
         ea:6a:ea:e0:80:2d:c2:6f:01:4f:70:db:f7:d6:64:29:d8:72:
         96:ab:ac:72:b7:90:71:b5:8b:ff:2d:f2:33:24:98:57:a1:e1:
         4a:e3:69:fb:25:d6:44:c1:50:7b:d6:a7:16:fc:3b:e2:9e:2d:
         ec:4c:c6:95:91:49:c2:de:84:04:97:85:6f:16:64:35:84:7e:
         78:9c:30:1d:57:80:23:06:5b:65:65:98:e4:d2:95:d4:50:c5:
         f6:11:2e:ea:22:43:bc:1f:87:20:d2:ad:22:c8:2b:ae:65:87:
         c7:90:3e:96:ab:d7:72:e5:e2:0e:0e:26:ed:21:3b:2d:05:37:
         fa:76:45:28:22:83:4d:df:1c:77:6c:9e:19:79:5e:98:63:43:
         ce:38:73:b9:3f:4c:35:0a:a5:72:3e:b4:5b:b8:0e:01:3f:be:
         77:a0:b3:17:96:de:aa:20:f5:44:c9:7b:75:f4:b9:0e:b5:e9:
         13:96:b5:6a:b4:77:f2:da:cd:72:49:53:a3:e6:54:ea:43:86:
         ba:db:6d:24:86:a5:08:c7:15:e3:28:db:a6:69:4a:c5:c6:3f:
         a5:34:ab:b5:d7:e3:c4:62:60:1f:b4:90:08:a5:81:7a:ab:04:
         41:ac:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org