Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS678.roa
File:                     AS678.roa (raw, json)
Hash identifier:          a0eK5YfbfMfPe/Jco+F3v/nHWzuohgUxwxU+MjuF9Bw=
Subject key identifier:   D6:2D:C6:18:00:33:DB:E2:A7:70:C6:4F:1F:81:9B:3F:8F:E1:E0:24
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       7FE72C5822FB5BF23B5B389C0F635F3DB548802D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS678.roa
Signing time:             Fri 21 Oct 2022 10:31:53 +0000
ROA not before:           Fri 21 Oct 2022 10:26:53 +0000
ROA not after:            Fri 20 Oct 2023 10:31:53 +0000
asID:                     678
IP address blocks:        181.215.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e7:2c:58:22:fb:5b:f2:3b:5b:38:9c:0f:63:5f:3d:b5:48:80:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 21 10:26:53 2022 GMT
            Not After : Oct 20 10:31:53 2023 GMT
        Subject: CN=D62DC6180033DBE2A770C64F1F819B3F8FE1E024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:06:91:dd:92:bf:86:64:43:88:14:05:1a:
                    1d:ad:5c:f0:51:c1:6a:4e:1b:17:b3:66:aa:64:bb:
                    cb:9f:99:15:43:51:28:0a:e2:93:94:a8:43:ef:da:
                    9d:e2:91:59:cc:b7:02:c0:02:b9:ec:dd:bb:1a:13:
                    c1:da:fc:5d:40:0c:57:84:71:bb:c6:b3:94:31:68:
                    46:08:8c:90:f7:cc:47:7b:e1:d6:a6:58:2e:ef:80:
                    9c:97:5a:46:e6:1a:c4:24:03:7f:06:45:fe:df:13:
                    8b:ae:a6:51:ac:de:09:ad:63:97:20:01:a8:cd:b3:
                    14:55:ce:d4:c6:46:f4:12:8c:87:8b:e2:9f:94:f9:
                    c5:f3:ba:d4:d0:f7:6a:1b:d3:f3:a7:2d:93:12:00:
                    77:c6:53:ff:da:b8:a8:e9:47:8e:d3:05:3b:6d:ae:
                    a7:bc:81:5d:fc:90:df:a9:9d:29:17:30:85:4e:44:
                    a4:62:e0:fa:93:e9:06:a5:93:31:23:2a:05:fe:f8:
                    8e:44:4a:81:3f:f0:87:7e:42:22:ae:78:71:65:1e:
                    e0:0d:45:60:e0:15:74:41:f3:b9:db:a6:81:f9:f3:
                    a7:da:4f:1f:91:19:44:2e:d6:c9:32:f0:cd:5e:31:
                    03:cb:a1:75:b7:9c:68:46:3d:87:5c:e1:c3:31:13:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2D:C6:18:00:33:DB:E2:A7:70:C6:4F:1F:81:9B:3F:8F:E1:E0:24
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:3f:df:25:49:10:87:3a:72:59:bc:5a:ce:07:41:53:90:f4:
         3c:ef:cc:71:25:03:15:e2:78:c0:2a:74:35:f3:c7:73:29:14:
         96:c8:32:b8:a7:96:4b:cc:4e:f4:dd:d0:f1:31:7c:e4:cf:2e:
         a2:4e:a5:a9:48:c9:5a:a3:ea:b9:bc:d4:9e:a4:fd:39:a8:da:
         91:db:7e:9f:cc:58:70:52:58:14:4a:4f:e8:c7:cb:20:26:1f:
         96:4f:c1:c3:27:f7:12:45:e9:bc:ce:1e:2c:83:15:e3:9d:88:
         cf:f8:b2:1e:1c:13:36:6e:0b:83:ed:e7:e4:7c:85:fe:aa:20:
         8b:f7:e5:07:22:10:95:47:31:d6:14:4c:24:aa:3e:3c:08:76:
         c1:2e:9e:f2:70:2d:42:85:b9:f3:37:f3:07:6f:d5:eb:dc:c4:
         d3:bf:8d:b9:1a:aa:bc:62:4e:ef:b3:75:33:b3:50:28:12:36:
         5a:96:54:cc:f3:01:67:bc:8e:9d:0b:b4:c4:d3:5f:e6:d7:43:
         16:98:13:55:37:75:ea:51:55:62:fb:72:d2:88:f7:98:82:30:
         96:70:dc:ba:74:74:d2:91:6c:0d:8f:65:35:32:94:0f:f8:12:
         9c:88:64:46:25:1d:1b:90:37:35:72:7d:3e:a4:66:3c:44:2f:
         1b:b1:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org