Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60064.roa
File:                     AS60064.roa (raw, json)
Hash identifier:          9mX6vYD+BDlcez0cpMO34NKzV13rk0Fjho54wqoUSQ8=
Subject key identifier:   86:95:DC:08:A3:5D:6B:CC:92:3D:E0:21:B3:0C:D2:72:27:13:80:7D
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       29D2F935266CB7D47FA36A57A83A37A8E75F441F
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60064.roa
Signing time:             Thu 13 Oct 2022 08:34:38 +0000
ROA not before:           Thu 13 Oct 2022 08:29:38 +0000
ROA not after:            Thu 12 Oct 2023 08:34:38 +0000
asID:                     60064
IP address blocks:        191.101.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d2:f9:35:26:6c:b7:d4:7f:a3:6a:57:a8:3a:37:a8:e7:5f:44:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 13 08:29:38 2022 GMT
            Not After : Oct 12 08:34:38 2023 GMT
        Subject: CN=8695DC08A35D6BCC923DE021B30CD2722713807D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:be:35:b6:8a:21:00:83:b1:26:21:66:c0:
                    66:38:5b:15:dc:c4:93:ad:47:ec:fc:05:f9:cc:42:
                    11:67:cf:25:98:22:1b:25:06:45:6e:9f:1c:d9:84:
                    52:1d:70:ed:39:87:82:25:0d:c6:dd:4b:ea:c1:90:
                    c8:b9:8a:b6:11:e2:7e:2e:5f:ef:73:3f:63:f2:52:
                    0b:4c:ae:1d:0d:4a:f3:cf:9e:06:63:13:9d:c1:92:
                    f4:3b:54:16:32:89:06:b2:c4:d3:6d:ce:7e:cf:51:
                    da:3a:df:7d:0f:68:73:b6:5a:66:76:e7:7f:9c:7a:
                    54:c7:75:f4:8f:2c:b4:e6:ce:33:4a:76:36:78:61:
                    db:76:c4:d6:f0:9c:68:3a:49:20:06:a9:6e:c5:d1:
                    20:02:a8:a9:f6:42:aa:87:22:8c:b7:8c:eb:f9:c0:
                    06:42:75:4f:b5:8b:7e:a7:aa:f8:da:67:07:10:a2:
                    53:cc:aa:eb:77:30:a8:a6:3c:89:af:b7:7d:91:fe:
                    f3:23:06:0a:b6:73:bc:b7:e3:b6:88:1d:41:a9:a5:
                    45:6a:a4:9b:72:54:64:29:5c:68:42:df:cb:ed:65:
                    84:f3:a4:ac:1f:93:53:58:d3:24:6e:ea:3d:3e:fe:
                    6c:d6:40:83:21:03:a3:93:f0:c5:7c:99:1e:3b:c6:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:95:DC:08:A3:5D:6B:CC:92:3D:E0:21:B3:0C:D2:72:27:13:80:7D
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60064.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:4f:93:df:44:75:47:b4:23:18:fd:c2:71:a0:29:e4:74:
         4d:cd:a4:9d:66:49:d3:26:6f:85:23:a9:ad:31:60:23:e8:c8:
         53:26:a6:c9:a1:b6:9f:48:e3:57:f5:f2:31:8c:8c:eb:8c:7f:
         b5:f6:02:3a:e3:f2:c2:a2:d6:13:0f:28:1b:24:a8:09:c4:56:
         ad:47:fb:19:4e:a7:1a:0f:3d:8c:10:1a:f4:e9:25:76:65:72:
         60:2c:1b:d2:eb:23:c1:0d:25:1d:4e:f7:6f:f3:a1:97:92:43:
         5a:5b:e1:1f:b3:e5:39:9c:9c:ee:b7:15:06:71:46:8a:32:a4:
         b1:ed:a5:53:d6:bc:ae:a9:1b:2a:a7:e1:79:27:5c:91:9a:a8:
         46:81:ac:11:27:51:72:db:aa:03:0b:1f:fd:94:a9:fc:79:49:
         c4:3e:49:70:cd:6c:69:14:8d:de:38:a9:37:01:63:f7:9d:e4:
         ec:c8:3b:ae:0d:f6:9e:16:8b:e2:f3:be:8c:b1:67:cf:64:6f:
         26:53:b5:c1:ca:59:e5:cb:8f:0e:48:c8:42:f0:4c:37:d3:aa:
         66:59:25:e1:33:21:a5:54:98:00:3c:64:7d:b7:02:5f:51:43:
         6d:86:0b:c4:5b:7e:73:d9:45:f1:00:1b:75:31:a4:74:42:c7:
         25:23:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org