Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS51765.roa
File:                     AS51765.roa (raw, json)
Hash identifier:          XnAdSS6kxTtadqpQjti0O04mYhr+jeOfNstjEHhBhF8=
Subject key identifier:   5F:4E:CB:52:94:F9:E9:45:47:4C:0C:25:C4:91:56:E1:F1:DD:D4:B4
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       113FE94A8E5A4A7AF63BE5A33F32250DF31F4EA4
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS51765.roa
Signing time:             Wed 23 Nov 2022 11:14:06 +0000
ROA not before:           Wed 23 Nov 2022 11:09:06 +0000
ROA not after:            Wed 22 Nov 2023 11:14:06 +0000
asID:                     51765
IP address blocks:        181.215.204.0/22 maxlen: 24
                          181.215.236.0/24 maxlen: 24
                          185.158.107.0/24 maxlen: 24
                          191.96.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3f:e9:4a:8e:5a:4a:7a:f6:3b:e5:a3:3f:32:25:0d:f3:1f:4e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 23 11:09:06 2022 GMT
            Not After : Nov 22 11:14:06 2023 GMT
        Subject: CN=5F4ECB5294F9E945474C0C25C49156E1F1DDD4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c3:4b:f9:ef:84:ea:85:32:92:db:5a:7a:c9:
                    be:ea:bc:d9:79:93:4d:38:83:e3:33:80:09:88:94:
                    3a:af:26:ca:63:93:fa:51:fd:60:c8:a3:92:52:0f:
                    68:bc:7f:20:85:02:cf:db:2c:e4:b6:fb:78:54:ec:
                    e1:c4:88:17:9b:8a:a6:dd:a6:a0:06:fd:f9:8a:e1:
                    a5:59:1d:0f:72:34:a2:0d:0e:01:c6:88:77:9a:51:
                    36:92:11:a1:61:b6:fa:a3:8b:09:25:7b:7a:0f:ea:
                    12:81:06:13:93:f8:9b:18:40:50:7b:c8:a9:9e:cf:
                    f5:20:ed:2b:57:da:c8:08:48:57:81:92:2f:b8:e7:
                    f5:d7:04:83:c2:cb:cf:ce:82:0b:99:5f:4a:d1:eb:
                    85:8e:56:a9:84:df:c0:b4:62:3e:ea:62:ea:22:db:
                    ab:4c:92:c9:1c:5b:1c:0e:1e:2d:4d:20:4b:fb:4d:
                    48:8e:30:eb:58:30:fb:75:fa:32:5f:73:6e:ce:e7:
                    31:da:38:89:69:63:32:ad:a7:6a:02:d4:e8:6d:1b:
                    3f:b0:3e:ac:38:f4:e8:c2:57:13:82:4b:f6:00:23:
                    3c:cd:fe:c4:02:6b:06:25:18:ef:84:0e:f1:8a:76:
                    d4:0e:ae:bb:65:e8:6e:e0:2b:9f:2b:01:0f:a4:a2:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4E:CB:52:94:F9:E9:45:47:4C:0C:25:C4:91:56:E1:F1:DD:D4:B4
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS51765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.204.0/22
                  181.215.236.0/24
                  185.158.107.0/24
                  191.96.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:d7:40:82:5e:1a:4b:fe:7c:fb:62:16:02:0e:b9:15:dc:
         4e:26:7d:df:31:b2:63:72:e6:16:91:0a:0b:3a:28:8e:ba:d1:
         9c:39:a8:0e:92:a7:e6:5a:06:4e:6e:4b:af:59:5f:bc:de:89:
         74:88:54:25:e4:0f:e4:ec:61:b1:42:62:0a:1a:88:fe:8d:d2:
         4f:07:cf:ee:e6:c7:b0:cf:26:12:ea:7f:63:88:d2:37:58:e8:
         36:15:ed:0b:2b:af:46:d2:eb:f2:26:59:1d:6a:6c:89:95:9e:
         0a:7c:00:3b:50:d9:3b:99:e2:98:3b:56:b7:df:8f:6a:39:de:
         1c:fe:96:ef:b9:52:be:35:b1:e3:eb:a6:e4:92:03:89:dc:ad:
         5e:45:2f:29:9c:54:3f:92:10:41:d8:e8:99:af:21:04:a8:89:
         8e:ee:73:41:27:39:e7:3e:ae:f9:d1:6b:85:83:95:74:2d:ed:
         94:d7:80:42:6c:ba:ac:24:c0:72:5c:b0:d6:64:45:58:26:78:
         54:56:f5:57:28:e3:f0:07:a8:67:f5:2e:a0:29:a6:da:0b:21:
         1e:8b:5c:4d:1d:ec:3c:17:1b:5e:ae:ee:3f:2b:bf:f5:b4:3d:
         05:d7:3f:21:54:19:82:17:f1:46:0b:f4:7f:2f:d8:39:04:28:
         cb:eb:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org