Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          rr9h9XHhHlGIXhMntFCLFSbpl6vBvIxY18VyQW2gmXA=
Subject key identifier:   DF:44:2F:89:98:2D:1D:55:F6:4F:39:E7:34:AB:A1:A6:87:30:AE:F6
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       51E17BAD9C63C22853912D9A4C1AD816D0234AB3
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33696.roa
Signing time:             Tue 15 Nov 2022 13:32:25 +0000
ROA not before:           Tue 15 Nov 2022 13:27:25 +0000
ROA not after:            Tue 14 Nov 2023 13:32:25 +0000
asID:                     33696
IP address blocks:        85.209.179.0/24 maxlen: 24
                          179.61.150.0/24 maxlen: 24
                          179.61.154.0/24 maxlen: 24
                          181.214.39.0/24 maxlen: 24
                          181.214.41.0/24 maxlen: 24
                          185.170.42.0/24 maxlen: 24
                          185.172.57.0/24 maxlen: 24
                          191.96.197.0/24 maxlen: 24
                          191.96.204.0/24 maxlen: 24
                          191.101.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e1:7b:ad:9c:63:c2:28:53:91:2d:9a:4c:1a:d8:16:d0:23:4a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 15 13:27:25 2022 GMT
            Not After : Nov 14 13:32:25 2023 GMT
        Subject: CN=DF442F89982D1D55F64F39E734ABA1A68730AEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:30:b8:d0:ab:ff:57:5b:41:3f:d4:16:0a:
                    26:bb:af:6c:4c:13:5f:e9:30:6f:19:41:6a:fa:20:
                    1e:c2:5c:19:ca:68:72:d1:10:b8:d8:ec:fa:b3:74:
                    6b:d6:2f:1d:c2:16:da:7b:29:1c:5b:4e:f7:06:14:
                    6f:5b:ec:40:93:03:f0:ba:dc:eb:0b:1d:3f:fc:5b:
                    e2:54:75:cc:be:c0:83:6c:bd:4d:30:bb:3c:19:aa:
                    09:eb:0f:7d:16:46:8d:c1:4e:3b:2b:0e:b5:38:50:
                    cf:f5:5e:21:ed:11:bb:e2:21:2c:33:60:c6:a0:9b:
                    6a:ca:dc:3f:3e:43:f3:fe:b1:7b:18:85:9f:78:52:
                    9d:c7:cc:a9:dd:bc:87:be:67:92:8c:28:3b:3b:be:
                    9d:d6:80:62:1e:d6:d4:a4:ac:91:56:61:b4:b5:8a:
                    27:6b:60:18:5c:39:e2:6d:5c:5e:78:95:4b:ef:fb:
                    ca:dd:8e:90:76:06:05:72:ad:3c:9d:ac:6f:e7:32:
                    47:97:b7:06:8c:4a:7a:44:24:ce:6e:70:05:3f:3b:
                    2b:c2:48:cb:6c:ea:a3:09:6f:9e:0e:25:40:f9:f7:
                    6a:d2:0c:e7:31:5c:d7:40:6c:fb:78:9e:94:1b:53:
                    77:b7:28:cd:fa:2e:3d:2b:15:f4:83:d6:16:b0:f2:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:44:2F:89:98:2D:1D:55:F6:4F:39:E7:34:AB:A1:A6:87:30:AE:F6
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.179.0/24
                  179.61.150.0/24
                  179.61.154.0/24
                  181.214.39.0/24
                  181.214.41.0/24
                  185.170.42.0/24
                  185.172.57.0/24
                  191.96.197.0/24
                  191.96.204.0/24
                  191.101.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:a9:9f:71:24:06:2e:c9:43:ce:2d:d7:3f:83:fb:98:4e:7b:
         77:6e:fa:8c:5e:8c:2d:29:87:38:0f:1a:be:00:3c:08:8a:66:
         05:ff:6b:5d:c1:f5:2e:42:98:2c:36:fa:90:9a:a5:d9:84:b8:
         3f:94:b0:37:7e:0d:3f:72:07:e8:dc:4f:84:5f:d1:7b:04:65:
         48:be:7c:f4:54:5b:56:5b:a6:9d:7b:ab:72:b9:ac:6e:f0:43:
         15:04:8f:ce:2f:54:ed:48:19:38:51:90:de:b5:a4:48:6a:1b:
         7b:a0:9e:91:54:fb:65:d3:c5:e8:8b:84:58:a0:34:d6:7e:11:
         b4:df:1c:70:1c:98:15:ee:ac:f3:9d:f6:54:1d:c5:3b:fd:2f:
         eb:f5:b5:c8:9c:ea:60:8b:fa:71:f9:62:4e:67:a5:06:ba:b7:
         21:0c:93:10:ab:0d:27:a3:e0:a9:69:13:a8:38:87:aa:61:63:
         1b:39:8b:39:e0:70:59:db:7f:d9:8d:10:ff:b0:e3:00:42:de:
         ce:47:15:30:29:a5:c8:96:a9:91:87:d9:95:af:76:20:2b:07:
         d9:86:bb:73:7c:fd:dd:61:ce:76:d7:4e:53:aa:fb:34:d4:87:
         eb:4e:93:1a:29:5a:39:bc:c8:08:ce:fe:f0:4c:1a:ce:e7:55:
         48:6d:59:30
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUUeF7rZxjwihTkS2aTBrYFtAjSrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjExMTUxMzI3MjVaFw0yMzExMTQxMzMyMjVaMDMxMTAvBgNV
BAMTKERGNDQyRjg5OTgyRDFENTVGNjRGMzlFNzM0QUJBMUE2ODczMEFFRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLzC40Kv/V1tBP9QWCia7r2xM
E1/pMG8ZQWr6IB7CXBnKaHLRELjY7PqzdGvWLx3CFtp7KRxbTvcGFG9b7ECTA/C6
3OsLHT/8W+JUdcy+wINsvU0wuzwZqgnrD30WRo3BTjsrDrU4UM/1XiHtEbviISwz
YMagm2rK3D8+Q/P+sXsYhZ94Up3HzKndvIe+Z5KMKDs7vp3WgGIe1tSkrJFWYbS1
iidrYBhcOeJtXF54lUvv+8rdjpB2BgVyrTydrG/nMkeXtwaMSnpEJM5ucAU/OyvC
SMts6qMJb54OJUD592rSDOcxXNdAbPt4npQbU3e3KM36Lj0rFfSD1haw8quhAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU30QviZgtHVX2TznnNKuhpocwrvYwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMzMzY5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBVBggrBgEF
BQcBBwEB/wRGMEQwQgQCAAEwPAMEAFXRswMEALM9lgMEALM9mgMEALXWJwMEALXW
KQMEALmqKgMEALmsOQMEAL9gxQMEAL9gzAMEAL9lzzANBgkqhkiG9w0BAQsFAAOC
AQEAIKmfcSQGLslDzi3XP4P7mE57d276jF6MLSmHOA8avgA8CIpmBf9rXcH1LkKY
LDb6kJql2YS4P5SwN34NP3IH6NxPhF/RewRlSL589FRbVlumnXurcrmsbvBDFQSP
zi9U7UgZOFGQ3rWkSGobe6CekVT7ZdPF6IuEWKA01n4RtN8ccByYFe6s8532VB3F
O/0v6/W1yJzqYIv6cfliTmelBrq3IQyTEKsNJ6PgqWkTqDiHqmFjGzmLOeBwWdt/
2Y0Q/7DjAELezkcVMCmlyJapkYfZla92ICsH2Ya7c3z93WHOdtdOU6r7NNSH606T
GilaObzICM7+8EwazudVSG1ZMA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org