Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS8987.roa
File:                     AS8987.roa (raw, json)
Hash identifier:          UvgiD19rFrotmTtCMDAyThdLY7XuIkM3Z9tGiFNPqKY=
Subject key identifier:   C6:CC:7F:A0:BC:3F:EE:99:70:78:C4:A2:90:7C:79:D7:5B:C7:BE:4B
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       3FA34A79C3CC8BA08B9E58DBBA0418FC041D3708
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS8987.roa
Signing time:             Wed 10 Aug 2022 09:02:12 +0000
ROA not before:           Wed 10 Aug 2022 08:57:12 +0000
ROA not after:            Wed 09 Aug 2023 09:02:12 +0000
asID:                     8987
IP address blocks:        194.110.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a3:4a:79:c3:cc:8b:a0:8b:9e:58:db:ba:04:18:fc:04:1d:37:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Aug 10 08:57:12 2022 GMT
            Not After : Aug  9 09:02:12 2023 GMT
        Subject: CN=C6CC7FA0BC3FEE997078C4A2907C79D75BC7BE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:54:cf:6c:8c:cb:da:8c:0a:04:4c:2c:d2:
                    06:59:9c:e2:28:d1:27:b6:22:a4:de:41:4e:75:c2:
                    bd:ba:80:00:6f:41:c3:e6:5a:ce:b0:09:b8:a5:ba:
                    07:60:98:98:da:32:36:9e:0c:87:83:31:3e:96:26:
                    e3:a8:24:88:80:36:e5:b9:21:8f:71:ea:89:ed:2a:
                    6b:67:0f:29:2d:ce:52:08:9e:29:9d:d0:45:b9:ef:
                    b6:f6:62:a3:f6:76:0b:ae:b5:22:bf:25:2f:36:4b:
                    20:29:54:f8:b6:b3:40:26:2e:ac:80:04:2c:19:81:
                    50:3c:a4:77:e2:29:0d:ab:f9:a8:75:f0:26:c6:c9:
                    b4:ab:a0:3a:52:ef:f7:61:35:a7:ec:3a:51:8b:f7:
                    5a:a1:30:f1:a6:e3:f2:36:bd:ff:95:99:2f:6d:9c:
                    dd:63:af:10:62:5b:3c:d7:7c:ab:56:99:e6:1c:9c:
                    76:63:20:df:77:c7:5f:d6:f0:4e:a7:49:d7:d3:b6:
                    26:23:6f:be:82:b7:9d:8d:a1:2d:47:33:16:e3:5f:
                    39:b4:15:ab:2b:b7:ff:82:8a:e2:1c:b0:99:a4:b3:
                    bf:5c:49:ae:a0:2d:5e:87:c6:17:3c:ed:50:57:ce:
                    0a:ba:19:fe:d1:9b:c1:da:25:cf:2d:b0:63:99:97:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:7F:A0:BC:3F:EE:99:70:78:C4:A2:90:7C:79:D7:5B:C7:BE:4B
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS8987.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:86:93:54:bf:d5:c4:be:00:09:24:4b:9a:be:4e:a1:af:2c:
         ac:62:4e:5b:18:0a:35:5c:bd:25:68:13:68:ae:ad:2f:6b:66:
         34:48:e7:e8:8e:be:30:6a:db:a5:29:15:60:fd:72:4f:bd:c0:
         da:6d:4b:89:c5:f0:52:73:9a:99:20:2b:0a:60:01:eb:82:c5:
         bd:db:9a:30:ac:aa:f5:52:de:5c:0d:47:fd:9c:7b:68:1c:aa:
         6e:fb:7b:80:bf:37:69:b2:1c:f4:23:40:61:ab:d7:7a:20:49:
         7a:65:97:eb:50:0e:c6:70:71:86:64:b9:c4:4a:0e:18:b9:7e:
         9e:37:92:11:70:b6:59:63:cf:c5:df:b9:f3:ca:b5:03:88:7e:
         7e:80:08:67:b6:13:fb:33:1b:9d:fb:25:84:cc:4f:0e:fc:a5:
         fb:f5:4f:35:87:3a:3d:c1:8c:d1:e2:4f:ae:5e:00:d9:95:a8:
         19:8d:ad:a8:5f:fe:17:a8:4b:8d:02:8c:90:61:ba:5a:4d:2c:
         ad:5a:da:31:42:6d:f5:a8:90:12:eb:ac:3b:15:fa:dc:bf:2e:
         33:4d:20:de:ae:d3:1b:28:4c:34:04:f1:c3:69:67:a6:96:16:
         38:0e:a9:27:6e:e0:0d:be:ec:50:f1:f1:31:97:5f:24:03:f6:
         70:69:46:86
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUP6NKecPMi6CLnljbugQY/AQdNwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY2Y2FkYTVjMGIyZWVjODBjYTEyYzE1NGNlZTA1NjAz
Yjg0NWRmZTAeFw0yMjA4MTAwODU3MTJaFw0yMzA4MDkwOTAyMTJaMDMxMTAvBgNV
BAMTKEM2Q0M3RkEwQkMzRkVFOTk3MDc4QzRBMjkwN0M3OUQ3NUJDN0JFNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XFTPbIzL2owKBEws0gZZnOIo
0Se2IqTeQU51wr26gABvQcPmWs6wCbilugdgmJjaMjaeDIeDMT6WJuOoJIiANuW5
IY9x6ontKmtnDyktzlIInimd0EW577b2YqP2dguutSK/JS82SyApVPi2s0AmLqyA
BCwZgVA8pHfiKQ2r+ah18CbGybSroDpS7/dhNafsOlGL91qhMPGm4/I2vf+VmS9t
nN1jrxBiWzzXfKtWmeYcnHZjIN93x1/W8E6nSdfTtiYjb76Ct52NoS1HMxbjXzm0
Fasrt/+CiuIcsJmks79cSa6gLV6Hxhc87VBXzgq6Gf7Rm8HaJc8tsGOZl82hAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUxsx/oLw/7plweMSikHx511vHvkswHwYDVR0j
BBgwFoAUT2ytpcCy7sgMoSwVTO4FYDuEXf4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC80RjZDQURB
NUMwQjJFRUM4MENBMTJDMTU0Q0VFMDU2MDNCODQ1REZFLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvVDJ5dHBjQ3k3c2dNb1N3VlRPNEZZRHVFWGY0LmNlcjBwBggr
BgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVM4OTg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwm7yMA0GCSqGSIb3DQEBCwUAA4IBAQDLhpNU
v9XEvgAJJEuavk6hryysYk5bGAo1XL0laBNorq0va2Y0SOfojr4watulKRVg/XJP
vcDabUuJxfBSc5qZICsKYAHrgsW925owrKr1Ut5cDUf9nHtoHKpu+3uAvzdpshz0
I0Bhq9d6IEl6ZZfrUA7GcHGGZLnESg4YuX6eN5IRcLZZY8/F37nzyrUDiH5+gAhn
thP7Mxud+yWEzE8O/KX79U81hzo9wYzR4k+uXgDZlagZja2oX/4XqEuNAoyQYbpa
TSytWtoxQm31qJAS66w7Ffrcvy4zTSDertMbKEw0BPHDaWemlhY4DqknbuANvuxQ
8fExl18kA/ZwaUaG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org