Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS57511.roa
File:                     AS57511.roa (raw, json)
Hash identifier:          L7LA1YOZfg8yS87kccA/ZrTKS2xYhlYXYj4TpY1lHJY=
Subject key identifier:   3D:85:6A:48:AF:4F:45:E4:1A:AE:D5:A6:01:33:1F:A5:D3:25:27:CE
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       760A1DFB97276A716D6D30A538B32EB3F3E7DADB
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS57511.roa
Signing time:             Sun 06 Nov 2022 09:05:00 +0000
ROA not before:           Sun 06 Nov 2022 09:00:00 +0000
ROA not after:            Sun 05 Nov 2023 09:05:00 +0000
asID:                     57511
IP address blocks:        185.135.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0a:1d:fb:97:27:6a:71:6d:6d:30:a5:38:b3:2e:b3:f3:e7:da:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  6 09:00:00 2022 GMT
            Not After : Nov  5 09:05:00 2023 GMT
        Subject: CN=3D856A48AF4F45E41AAED5A601331FA5D32527CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:b9:2e:23:bc:c1:78:d3:6a:3b:18:c0:39:
                    bf:6e:63:0a:dd:bf:4f:a9:f0:6b:f3:9e:b3:54:cd:
                    a7:db:a0:85:c3:31:a1:a4:2a:27:46:d1:05:e4:fc:
                    ee:15:13:9c:fe:b0:93:ec:97:c8:5b:ef:75:2c:c8:
                    43:5d:f1:c3:a1:35:07:df:60:ec:ae:66:85:3c:39:
                    61:0a:00:2c:ce:cb:4f:0d:1b:c9:5f:e9:90:ad:00:
                    5f:cd:03:8e:c1:81:f4:99:49:7a:5e:7c:19:89:9d:
                    12:f8:c0:a9:f6:06:cb:2b:56:fc:85:ff:21:97:d4:
                    d9:88:b2:a0:23:b1:10:9e:b5:9b:b6:52:ad:bd:9e:
                    01:79:9d:c8:d5:7b:46:45:df:30:b2:4b:87:67:51:
                    e2:ad:8b:ea:78:e6:75:45:15:a4:95:ac:1c:47:f3:
                    ad:03:66:39:df:76:93:32:c0:b2:75:d2:6e:7a:bf:
                    32:dc:f9:db:09:1c:f9:52:a5:3f:c5:30:ba:c3:f5:
                    d2:c5:c4:6c:ab:12:ec:b9:36:8e:65:d0:c0:79:e4:
                    2f:6b:da:83:3f:86:d9:d9:ad:a6:3a:f6:8f:49:4a:
                    7d:64:a2:53:32:14:a4:5e:1d:89:9d:d4:9c:6d:27:
                    25:e1:6f:79:44:e3:73:f0:21:f7:d7:b5:28:97:61:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:85:6A:48:AF:4F:45:E4:1A:AE:D5:A6:01:33:1F:A5:D3:25:27:CE
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS57511.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:1f:3d:ff:6b:93:14:7a:11:9b:9a:61:03:fd:10:7d:47:fb:
         9f:4c:e0:a9:eb:46:84:ce:26:b1:d8:6d:d9:f3:cc:a1:f8:c0:
         02:3d:fa:54:f6:eb:60:ba:16:01:f6:cf:47:c8:be:75:81:cb:
         77:74:d5:03:82:ea:f6:fa:86:f3:52:59:e9:9b:6b:ca:b8:cd:
         68:7d:4f:63:74:a3:27:91:1f:7b:56:3b:12:67:02:d6:d8:0c:
         11:3a:ef:ed:c7:f7:62:e5:00:ce:1f:8b:20:18:94:d7:53:5a:
         97:5f:bb:d4:80:e0:43:14:c3:01:8d:b7:25:43:23:1e:1e:5e:
         16:df:85:ff:8b:09:b4:62:19:ae:ae:f2:7c:43:63:dd:94:d5:
         b0:38:9d:35:d9:f2:8d:58:eb:95:99:9c:4f:a0:b3:df:7b:5b:
         7f:f0:c0:d6:dc:7a:97:1b:df:59:9c:94:ab:f0:88:16:b8:23:
         a6:7d:70:15:35:96:5e:a6:9d:8c:3f:cc:0e:59:3f:9c:bf:82:
         3c:5b:c2:00:d8:1b:2b:b5:47:a3:30:96:65:39:47:83:1b:5b:
         b7:9a:51:3a:4a:66:17:da:d0:03:c8:ff:a7:bc:72:39:8c:fb:
         5e:0c:71:ae:c9:d9:aa:21:c8:3d:bd:79:4d:0a:57:c8:59:33:
         c8:8e:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org