Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          9uVlOldSCQIg7wpVkOVeRjfoOGERqMEaoO6u6p28TjA=
Subject key identifier:   A4:69:26:16:21:EA:F0:CA:47:97:EE:74:F4:13:3B:AB:0A:ED:DC:A0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       2BC4D9403119804E7908E85094AE66E2FECFDD74
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396356.roa
Signing time:             Sat 27 Aug 2022 09:50:35 +0000
ROA not before:           Sat 27 Aug 2022 09:45:35 +0000
ROA not after:            Sat 26 Aug 2023 09:50:35 +0000
asID:                     396356
IP address blocks:        179.61.245.0/24 maxlen: 24
                          181.214.70.0/24 maxlen: 24
                          181.214.155.0/24 maxlen: 24
                          181.214.196.0/24 maxlen: 24
                          181.214.226.0/24 maxlen: 24
                          181.215.169.0/24 maxlen: 24
                          181.215.172.0/24 maxlen: 24
                          181.215.195.0/24 maxlen: 24
                          191.101.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:d9:40:31:19:80:4e:79:08:e8:50:94:ae:66:e2:fe:cf:dd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:45:35 2022 GMT
            Not After : Aug 26 09:50:35 2023 GMT
        Subject: CN=A469261621EAF0CA4797EE74F4133BAB0AEDDCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:f1:0a:2f:23:ca:a0:66:4d:13:9e:a1:e2:
                    b6:d0:37:ea:52:68:d6:6c:10:2e:39:61:de:fc:16:
                    90:94:c9:b2:52:28:92:03:3c:74:ac:4a:55:c4:02:
                    98:44:df:84:a1:9e:a7:41:36:3d:37:f2:55:c8:d2:
                    5f:45:c5:95:0d:8f:04:8b:40:4f:f8:9a:b5:b2:96:
                    4d:24:c6:2e:06:d5:99:71:f1:0c:05:30:96:24:37:
                    e4:74:3f:b2:6a:27:51:f2:2e:ec:70:3a:f9:f8:a2:
                    06:a2:1c:1e:61:13:d6:81:16:95:fc:e9:9c:c4:17:
                    67:36:eb:18:9d:a8:ce:12:6e:23:fb:b8:2c:7a:71:
                    b9:91:7a:d8:8e:6a:40:3e:66:21:b8:b7:11:47:fc:
                    c6:2e:5b:18:15:a7:58:73:be:61:71:f9:36:78:78:
                    93:b0:d5:8f:69:3a:99:47:32:e8:82:f5:a4:85:88:
                    da:ad:e9:f2:87:97:88:4f:80:fe:ef:46:fa:2e:68:
                    9d:3c:ca:03:3c:20:b4:0a:3c:c3:20:db:b3:a0:4c:
                    99:cc:51:15:d7:77:cd:f2:07:73:80:92:11:78:93:
                    8b:4b:67:c3:cf:dd:e5:77:d6:80:7d:fe:fe:c9:e7:
                    81:2a:01:92:96:26:32:88:28:f6:1b:e5:ea:10:a6:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:26:16:21:EA:F0:CA:47:97:EE:74:F4:13:3B:AB:0A:ED:DC:A0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.245.0/24
                  181.214.70.0/24
                  181.214.155.0/24
                  181.214.196.0/24
                  181.214.226.0/24
                  181.215.169.0/24
                  181.215.172.0/24
                  181.215.195.0/24
                  191.101.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:b8:67:b7:48:52:13:2a:55:7b:2c:d0:ee:6d:26:9c:55:b5:
         b2:15:70:d1:36:92:d9:23:a6:42:32:a3:58:25:51:0d:d1:64:
         63:8f:ea:d7:9a:09:56:b8:27:2c:4a:af:22:83:87:ae:05:6c:
         e9:54:ca:96:1f:90:2b:f1:08:58:48:32:11:fa:18:61:69:97:
         61:4d:fc:3e:1d:1b:a4:b1:ec:53:f5:a4:e1:3a:08:ef:23:3a:
         b1:22:ff:24:85:f7:62:89:73:d4:6a:4d:ee:74:31:55:13:1d:
         54:28:12:4a:1c:21:6c:29:82:59:e1:25:73:64:df:10:c4:b3:
         19:56:71:4f:3f:70:27:ef:74:54:c9:95:5c:64:16:a9:a9:ed:
         fd:f2:17:6c:73:be:93:6b:fd:09:80:fe:7b:24:2c:d3:45:57:
         f0:14:bb:e0:66:e2:a1:93:01:7a:84:08:48:b2:51:19:df:40:
         28:97:cb:6b:ef:33:5b:c4:74:e9:ab:3d:12:fe:41:d4:d8:16:
         99:a2:e3:40:a6:23:c5:51:51:83:89:4f:f3:a5:cb:6a:23:42:
         1c:b9:dc:0e:37:9d:9d:7d:18:a2:f7:a5:7c:59:56:c6:58:41:
         2d:c8:5c:db:73:a4:1a:33:80:3f:b3:9b:60:0d:2d:d8:aa:f1:
         ca:d4:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org