Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS32780.roa
File:                     AS32780.roa (raw, json)
Hash identifier:          dS4DpK2jsp+CkT6jf7Z67kX/u7xcbWG1IYiDdZl1bu0=
Subject key identifier:   51:23:D7:D1:E8:AD:74:5D:A5:7B:42:3B:AF:CE:8E:79:FD:CF:C9:93
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4FAD2D40A04C6E0077FDDE69E85C3E05E81E86EE
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS32780.roa
Signing time:             Sat 27 Aug 2022 09:48:13 +0000
ROA not before:           Sat 27 Aug 2022 09:43:13 +0000
ROA not after:            Sat 26 Aug 2023 09:48:13 +0000
asID:                     32780
IP address blocks:        191.101.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:2d:40:a0:4c:6e:00:77:fd:de:69:e8:5c:3e:05:e8:1e:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:43:13 2022 GMT
            Not After : Aug 26 09:48:13 2023 GMT
        Subject: CN=5123D7D1E8AD745DA57B423BAFCE8E79FDCFC993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:62:22:0f:0c:fd:6c:d2:ef:2b:b3:fa:6b:
                    64:37:9c:2b:a8:ca:2d:c4:aa:0a:ca:c3:aa:93:ee:
                    51:05:8b:bd:98:3a:45:2e:5c:11:40:3e:8d:5e:b2:
                    98:da:4d:a7:fe:b2:c6:d0:f7:02:bf:49:56:a8:45:
                    f2:4f:30:ab:a7:7e:36:b9:0e:c8:32:af:b8:fd:a2:
                    b3:5a:57:5d:12:f1:0b:b2:99:ba:36:58:79:33:15:
                    91:35:56:e9:12:e0:ac:31:c3:27:c3:6b:17:ad:2e:
                    35:1f:6d:e3:57:29:f8:20:bc:43:9a:28:fa:82:21:
                    f3:e3:4e:4c:1f:73:66:ef:96:b9:66:19:32:11:23:
                    80:1a:31:b9:74:56:f1:14:a2:b6:06:e4:58:57:34:
                    b8:0b:18:ae:a3:1f:ef:22:42:00:65:ab:5b:ae:f6:
                    90:00:33:57:7d:45:59:ed:39:e9:ea:f2:a1:29:ad:
                    9f:6f:2a:0d:d4:ac:97:65:3e:46:49:c5:28:36:47:
                    58:7c:0e:b7:7a:60:53:d6:2a:8e:77:1f:30:05:c3:
                    c6:85:a7:e7:6e:05:13:99:c9:75:9e:76:8c:11:a4:
                    ef:06:80:8e:df:b8:27:05:35:db:c6:a5:6a:58:7e:
                    6b:2c:c7:b3:7c:67:ed:68:bf:20:df:8e:19:0f:59:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:23:D7:D1:E8:AD:74:5D:A5:7B:42:3B:AF:CE:8E:79:FD:CF:C9:93
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS32780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:f3:a8:6b:ed:30:43:a9:95:3d:1b:ee:72:91:47:8a:31:
         ec:ab:54:be:bc:79:e8:41:a0:6d:b0:1a:42:69:1a:e1:2f:e2:
         f5:d2:aa:d0:ff:ea:04:d9:e9:e9:92:89:ad:c9:19:09:7f:d3:
         69:7b:b2:31:60:58:58:b1:ee:04:96:17:04:66:3e:a4:11:70:
         8d:d5:0d:a0:fa:e2:39:71:2c:ee:a2:07:58:ac:69:a2:e6:bb:
         54:63:5d:4d:8f:34:bd:b2:bf:64:8f:3a:cd:78:8a:33:22:18:
         bc:d5:9d:5c:e0:d2:b3:2a:25:ee:8f:00:46:3a:c3:33:6f:4a:
         18:f5:16:0b:6b:19:06:d6:9e:2a:c7:71:73:57:6e:74:f1:60:
         5f:78:f0:83:e7:d4:63:60:f8:3d:4c:a6:5e:ad:1c:17:86:47:
         8f:ac:01:01:19:a3:e3:55:e2:04:e1:0c:7e:73:bc:2f:8d:cd:
         cd:d4:6e:6d:9f:03:3a:6c:52:fa:23:83:be:39:24:0f:67:4f:
         5e:6e:34:9e:41:fc:29:f7:c1:86:f4:58:ef:24:ca:8a:b2:34:
         98:da:98:27:83:b0:f0:6f:4a:fa:d8:95:bc:75:9d:80:6b:6c:
         a6:ea:3d:be:ac:f3:98:f4:bf:d1:7e:7c:76:4c:b2:db:fe:24:
         cc:c8:9d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org