Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS49832.roa
File:                     AS49832.roa (raw, json)
Hash identifier:          ims5MV4q8JEM8NSZkVaWDxCgNXWtV0Je5Nwq1AGbyMk=
Subject key identifier:   21:F3:9B:78:BD:AC:60:37:A0:03:33:08:29:1C:43:21:56:45:5A:25
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       7C0D8F77469D7697CAD7735E6E478452DDA8A8C7
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS49832.roa
Signing time:             Thu 03 Nov 2022 17:30:32 +0000
ROA not before:           Thu 03 Nov 2022 17:25:32 +0000
ROA not after:            Thu 02 Nov 2023 17:30:32 +0000
asID:                     49832
IP address blocks:        185.135.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:8f:77:46:9d:76:97:ca:d7:73:5e:6e:47:84:52:dd:a8:a8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  3 17:25:32 2022 GMT
            Not After : Nov  2 17:30:32 2023 GMT
        Subject: CN=21F39B78BDAC6037A0033308291C432156455A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:9b:68:e6:a8:ad:7d:b6:41:58:b3:55:1c:
                    4d:73:87:01:93:3a:8c:af:d8:82:04:c1:4c:5c:a3:
                    82:2c:cd:30:bf:35:28:de:b3:89:85:c5:8b:7e:94:
                    b2:9b:e6:d7:77:93:fa:f5:b5:dd:72:78:b2:ec:56:
                    2e:6e:ac:21:81:9b:21:7f:89:19:00:51:84:56:f9:
                    c5:4c:3d:d2:cb:10:6d:44:ad:13:d9:1d:6e:e0:88:
                    49:45:17:76:b7:40:f4:37:af:fe:0d:d1:12:7c:1e:
                    6e:c9:23:26:be:ee:4b:fb:8b:c8:0d:b9:10:47:f2:
                    5c:b2:fb:11:5d:3d:1b:54:04:42:25:ad:09:63:21:
                    4d:74:81:d3:58:36:b0:97:f6:b5:b5:dd:46:eb:ab:
                    56:f5:db:09:bd:a2:bf:d1:9f:a3:4e:1d:55:7c:fd:
                    9c:5c:75:7e:e4:dd:7b:a8:7b:26:df:15:3e:19:02:
                    bc:8a:49:a3:6e:ce:ed:7b:8c:52:89:4e:ca:ef:a3:
                    d1:af:32:63:33:f4:b0:d4:72:34:89:56:68:37:44:
                    73:fb:ce:6e:5c:03:19:b9:c0:df:10:4f:21:04:ec:
                    d2:85:32:9f:57:ec:15:3d:25:c1:d1:1e:06:ca:52:
                    bc:c2:85:72:cd:3b:43:6a:9b:08:22:fb:87:af:19:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:9B:78:BD:AC:60:37:A0:03:33:08:29:1C:43:21:56:45:5A:25
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS49832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:dd:86:42:da:82:7d:b4:86:94:ee:62:cc:35:8d:01:b0:
         41:8c:26:6a:30:f4:0f:23:79:4a:2c:9d:34:b7:ae:e5:d7:0a:
         4d:d5:07:ac:a9:b7:32:e5:5d:a3:ec:40:ba:1f:1b:e3:77:39:
         9d:bd:b9:80:18:c7:ac:64:48:ca:c5:7b:e7:ef:d5:8d:5c:1e:
         85:46:40:47:ea:15:94:e5:c8:3a:5f:6a:b1:50:cc:b2:40:93:
         50:09:7f:39:59:45:f2:c7:e3:53:23:c3:9b:f4:7d:52:21:cc:
         1c:a2:a1:00:bb:e6:97:89:3e:00:d6:16:91:bc:5a:6d:8a:3f:
         dc:92:6a:3b:00:71:f4:a2:18:1e:d2:0c:38:1e:5a:e6:16:4e:
         c2:26:e1:cf:f8:73:4d:b0:71:55:52:25:7e:e2:23:c6:e4:b8:
         f7:16:68:99:90:85:a7:f5:a6:78:6e:da:c6:3c:c4:3d:c6:e2:
         2c:b3:9b:cc:1e:2c:05:0e:49:1d:1f:73:e4:55:b1:70:23:15:
         53:78:8f:31:50:0c:93:dd:e0:36:f7:22:3c:a2:ae:65:f6:14:
         76:91:a4:2c:b8:ee:66:bb:07:01:2d:5a:38:07:ee:47:5c:e2:
         38:2c:60:21:8e:9c:27:9b:1e:02:47:8c:6e:c2:c3:c2:59:5c:
         89:c1:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org