Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397540.roa
File:                     AS397540.roa (raw, json)
Hash identifier:          Qmgnm+e19OyZTEk4NoiUGe/5ZNkpkHlUnYZQJaO1fBQ=
Subject key identifier:   9C:59:2B:E6:B0:9B:E9:BA:D8:5D:CE:EE:73:CC:FB:55:38:55:B6:DE
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       570946F8F4AA127E2C41F59CBD9643EA42364A53
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397540.roa
Signing time:             Sat 27 Aug 2022 09:42:49 +0000
ROA not before:           Sat 27 Aug 2022 09:37:49 +0000
ROA not after:            Sat 26 Aug 2023 09:42:49 +0000
asID:                     397540
IP address blocks:        181.215.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:09:46:f8:f4:aa:12:7e:2c:41:f5:9c:bd:96:43:ea:42:36:4a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:49 2022 GMT
            Not After : Aug 26 09:42:49 2023 GMT
        Subject: CN=9C592BE6B09BE9BAD85DCEEE73CCFB553855B6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:23:e1:fe:60:b6:10:11:c5:62:55:84:6a:
                    66:3f:e3:fd:88:80:db:b4:d6:7a:62:5b:ab:e4:34:
                    7d:b3:b0:b3:bb:03:75:99:6f:aa:22:3d:c5:9e:8b:
                    49:9a:a3:26:07:01:95:0d:ce:76:f0:d4:43:98:99:
                    cf:a6:b6:a1:c3:0e:1d:c4:98:f2:a2:e5:d2:a4:3c:
                    d2:c9:47:75:5d:c7:17:b5:e8:82:55:e5:85:e6:91:
                    d1:23:7e:b6:87:6b:e8:1b:f5:f2:32:77:f0:0c:1c:
                    a1:b0:de:cd:50:1d:a1:5f:e6:90:5d:b4:6b:56:b2:
                    26:c1:71:84:0f:95:e3:b1:f2:fb:fd:a8:4a:dd:de:
                    b2:e2:4e:c8:83:cb:d0:0b:fa:58:98:09:66:58:9f:
                    a6:0a:f6:e8:7c:32:33:6e:9a:e7:03:65:3d:b7:bc:
                    38:a9:1f:21:1f:73:33:44:7f:75:ea:a1:41:b4:33:
                    85:3e:13:b6:12:71:c0:e3:f4:80:a1:d2:35:05:40:
                    7b:12:a9:d7:45:d4:71:da:b1:a5:98:e0:49:dd:2d:
                    55:25:38:e4:2d:70:d1:a6:4c:1d:e0:4a:c9:d5:f6:
                    4f:47:f7:da:2e:bc:f7:1b:4f:7f:97:b5:7b:d2:ec:
                    24:db:8d:43:83:99:4f:5e:d4:9a:6b:87:8d:39:07:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:2B:E6:B0:9B:E9:BA:D8:5D:CE:EE:73:CC:FB:55:38:55:B6:DE
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397540.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:d0:02:0a:86:71:5b:1b:ef:c5:4e:20:b5:fc:08:44:f0:
         85:c4:e5:38:0e:22:7a:19:8b:18:8a:8e:c4:0f:c6:45:90:95:
         5a:d5:9b:a6:97:34:0c:a3:c5:2e:d6:07:25:de:5f:99:7a:8a:
         80:9c:91:0e:47:48:a9:1c:7d:52:40:c1:b5:0b:09:99:10:61:
         35:32:a7:d4:61:de:7b:a6:07:03:16:fd:0c:0b:28:c7:fe:1c:
         15:76:cd:71:ad:ee:fb:45:6d:d0:e2:60:ab:85:ef:86:bb:01:
         59:d3:16:ea:b2:86:78:a5:71:f8:50:da:1f:15:1f:18:dd:42:
         9c:16:fc:a0:c4:0c:bb:3f:11:c0:27:d8:ac:8d:c1:5d:94:ee:
         e9:b9:15:a6:ee:2c:55:f3:1d:a7:b6:56:7b:c0:45:69:a9:4b:
         9d:a3:ca:e4:ed:57:27:aa:d1:00:c1:5d:0d:df:d9:e1:a3:91:
         55:ba:67:c1:7f:da:43:f6:56:ee:16:36:f1:42:90:0a:07:d6:
         4b:0f:3f:27:71:1c:e7:0b:48:ba:85:b4:35:d4:d7:fa:20:a0:
         5b:2f:1e:6c:cf:05:65:e2:eb:26:d6:c7:18:93:5e:43:b5:03:
         a0:c1:ac:70:51:81:a9:de:43:4e:59:e9:a5:89:f8:4e:d2:d4:
         f9:82:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org