Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS47823.roa
File:                     AS47823.roa (raw, json)
Hash identifier:          sw1KywinKHeOchGhVCWAEAetv6FIfnBTMYVYj8s8vmo=
Subject key identifier:   EA:36:28:9C:04:97:79:C0:1B:2C:E5:F5:A3:21:51:5A:88:F1:E4:8D
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0700D495A4003CFCF8263BB73666BC23046BBD2B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS47823.roa
Signing time:             Mon 31 Oct 2022 12:32:06 +0000
ROA not before:           Mon 31 Oct 2022 12:27:06 +0000
ROA not after:            Mon 30 Oct 2023 12:32:06 +0000
asID:                     47823
IP address blocks:        89.19.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:d4:95:a4:00:3c:fc:f8:26:3b:b7:36:66:bc:23:04:6b:bd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 31 12:27:06 2022 GMT
            Not After : Oct 30 12:32:06 2023 GMT
        Subject: CN=EA36289C049779C01B2CE5F5A321515A88F1E48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:a9:34:c0:ec:5f:43:e8:17:e3:9e:ca:79:
                    a5:b5:6e:ca:30:f4:39:3b:40:a3:5c:33:b5:26:de:
                    59:66:dd:be:a3:a8:69:82:d1:f4:64:8a:06:4c:3e:
                    c4:37:50:ec:63:0c:b1:5f:d7:0c:94:e9:5b:78:95:
                    e1:ff:57:e0:66:7e:96:44:07:41:b1:28:39:6b:aa:
                    ae:cd:bb:75:86:d2:93:a1:5e:ff:c0:c6:ff:12:02:
                    38:6c:ad:d0:3b:e2:46:dd:bb:1e:2e:81:27:2d:94:
                    51:f0:02:58:d3:eb:a1:19:11:98:0c:be:62:04:e6:
                    8d:44:ab:ad:c7:e1:f8:4a:b3:4c:97:da:c0:a8:74:
                    3b:8d:86:cb:68:b0:e7:62:f1:0c:c9:c6:9f:4a:91:
                    50:2c:4c:21:65:7e:25:85:ed:e1:bf:38:38:42:63:
                    26:ed:4f:48:96:5f:8a:91:fc:a1:75:e5:e4:ac:3b:
                    72:88:32:c2:a3:46:e7:1f:83:c3:59:85:08:54:1a:
                    57:ce:2f:09:a6:d7:ee:53:10:45:4e:08:87:f4:d6:
                    c4:52:bb:c6:5d:94:03:32:aa:88:f2:43:ef:cb:d8:
                    3f:73:1c:fc:ce:71:52:e9:ba:a3:28:e1:31:b9:f9:
                    cc:9d:52:57:b4:7e:17:32:03:4b:ce:7e:52:46:c2:
                    4f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:36:28:9C:04:97:79:C0:1B:2C:E5:F5:A3:21:51:5A:88:F1:E4:8D
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS47823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.19.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:27:22:41:65:a4:46:07:ec:85:7a:ec:4c:67:83:a3:27:
         37:e3:ae:c2:a0:28:2f:46:2e:17:05:cd:4d:06:6d:8c:58:e8:
         e9:5b:bb:47:6b:03:ad:62:18:e8:76:64:51:26:9f:9c:5a:04:
         01:f4:ea:88:a3:be:36:3f:bc:ff:4d:40:6d:a9:1d:28:5a:e6:
         2d:d1:f3:62:8b:38:da:2a:42:41:c9:6c:4f:af:84:17:75:ec:
         ef:ff:95:fb:8b:0f:a7:8d:6e:3d:35:4b:b4:83:32:0b:fe:a3:
         bf:5b:98:64:7d:05:05:01:bc:f4:5d:4a:10:78:6c:0a:49:d7:
         92:0e:50:b2:cc:5e:41:b0:0f:63:ed:fb:bd:3e:07:50:8c:17:
         db:cd:4e:c1:85:73:fb:53:3f:b5:cd:ef:0b:50:53:e5:b4:9a:
         4b:d7:ea:9c:ba:6d:a5:ec:66:e0:5d:ce:ff:b8:a3:f9:c2:ea:
         eb:0b:c6:94:d8:de:42:c2:56:40:25:4f:19:f3:21:96:f8:1b:
         3d:33:8b:32:b2:e7:7b:3a:da:20:5c:61:3a:ba:e7:11:cc:a7:
         ed:9e:0c:51:e1:5c:ed:77:bf:39:76:49:42:b5:6b:6d:8f:d3:
         45:20:98:25:6d:81:af:ef:09:55:fa:bf:41:95:f1:27:9a:80:
         52:61:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org