Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33387.roa
File:                     AS33387.roa (raw, json)
Hash identifier:          yaX2Hs4YZBqJkdYF0dK7uDsoBfNQWyA86vbUsAtxn68=
Subject key identifier:   69:09:32:D3:CA:23:C4:73:FF:AD:23:96:FE:AC:40:2E:50:6F:0F:A8
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       118BE5E739D60CE7D87640B5B2656AECAF7F50CF
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33387.roa
Signing time:             Fri 25 Nov 2022 00:13:06 +0000
ROA not before:           Fri 25 Nov 2022 00:08:06 +0000
ROA not after:            Fri 24 Nov 2023 00:13:06 +0000
asID:                     33387
IP address blocks:        181.215.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8b:e5:e7:39:d6:0c:e7:d8:76:40:b5:b2:65:6a:ec:af:7f:50:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 00:08:06 2022 GMT
            Not After : Nov 24 00:13:06 2023 GMT
        Subject: CN=690932D3CA23C473FFAD2396FEAC402E506F0FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:c9:23:34:f7:68:9a:2c:98:18:cf:a0:03:
                    33:8c:cb:7b:ca:be:bb:c8:21:17:5d:e2:44:dc:9f:
                    5b:1b:e4:a9:35:20:b8:f6:bb:5d:23:c0:c1:a0:45:
                    73:99:ec:73:5c:82:91:fc:6d:a0:63:5c:ca:3e:67:
                    12:2f:a2:9d:86:e7:d7:a2:df:df:d9:91:98:7c:e5:
                    53:a2:13:70:60:d3:1c:ad:ad:0f:2f:91:3c:69:a7:
                    19:02:9f:e4:a5:1d:0d:8e:9f:cb:c0:3f:af:d1:89:
                    de:e0:13:ce:36:84:6f:e8:cd:62:a1:58:d2:a9:18:
                    13:ae:3e:83:3f:b9:bd:14:76:19:3d:76:6c:44:f2:
                    83:2f:26:3c:be:cd:61:86:30:6d:7e:9c:69:f2:5b:
                    24:d1:13:12:23:18:da:54:62:b5:d9:b1:4f:79:f1:
                    04:99:d4:f4:9b:4c:9c:51:96:57:f1:bc:ec:4e:b3:
                    a1:22:8d:02:c1:10:67:a4:be:50:18:a2:d4:c7:c7:
                    a7:78:91:7f:10:d0:39:80:10:b2:41:fb:04:36:2b:
                    d7:44:a7:27:f6:27:65:76:50:d9:62:f6:2e:2c:3c:
                    72:37:67:c5:40:0c:2b:01:6f:69:d6:36:b9:26:f0:
                    4b:c7:f9:a6:ec:ad:2d:c9:54:1f:d4:72:4e:33:03:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:09:32:D3:CA:23:C4:73:FF:AD:23:96:FE:AC:40:2E:50:6F:0F:A8
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33387.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:b8:46:44:0f:96:23:0d:bd:8a:1d:9d:f7:0f:85:25:4b:
         c3:08:ad:d0:53:15:3f:10:c4:58:c5:b5:e5:7a:4c:e7:2b:80:
         79:24:b8:13:8e:6a:5d:5c:eb:33:e3:c8:7f:c6:e7:de:8d:98:
         95:ff:bd:6c:5a:2f:5f:5b:57:5a:e1:1d:60:e9:ed:f2:34:42:
         08:50:7d:3e:b3:8e:40:d1:00:1f:ce:56:e4:3a:78:fa:73:fb:
         75:ba:aa:d3:25:08:71:a8:76:e0:67:80:d8:1f:77:0f:f4:27:
         70:d4:7d:ea:6c:c4:d9:eb:b2:67:7a:17:48:78:f1:f0:9d:6c:
         00:d7:3b:7e:83:a4:e5:75:4f:97:27:d5:75:e0:88:69:c5:5d:
         d1:79:00:58:f1:1b:32:42:83:d4:c4:38:a2:35:bc:f4:82:38:
         1a:b4:88:84:64:38:7b:d5:77:c3:12:e4:e2:c6:b2:ca:28:fc:
         1f:ec:81:5c:85:f9:63:aa:2b:0c:7a:81:7c:2d:34:aa:cd:e2:
         49:b0:a8:61:bb:f9:1b:f8:3c:20:a7:0b:f8:d7:ce:0b:1b:bd:
         52:94:29:c7:bc:6b:40:69:4a:70:28:b1:6d:08:de:49:47:7d:
         ab:7d:33:ad:1b:30:08:81:ca:69:a3:8b:98:c2:b6:23:90:d6:
         38:47:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org