Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46337.roa
File:                     AS46337.roa (raw, json)
Hash identifier:          k/CJoUDXzT61UKwFe4sNLZpAygK+gZe9TjoEGcLHFJs=
Subject key identifier:   13:3D:86:BB:8F:F2:89:70:77:02:05:65:B1:F8:71:95:57:8D:DA:66
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       164468A4D85ADB839FFE0CF1A7B7222B09A9FB25
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46337.roa
Signing time:             Wed 02 Nov 2022 08:33:49 +0000
ROA not before:           Wed 02 Nov 2022 08:28:49 +0000
ROA not after:            Wed 01 Nov 2023 08:33:49 +0000
asID:                     46337
IP address blocks:        179.61.137.0/24 maxlen: 24
                          179.61.192.0/24 maxlen: 24
                          179.61.232.0/24 maxlen: 24
                          181.214.31.0/24 maxlen: 24
                          181.214.83.0/24 maxlen: 24
                          181.214.142.0/24 maxlen: 24
                          181.214.156.0/24 maxlen: 24
                          191.96.133.0/24 maxlen: 24
                          191.96.151.0/24 maxlen: 24
                          191.96.165.0/24 maxlen: 24
                          191.101.33.0/24 maxlen: 24
                          191.101.50.0/24 maxlen: 24
                          191.101.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:44:68:a4:d8:5a:db:83:9f:fe:0c:f1:a7:b7:22:2b:09:a9:fb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  2 08:28:49 2022 GMT
            Not After : Nov  1 08:33:49 2023 GMT
        Subject: CN=133D86BB8FF2897077020565B1F87195578DDA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:d2:53:1d:7b:c9:88:de:aa:64:1a:5f:d9:
                    b4:5a:8a:be:06:50:b2:8d:bb:8c:5a:f8:a9:a2:93:
                    39:3f:7a:c4:b1:61:de:35:62:a7:d5:18:24:51:6f:
                    40:75:7c:a6:8d:c2:2e:d6:30:3c:92:a3:39:fd:bb:
                    f1:25:5f:c7:06:59:d9:c8:04:ee:1e:7b:d7:b7:2c:
                    46:84:38:56:c3:cf:c3:b2:f4:84:54:cc:08:04:97:
                    aa:32:23:b8:41:e5:76:dd:46:6d:87:1a:7e:dd:5b:
                    9c:74:74:0e:9b:3f:ad:da:e5:1d:ea:47:3d:3b:08:
                    c3:cb:17:bc:f0:13:c6:d7:28:b8:94:66:f5:b0:5d:
                    b6:c9:58:6f:00:4b:01:06:d5:fc:d4:c3:de:98:f8:
                    fa:e2:eb:6d:64:26:09:1e:e9:0f:a8:91:39:9d:b3:
                    1c:03:22:bd:c1:21:9f:41:92:a1:94:72:ff:50:0e:
                    73:64:d6:26:68:0c:2e:b3:b6:7d:54:60:13:5e:ca:
                    03:86:05:84:d2:c1:15:20:ff:1f:4d:dd:34:e2:4c:
                    ec:82:84:9e:17:fb:95:ed:75:4e:05:08:1a:88:f4:
                    99:38:a6:8f:6a:0d:91:b6:fb:53:34:d4:16:19:d0:
                    76:9f:71:60:8b:9f:72:a3:19:b2:a3:9e:40:85:a0:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:86:BB:8F:F2:89:70:77:02:05:65:B1:F8:71:95:57:8D:DA:66
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.137.0/24
                  179.61.192.0/24
                  179.61.232.0/24
                  181.214.31.0/24
                  181.214.83.0/24
                  181.214.142.0/24
                  181.214.156.0/24
                  191.96.133.0/24
                  191.96.151.0/24
                  191.96.165.0/24
                  191.101.33.0/24
                  191.101.50.0/24
                  191.101.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e8:3c:97:96:42:a9:36:79:4c:09:99:d7:24:43:c2:0d:df:
         3a:37:35:70:37:07:3d:9d:d2:a8:f3:64:62:ad:1d:71:6d:37:
         56:a0:23:95:c9:6a:c2:24:77:7d:aa:9c:da:c3:1a:1e:49:83:
         23:61:72:4b:b3:4c:c1:35:28:45:2a:c9:4c:93:9e:6e:df:a2:
         5b:58:41:d8:3f:ac:54:3d:7f:3d:02:a1:7a:b9:83:78:84:5b:
         be:10:c3:70:5f:00:03:1e:a9:c8:b6:94:a0:b5:8e:66:a1:d2:
         82:70:2c:dc:d3:82:0d:d6:f6:60:6b:dc:3a:d7:30:4c:78:1a:
         64:30:ac:b7:34:58:9a:51:39:a6:2e:d7:ab:dd:7a:2a:2d:5f:
         d3:44:8c:ba:90:0a:54:28:b2:c6:5a:2c:07:d6:b4:7f:53:ab:
         23:02:45:8f:b2:82:5b:7e:65:9e:a2:56:34:9e:dc:de:38:3f:
         8e:b3:89:79:0f:78:2d:ce:6f:9b:a5:09:42:57:de:93:73:e2:
         87:ef:9e:20:78:ff:50:c6:a1:de:bf:20:84:42:8f:4b:a5:a7:
         1a:f4:ec:a8:67:f3:85:2c:e1:96:bf:2e:d0:d0:98:62:da:6d:
         1f:5e:b6:ce:b4:6c:ea:3a:82:2c:3b:26:76:f7:48:19:82:33:
         76:ea:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org