Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS45671.roa
File:                     AS45671.roa (raw, json)
Hash identifier:          eJU7WmuILvtaoCgOVo5uHHK4yV8YraRyPjusbE9DaE0=
Subject key identifier:   ED:81:78:01:1B:8D:76:9D:CB:BA:0A:3E:DA:31:19:2C:4E:5B:39:61
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0CEF934DF8CC3F60125F099496D752458828F252
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS45671.roa
Signing time:             Fri 21 Oct 2022 20:20:32 +0000
ROA not before:           Fri 21 Oct 2022 20:15:32 +0000
ROA not after:            Fri 20 Oct 2023 20:20:32 +0000
asID:                     45671
IP address blocks:        179.61.228.0/24 maxlen: 24
                          179.61.240.0/24 maxlen: 24
                          181.214.17.0/24 maxlen: 24
                          181.214.43.0/24 maxlen: 24
                          181.214.112.0/24 maxlen: 24
                          181.214.162.0/24 maxlen: 24
                          181.214.163.0/24 maxlen: 24
                          181.214.174.0/24 maxlen: 24
                          181.215.168.0/24 maxlen: 24
                          191.101.37.0/24 maxlen: 24
                          191.101.141.0/24 maxlen: 24
                          191.101.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ef:93:4d:f8:cc:3f:60:12:5f:09:94:96:d7:52:45:88:28:f2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 21 20:15:32 2022 GMT
            Not After : Oct 20 20:20:32 2023 GMT
        Subject: CN=ED8178011B8D769DCBBA0A3EDA31192C4E5B3961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:1d:03:61:e4:0d:cc:27:06:f5:28:a1:63:
                    ea:e3:7c:2f:6f:0c:6c:49:a9:1e:11:8c:a7:17:da:
                    27:5e:8b:c0:ad:9f:89:a8:65:4a:5a:f8:14:27:e5:
                    7b:c5:95:b7:f6:5f:f4:a3:69:c6:2d:1f:3d:4e:f3:
                    60:b1:00:50:3f:3c:3d:c1:51:7d:2f:a2:fa:89:b5:
                    0b:a4:cb:15:68:83:69:f7:10:6b:ae:91:8a:2b:aa:
                    69:8d:dc:7c:f9:5c:d5:23:cb:c3:b8:dc:6f:82:89:
                    ff:03:8e:ad:89:28:56:62:14:3a:ce:b9:76:bd:5c:
                    62:67:9d:bd:01:9f:97:53:fc:bd:0f:7b:85:00:de:
                    77:70:00:59:ef:8d:8b:11:dd:2f:4c:b0:15:db:86:
                    6f:86:ff:84:02:7a:85:17:63:a8:c0:a8:cb:f7:bb:
                    55:cd:04:24:72:f9:70:94:88:5a:81:04:57:e7:4f:
                    82:35:f6:ae:12:e3:d2:da:d3:10:ca:62:b4:15:08:
                    e6:4c:a9:67:71:43:70:18:b0:f5:0f:f3:55:14:b4:
                    fc:5c:ea:15:2d:0b:ad:13:97:6d:62:1a:b5:0f:7c:
                    4d:b8:28:fd:25:08:56:7c:97:6d:aa:3f:75:a3:52:
                    3a:87:d2:9c:19:91:43:4b:c0:9b:8e:7d:d3:da:78:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:78:01:1B:8D:76:9D:CB:BA:0A:3E:DA:31:19:2C:4E:5B:39:61
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS45671.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.228.0/24
                  179.61.240.0/24
                  181.214.17.0/24
                  181.214.43.0/24
                  181.214.112.0/24
                  181.214.162.0/23
                  181.214.174.0/24
                  181.215.168.0/24
                  191.101.37.0/24
                  191.101.141.0/24
                  191.101.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:9e:ed:15:4b:47:22:b3:dd:9a:5f:e3:24:5e:0a:40:47:bc:
         12:6a:74:36:49:75:90:b8:1c:f1:9f:da:b8:c5:1d:c1:5f:1d:
         a6:1b:f6:50:a9:21:0a:f6:d5:76:a4:2d:35:2b:3c:bf:63:3d:
         4e:ca:7b:76:2f:1e:b8:73:eb:cb:6d:48:5d:9c:63:bf:3b:d8:
         ef:d7:fc:1e:01:94:ef:f8:35:ac:46:99:f0:ce:a6:98:88:7d:
         0a:96:a5:46:73:62:62:6a:c5:72:b4:24:69:8a:a9:85:91:8a:
         16:69:74:bd:be:68:57:d5:72:64:dd:a8:39:c6:df:1b:a1:3f:
         93:07:1f:bf:73:3a:e4:22:8b:87:4a:b7:8a:a7:42:44:bf:54:
         10:fd:77:5d:60:23:cd:fc:7d:db:d2:bd:64:77:7f:95:7c:28:
         f5:bc:8e:85:6f:fa:15:86:54:38:19:d0:ef:79:0c:e6:08:96:
         79:16:cf:4d:7c:7a:30:cb:1d:e5:e5:42:b4:d8:8a:4b:15:db:
         90:ac:43:74:20:d3:d0:4d:1e:13:8e:33:c7:fe:15:65:91:24:
         dc:81:18:7d:4d:af:47:e3:83:3a:31:37:90:73:e3:42:b3:12:
         51:a3:25:07:4b:c5:8b:65:37:65:18:6c:d1:2a:2a:a9:80:af:
         b2:3b:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org