Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS43260.roa
File:                     AS43260.roa (raw, json)
Hash identifier:          h+TF33QMpjmy0JvpnffjS++b7DHE/l5YOL5JEPqwNas=
Subject key identifier:   BA:6E:3C:EE:F3:39:50:C5:40:DA:25:D6:D7:AF:08:42:22:CB:E8:59
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       3D5509BD33033322EE6B0DF9F1A6D9E4BDE82533
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS43260.roa
Signing time:             Fri 25 Nov 2022 00:25:51 +0000
ROA not before:           Fri 25 Nov 2022 00:20:51 +0000
ROA not after:            Fri 24 Nov 2023 00:25:51 +0000
asID:                     43260
IP address blocks:        45.89.253.0/24 maxlen: 24
                          181.215.17.0/24 maxlen: 24
                          191.96.2.0/24 maxlen: 24
                          191.101.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:55:09:bd:33:03:33:22:ee:6b:0d:f9:f1:a6:d9:e4:bd:e8:25:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 00:20:51 2022 GMT
            Not After : Nov 24 00:25:51 2023 GMT
        Subject: CN=BA6E3CEEF33950C540DA25D6D7AF084222CBE859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:bc:23:f0:2a:c4:a0:28:be:ba:35:92:6e:82:
                    6b:e6:0e:19:f5:ab:0f:ae:3d:04:08:c7:5e:0a:ce:
                    9e:31:9c:f5:05:0e:40:fb:5a:e3:d8:0c:29:14:36:
                    0d:b7:d6:93:2b:52:d1:63:04:eb:f7:c3:9a:6e:b0:
                    d8:2e:9f:60:10:6e:cf:9d:c7:ff:22:0a:11:3a:3b:
                    76:5b:41:40:75:a5:93:7c:f3:c1:cc:8c:05:1a:aa:
                    1d:e2:f3:bc:6d:66:fd:ff:a5:b2:6c:94:bd:03:87:
                    1d:e5:1d:34:46:3d:39:24:2b:82:2c:93:ad:0d:4c:
                    19:a8:8d:8e:03:3f:ea:7b:00:10:24:05:4c:0e:a6:
                    ef:cf:a3:51:91:d0:e5:83:82:be:0e:ae:e2:e7:4b:
                    70:e3:be:51:25:59:0c:0e:16:6e:00:61:49:9d:2f:
                    cd:2e:06:12:35:7b:0b:1d:b1:af:76:f2:7b:0d:67:
                    ab:ee:98:dc:b9:61:94:84:21:8c:62:df:cb:dc:5a:
                    88:ea:d8:51:62:41:86:57:48:a7:3d:ff:d3:1f:62:
                    48:c2:74:6e:00:bd:7d:05:0a:a3:4c:31:fa:b0:a7:
                    6d:10:67:a1:bd:0d:f6:ed:a1:db:72:5c:3b:27:d5:
                    38:b8:51:3c:1d:a5:ff:76:49:5b:dd:e5:82:1d:17:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6E:3C:EE:F3:39:50:C5:40:DA:25:D6:D7:AF:08:42:22:CB:E8:59
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS43260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.253.0/24
                  181.215.17.0/24
                  191.96.2.0/24
                  191.101.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ad:c7:50:d0:39:a6:dd:a8:02:24:84:d7:15:bb:22:8a:c8:
         37:85:b2:c8:04:77:f0:8e:4d:78:bb:16:4a:72:2b:f5:68:f3:
         77:7a:f9:85:75:1d:be:45:4a:97:37:38:4a:2b:3e:a4:27:0e:
         b5:4c:b1:ae:96:8e:ed:1f:8a:d8:f8:91:10:36:60:df:96:39:
         ca:ff:8f:49:ac:c6:aa:0e:f3:d1:f2:c9:7f:38:91:da:65:36:
         5f:3f:bd:79:69:ff:57:2d:22:78:51:ff:e3:cd:9b:46:9b:a8:
         ab:8b:f7:17:b8:ca:26:a1:61:50:07:2a:a0:99:ea:15:ba:e6:
         32:bc:1c:b2:c1:47:47:2b:ef:b5:d1:ef:54:43:9f:61:1e:f1:
         79:ae:de:2b:6f:86:2d:de:e5:d4:99:9a:a3:dc:ea:da:6e:40:
         eb:4c:56:20:93:91:00:9c:c4:73:fe:21:bf:c0:45:ed:87:8a:
         db:6d:d8:d5:5a:97:78:3f:97:ad:21:eb:a3:50:bf:54:fd:07:
         fe:90:e9:44:fa:af:1d:83:25:b0:9f:46:90:51:a4:58:8f:24:
         b7:c8:65:99:06:b1:c3:2f:15:a7:23:c5:88:22:a0:2f:3f:58:
         01:35:85:b1:bb:ef:f8:78:f3:3c:bc:dc:48:d0:b3:ea:bb:1c:
         de:39:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org