Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS63073.roa
File:                     AS63073.roa (raw, json)
Hash identifier:          rQwKmV2MLTjsoedpvkr9674nbg9Uin9AiX/ndbX1TWs=
Subject key identifier:   E9:30:D2:B9:39:BE:C1:A8:01:9F:28:24:87:63:B0:E1:D8:96:92:BD
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       5A7D762762A0D08776435042480F844358744EE6
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS63073.roa
Signing time:             Sat 27 Aug 2022 09:42:29 +0000
ROA not before:           Sat 27 Aug 2022 09:37:29 +0000
ROA not after:            Sat 26 Aug 2023 09:42:29 +0000
asID:                     63073
IP address blocks:        181.215.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7d:76:27:62:a0:d0:87:76:43:50:42:48:0f:84:43:58:74:4e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:29 2022 GMT
            Not After : Aug 26 09:42:29 2023 GMT
        Subject: CN=E930D2B939BEC1A8019F28248763B0E1D89692BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:2b:75:7a:3c:3c:36:8d:f3:9a:c1:a2:f4:
                    c8:c0:e4:81:21:9e:b8:71:61:37:07:f8:37:4c:8c:
                    bf:b3:f6:b6:9e:76:f4:07:d3:f5:f9:27:4c:a5:c9:
                    1c:4d:c3:9a:b8:cd:a5:74:3a:d4:ee:2d:ed:6d:e2:
                    a8:1e:d5:8e:8c:50:0f:e6:dc:6f:27:ab:e5:d5:b6:
                    93:1d:a8:22:f6:d2:3e:ef:33:79:ba:ea:d6:8e:17:
                    2c:29:7d:21:b8:25:5a:27:f1:e5:28:dc:1a:b0:fd:
                    04:1b:5c:48:78:3e:da:67:94:f3:fe:7f:af:d6:2b:
                    1c:f8:53:65:42:6b:3a:2f:1f:d8:87:96:64:3e:a6:
                    a9:8a:45:27:3a:f3:fe:ef:88:e2:6d:35:38:e8:69:
                    f3:22:17:ac:4e:4e:02:1d:dd:1e:ca:fa:22:76:b9:
                    57:78:9f:e0:60:e8:ba:59:9e:f2:f7:4c:4a:50:40:
                    06:88:76:03:dd:ab:5e:f5:2e:b2:69:64:72:46:72:
                    78:59:ee:9a:62:fa:f8:a9:00:50:e7:ac:ff:be:fc:
                    89:85:62:b9:5d:0f:f3:ae:6f:23:14:17:e4:8c:ce:
                    48:b0:0b:69:48:83:e2:5e:fd:f1:ff:b2:73:3a:d0:
                    0f:73:da:f3:7e:e4:cb:7a:70:bb:7d:6e:70:38:00:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:D2:B9:39:BE:C1:A8:01:9F:28:24:87:63:B0:E1:D8:96:92:BD
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS63073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:11:de:8e:ed:aa:30:dc:9a:e4:ff:5c:9e:e6:7c:84:6f:61:
         60:2a:a6:e7:b5:ba:16:66:fe:41:72:e7:92:01:a2:27:8c:4b:
         5a:4c:9f:d3:2d:61:c7:57:29:81:66:42:41:4a:a7:6f:e2:06:
         28:f2:8e:17:0c:bd:62:08:f3:0c:53:ad:35:b6:35:c5:3d:db:
         da:66:71:fc:b3:53:77:41:74:94:d8:5d:8c:18:05:47:38:d8:
         b8:5e:9b:42:8f:81:0a:f3:a5:88:49:1c:bd:79:f4:97:4a:19:
         10:23:35:6b:1a:30:05:a1:b6:2f:71:24:60:6b:31:4c:40:d0:
         f9:f2:ed:e5:1d:85:13:c5:c9:03:3d:15:81:b9:eb:7f:ad:3b:
         d4:40:90:46:c8:6a:c5:29:95:3b:3f:3d:59:57:e5:74:59:6f:
         1c:90:5b:fd:c3:17:d8:fa:25:db:9a:fd:4e:23:bc:da:a8:98:
         1a:55:df:07:4a:b2:eb:0c:5d:89:3e:ae:b5:41:58:d4:81:ad:
         a2:47:be:0d:de:ec:e3:81:2c:83:d6:79:56:95:f4:29:8a:4c:
         d4:81:63:61:b7:95:df:b6:fc:06:14:e3:ec:70:59:e2:77:d8:
         81:31:66:72:c5:7a:67:d8:4b:bb:4b:21:1c:f7:f0:51:12:d7:
         2c:9d:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org