Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS49981.roa
File:                     AS49981.roa (raw, json)
Hash identifier:          FeMdtD6xpsIEkSZ81UPjjncYV3/lJd2Uk/Gly5LxjtQ=
Subject key identifier:   10:B2:2C:A6:EB:CB:6F:9E:FA:87:C5:C4:08:36:60:A2:3C:FB:E1:3C
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       128A5E03C719D000C10C1C16FFE2159A2E15A16A
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS49981.roa
Signing time:             Wed 23 Nov 2022 13:18:06 +0000
ROA not before:           Wed 23 Nov 2022 13:13:06 +0000
ROA not after:            Wed 22 Nov 2023 13:18:06 +0000
asID:                     49981
IP address blocks:        45.89.253.0/24 maxlen: 24
                          191.96.128.0/24 maxlen: 24
                          191.101.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8a:5e:03:c7:19:d0:00:c1:0c:1c:16:ff:e2:15:9a:2e:15:a1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 23 13:13:06 2022 GMT
            Not After : Nov 22 13:18:06 2023 GMT
        Subject: CN=10B22CA6EBCB6F9EFA87C5C4083660A23CFBE13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:20:a3:6c:38:1a:7e:1f:40:35:06:d6:4b:
                    0a:9a:35:bd:8c:02:5d:fa:3d:26:46:be:3e:6f:e3:
                    38:71:0a:c9:e9:4b:ed:2c:dd:a0:96:f7:c8:e4:8f:
                    ab:c0:b9:bb:ce:31:78:3a:cd:df:77:11:34:49:22:
                    af:66:a2:6e:9c:b5:42:be:1a:5a:21:4c:e1:1b:5e:
                    c1:fd:c5:8d:d9:09:ec:af:18:42:0b:79:26:3b:82:
                    62:c8:46:d0:a4:f9:66:94:21:b2:5a:59:95:ce:32:
                    af:ce:56:3c:fd:92:8c:26:e4:56:e6:fc:b6:68:24:
                    1f:b8:0b:34:f7:9f:e3:89:ad:f9:22:a7:d4:1e:aa:
                    7c:01:30:33:f6:6a:4c:d0:e3:d6:87:c1:41:e5:31:
                    61:48:5d:b3:2d:20:b3:dc:6f:a0:9c:b2:dd:6d:d3:
                    5a:cf:28:24:06:dc:53:75:b8:a4:03:05:dd:85:f1:
                    be:42:66:cc:02:76:9e:45:26:f2:ea:4c:dc:4f:dc:
                    fa:42:72:93:2b:fa:c8:49:a8:09:59:cd:fe:22:ac:
                    3e:0f:80:b6:00:5c:51:4f:16:c6:4f:1d:ab:2a:85:
                    04:20:30:28:46:15:37:bb:cd:a5:ac:dd:d0:70:0f:
                    12:50:bc:e5:64:d3:d0:13:3e:03:0a:68:ff:28:95:
                    66:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:2C:A6:EB:CB:6F:9E:FA:87:C5:C4:08:36:60:A2:3C:FB:E1:3C
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS49981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.253.0/24
                  191.96.128.0/24
                  191.101.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4a:9a:6a:3b:7c:9b:a9:0f:9d:c7:ce:3b:cb:f4:9f:5f:95:
         c0:bd:7c:78:74:2b:b1:e7:03:90:c9:c5:94:5f:b5:2c:ba:91:
         d5:1b:f6:34:b4:0d:0d:45:36:8b:da:62:3e:c5:ff:dd:ff:15:
         c4:e8:51:32:9f:fb:0f:62:27:01:8f:39:88:01:66:34:a6:92:
         55:9a:38:c2:e2:e6:07:d0:2f:24:49:d0:f1:de:68:58:a0:b6:
         f9:c1:7c:c8:a7:fe:69:a1:d4:6f:f8:30:93:ee:85:1a:cd:c8:
         79:00:1d:5e:b7:07:8c:60:b5:8f:5b:48:25:7f:12:7d:fd:0f:
         44:d6:8e:60:c0:fd:54:76:0a:93:08:d9:4e:66:3f:bc:61:af:
         a8:c6:a6:fc:1d:08:0b:5f:e0:a9:d8:39:27:d5:67:43:c8:c3:
         f6:f8:0f:1c:9e:89:00:6f:94:ce:a1:d9:6c:c7:f3:85:79:aa:
         a0:4a:22:85:59:5c:33:40:c1:db:2d:bc:85:48:a8:34:0f:17:
         b2:74:a7:40:32:0c:d4:8b:9f:30:46:0e:3c:dd:35:24:1e:5b:
         1e:37:a0:f3:6c:cb:23:a2:99:9e:b2:47:f1:84:14:44:4d:aa:
         3d:b4:0b:e7:e0:bb:d7:ac:3a:1b:db:87:8f:dd:8b:27:76:aa:
         4c:97:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org