Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13213.roa
File:                     AS13213.roa (raw, json)
Hash identifier:          GIkKeXU+B/EJ0/lOrTwp6Qwygr7KI++NsNofxVuFMhc=
Subject key identifier:   49:10:24:A7:F1:69:A6:E1:E8:72:23:26:6F:F7:01:F4:D3:A1:2E:A1
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       791473FC0C28D81649165AD5E83BF9794DE0BE1F
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13213.roa
Signing time:             Mon 28 Nov 2022 12:18:16 +0000
ROA not before:           Mon 28 Nov 2022 12:13:16 +0000
ROA not after:            Mon 27 Nov 2023 12:18:16 +0000
asID:                     13213
IP address blocks:        181.214.135.0/24 maxlen: 24
                          181.214.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:14:73:fc:0c:28:d8:16:49:16:5a:d5:e8:3b:f9:79:4d:e0:be:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:16 2022 GMT
            Not After : Nov 27 12:18:16 2023 GMT
        Subject: CN=491024A7F169A6E1E87223266FF701F4D3A12EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:e6:b7:7d:c1:90:81:b1:7f:66:54:5c:ea:
                    af:0f:1f:5d:32:75:62:4d:38:3d:52:5d:85:a4:90:
                    91:a4:07:9a:56:da:f1:13:20:34:3c:fd:21:d4:b0:
                    5d:d1:85:5c:60:5a:10:a5:3e:2a:58:94:c4:0e:5b:
                    ae:33:e6:8b:2a:b4:70:bf:b7:f5:16:8c:13:f7:f3:
                    22:41:aa:83:05:3e:11:99:84:27:8b:28:64:3e:79:
                    cd:1d:a7:ec:84:d5:69:89:02:7b:52:ca:23:97:61:
                    be:d0:b3:74:cf:34:cc:1b:7b:17:a3:3c:03:4c:2c:
                    b3:27:00:c6:33:ff:28:ab:63:4e:34:7a:42:84:7f:
                    78:e5:5a:ad:9e:39:14:af:86:a7:f0:46:13:2a:71:
                    b0:20:d4:25:e5:75:2d:5d:60:7b:b2:cb:9b:e3:d6:
                    86:a2:dc:b0:fa:8f:91:7f:d8:06:cd:2b:85:e9:d5:
                    f2:ea:17:67:6e:3c:56:a1:d2:98:a0:0b:0e:4f:71:
                    ee:0e:c4:72:cc:85:b6:09:22:81:9a:94:0c:c6:7c:
                    f1:43:1b:bf:63:d3:13:e9:e3:ca:4a:f6:bb:41:dc:
                    b9:52:79:e3:67:be:3b:df:10:4d:82:91:a9:1c:7f:
                    74:c4:e4:80:3d:09:fe:21:60:82:ab:22:14:33:7d:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:24:A7:F1:69:A6:E1:E8:72:23:26:6F:F7:01:F4:D3:A1:2E:A1
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13213.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.135.0/24
                  181.214.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:c3:43:72:1a:33:25:b5:88:b4:70:f0:a2:82:ce:f0:4c:
         e5:0c:d5:ef:00:81:e6:f1:e5:de:e1:f9:d1:e8:e1:1a:e9:e6:
         23:0a:2c:3c:09:1c:7d:8b:fb:31:2f:35:35:a5:4d:97:1b:32:
         fe:6e:40:1b:ba:47:11:91:8f:21:81:d4:45:42:d3:00:04:58:
         0c:d8:17:f5:c2:a1:ba:57:e2:5a:f1:37:74:a9:ca:62:9f:93:
         a8:3b:f7:99:87:29:73:d8:b3:cf:52:bc:9d:8f:1f:71:1b:9e:
         c1:ea:4f:ed:aa:3f:aa:eb:58:44:db:c6:4d:e5:4f:74:aa:ed:
         46:45:48:8b:f0:df:cf:50:2e:74:00:a8:12:76:9a:d1:2f:95:
         a6:59:7c:81:46:47:94:9c:42:cb:ac:f7:a1:49:ec:51:f2:60:
         95:83:c0:75:da:d4:fc:8f:d5:4f:3f:fc:44:7c:2d:e9:e1:9f:
         ea:29:3d:58:c5:2a:76:22:b4:4f:b9:a5:ff:6c:21:ca:20:81:
         27:0d:7e:a4:0f:d0:e6:e3:77:0c:f7:f0:26:4c:41:73:db:d3:
         5d:c5:36:ff:6f:59:4a:71:7d:9e:b8:fe:85:6c:a8:18:5f:75:
         37:e2:03:9e:8e:6f:07:43:ba:81:af:61:f5:f4:bd:c0:78:fe:
         8a:3b:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org