Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42093.roa
File:                     AS42093.roa (raw, json)
Hash identifier:          Im2Ale7hVW8P5oTEfyPH7DwDNaOANVWlavX2ewwTaCo=
Subject key identifier:   62:15:6A:56:D5:D5:17:CF:A6:05:B4:7C:35:DA:07:C5:13:B9:F4:75
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       25FDBBAF77626B28D79EB909BBFD595BB33A34BA
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42093.roa
Signing time:             Tue 28 Jun 2022 02:07:34 +0000
ROA not before:           Tue 28 Jun 2022 02:02:34 +0000
ROA not after:            Tue 27 Jun 2023 02:07:34 +0000
asID:                     42093
IP address blocks:        191.96.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:bb:af:77:62:6b:28:d7:9e:b9:09:bb:fd:59:5b:b3:3a:34:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Jun 28 02:02:34 2022 GMT
            Not After : Jun 27 02:07:34 2023 GMT
        Subject: CN=62156A56D5D517CFA605B47C35DA07C513B9F475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:4c:4e:2b:79:fe:18:28:c2:25:3e:ba:7d:
                    af:95:89:9b:66:c1:7c:a2:ab:41:4c:7e:f3:c5:42:
                    63:2e:45:49:fa:28:91:3d:d2:08:41:51:99:38:10:
                    5a:fc:25:94:9b:2c:ee:92:d7:07:17:5c:f8:d8:e6:
                    3d:73:97:f9:4f:f6:6b:b1:d4:9a:58:3a:ca:ce:21:
                    8d:03:c6:f6:7f:47:d2:21:6a:5e:0b:60:8c:1b:b1:
                    dd:ba:f4:5f:c5:c8:d6:16:31:17:a3:d4:9a:ce:f1:
                    aa:53:ce:b0:3b:f4:c1:ab:1f:ce:f2:be:5e:8b:4f:
                    e7:09:49:b7:3b:e3:fe:71:3c:a9:95:3d:d3:5f:c7:
                    6b:87:ee:bf:23:ee:e1:73:12:4c:04:5c:3b:8d:5e:
                    6b:57:2a:1d:c3:09:93:d9:a9:7b:3a:24:62:97:3f:
                    92:6a:b6:40:ab:e2:70:fe:c0:23:2f:d5:ef:fe:5c:
                    ae:3a:d0:04:cc:2b:b3:de:1a:48:0b:0e:6a:20:af:
                    0a:8c:92:68:39:a1:9f:3a:e8:0c:f5:94:4d:d3:42:
                    91:eb:e4:ef:6c:c7:fb:74:1d:14:2f:1e:07:0d:9c:
                    54:f9:ff:ce:25:4a:84:f7:aa:06:09:3e:29:98:b4:
                    d1:93:06:da:77:13:60:45:2e:e0:c1:e4:06:1f:49:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:15:6A:56:D5:D5:17:CF:A6:05:B4:7C:35:DA:07:C5:13:B9:F4:75
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42093.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:26:93:13:ae:12:8e:93:97:1e:fb:46:26:91:c0:e7:c5:2f:
         18:25:fa:06:2c:f0:21:69:5e:f2:ef:df:54:89:fb:11:7f:f4:
         d7:05:82:19:c6:e2:12:52:58:17:88:db:6b:cc:e6:1b:cf:28:
         42:8b:54:27:8c:ea:cb:8a:de:d6:5e:c2:d6:11:06:d3:22:60:
         5b:2b:66:b8:b2:97:41:f9:f1:2d:6c:16:92:bb:fd:47:0b:61:
         6c:d3:19:e9:45:46:79:af:25:71:e3:10:3e:5a:d5:9b:db:8e:
         1a:75:e4:c6:d3:6f:b5:e1:43:89:4e:d9:c0:4b:11:e1:91:44:
         09:88:a7:11:73:c4:58:9e:dd:65:d7:2c:5c:c3:83:a0:4e:9a:
         d6:b2:cd:59:56:4b:64:15:75:d2:5f:66:a7:b8:a4:99:e6:0a:
         f5:0b:58:ea:cd:d2:e0:7a:46:61:b9:52:6b:b8:7c:33:69:3a:
         cb:a4:ef:ed:9f:c2:61:e9:63:fe:74:ea:6a:f1:4c:e9:9a:85:
         4d:55:ba:35:00:5a:71:bc:b5:87:aa:c2:6b:66:8c:77:9d:10:
         7e:b1:4b:c3:ee:85:eb:56:a1:25:1c:3f:98:55:c0:cf:74:e1:
         73:a7:5a:94:55:ef:06:59:49:47:c5:7d:1e:a9:0a:01:82:8c:
         57:a8:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org