Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS36352.roa
File:                     AS36352.roa (raw, json)
Hash identifier:          g8Rd9nU9ZFtew8yunE4qtglq2+rn3XFl7AI64n1gZ28=
Subject key identifier:   CC:44:B5:AE:96:C6:84:7E:D1:7A:8B:B6:0C:63:27:31:62:2E:7D:90
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       16CB9BC8CAE0792EC7C9E2D7255FEC9B217D8208
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS36352.roa
Signing time:             Sat 27 Aug 2022 09:46:36 +0000
ROA not before:           Sat 27 Aug 2022 09:41:36 +0000
ROA not after:            Sat 26 Aug 2023 09:46:36 +0000
asID:                     36352
IP address blocks:        185.142.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cb:9b:c8:ca:e0:79:2e:c7:c9:e2:d7:25:5f:ec:9b:21:7d:82:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:41:36 2022 GMT
            Not After : Aug 26 09:46:36 2023 GMT
        Subject: CN=CC44B5AE96C6847ED17A8BB60C632731622E7D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:c1:35:9e:fc:f2:46:91:67:66:50:bd:b5:
                    15:41:9d:4a:35:74:33:97:48:77:79:14:9b:46:14:
                    5c:6f:92:a5:13:d5:65:f2:89:f8:ae:bb:b6:63:ed:
                    a3:35:72:28:a1:7c:20:4d:85:53:41:4b:f0:6b:b3:
                    79:48:fc:30:d7:42:16:aa:7a:1b:85:40:2c:b4:57:
                    eb:ee:57:97:6c:f2:0f:e7:da:c3:c6:64:29:93:88:
                    9a:d0:45:f7:83:00:d6:29:df:e6:52:a6:19:ae:01:
                    06:ec:45:ae:3f:fd:6f:07:37:32:14:f4:73:39:c8:
                    f0:36:34:8f:aa:92:2c:0b:a7:0a:65:dd:14:48:ca:
                    aa:e7:1f:e8:b3:b6:07:0c:ce:ea:7c:72:e4:75:ad:
                    81:2c:e7:34:98:5e:73:9f:0f:8c:64:cc:4a:8a:b4:
                    87:13:4c:91:1d:95:30:28:04:e9:a1:ff:d1:7f:ad:
                    90:87:96:c9:24:d4:6d:2e:84:cf:a2:0b:d8:75:69:
                    c4:5b:66:a3:c0:a9:8b:c7:e5:65:97:f1:6b:3f:79:
                    bd:d1:48:41:06:d4:b7:79:85:6b:88:da:d7:da:53:
                    e7:86:30:bb:c9:3c:54:9a:7c:92:93:f7:86:74:0a:
                    86:42:30:ed:f1:a0:49:94:8c:dc:13:a7:09:a4:ff:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:44:B5:AE:96:C6:84:7E:D1:7A:8B:B6:0C:63:27:31:62:2E:7D:90
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS36352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4b:e8:df:2e:1e:31:d9:d4:62:ea:bd:15:c3:24:3d:92:ef:
         0b:1b:b3:0c:59:e0:75:6f:f7:63:fb:11:d1:e4:93:60:8b:c7:
         b9:9e:d2:76:02:31:54:0a:25:9e:a5:d3:57:f5:5e:8f:6e:5b:
         32:01:bf:6f:78:d7:9e:69:7e:e3:c3:da:19:61:73:00:21:18:
         08:96:fb:04:44:5a:27:cf:11:f5:50:18:2e:d9:0b:65:f2:03:
         8d:69:30:ea:27:7c:5a:c3:eb:3b:ab:56:5e:f4:5e:ea:8b:1c:
         fe:d2:79:4d:d0:9e:6f:3c:0b:b6:85:09:11:48:9f:f3:79:ea:
         95:84:6b:93:e7:5e:cc:c4:42:2f:a3:51:91:b8:84:2a:1d:aa:
         44:35:73:b9:fa:f8:c4:96:74:e1:07:53:bf:8a:bb:b9:7a:f0:
         fb:34:3d:0d:56:04:a7:a5:6e:36:95:05:97:b0:86:ae:22:97:
         05:5d:d8:a2:58:3b:b2:4a:75:9c:8a:e4:05:6f:6b:83:bd:5b:
         90:3f:f9:84:a0:45:d7:04:72:71:88:9d:ec:be:75:b5:e2:8e:
         54:8b:85:d1:50:31:06:04:c5:86:44:18:e8:c5:5f:ca:11:e6:
         7f:89:67:01:4e:6c:ce:1d:78:4b:4c:e2:ed:08:3b:a5:28:f9:
         3a:7d:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org