Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS134512.roa
File:                     AS134512.roa (raw, json)
Hash identifier:          KBTJzbPvrRs6HxFHUZm0da5K8yZt6EcVfPtBPkvzQMM=
Subject key identifier:   06:8B:54:08:91:23:86:36:A8:AF:34:0A:F1:4E:88:2C:53:20:43:E6
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5EC8171337F85DA69EEF42C7F979F5325DB7BEF1
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS134512.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     134512
IP address blocks:        179.61.135.0/24 maxlen: 24
                          191.96.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:17:13:37:f8:5d:a6:9e:ef:42:c7:f9:79:f5:32:5d:b7:be:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=068B540891238636A8AF340AF14E882C532043E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:fd:8f:c7:c3:fc:d7:31:13:82:cb:17:c2:
                    a4:04:34:5f:c8:0f:c5:69:74:56:fb:55:62:ec:c7:
                    32:e8:6a:80:ae:30:2b:75:38:0b:8a:bc:44:27:96:
                    08:55:f7:ae:06:cb:d2:70:32:cf:4f:36:f9:ea:d0:
                    0c:79:06:a8:fa:d2:68:80:50:c3:9d:1c:29:e1:2b:
                    46:97:f6:7d:dc:f4:a6:5d:f4:8a:f9:af:d9:27:cc:
                    3f:c6:0b:ae:89:5d:1f:30:c9:1b:c3:a6:85:71:b0:
                    ed:68:e1:a1:39:b7:dc:8b:7d:ff:7e:62:b8:e0:b9:
                    e0:6e:06:df:98:2b:4a:44:17:47:63:44:9b:af:bc:
                    4f:83:94:23:b5:53:8f:62:80:78:ff:39:00:af:ab:
                    a1:c0:04:0a:5d:73:b6:b8:e9:db:14:ac:31:bc:d7:
                    74:ec:ef:47:a8:78:05:e5:37:8f:d2:c9:4d:9f:1c:
                    e5:7c:94:07:97:21:e8:1a:78:c3:94:53:d4:06:74:
                    f8:d8:d9:c4:71:a5:20:82:3b:a8:fe:23:ec:0a:a9:
                    b5:d0:c6:d3:6d:49:f8:6a:d2:83:45:0e:7c:a2:8a:
                    a6:ea:1a:77:ea:5f:65:d3:a0:20:d8:d8:2b:30:3e:
                    5e:22:14:d6:dc:95:2a:4d:1a:19:c8:30:a3:5c:72:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:54:08:91:23:86:36:A8:AF:34:0A:F1:4E:88:2C:53:20:43:E6
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS134512.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.135.0/24
                  191.96.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:63:d3:64:9c:3a:70:c6:1f:2a:60:10:08:f3:e2:9a:83:99:
         04:a5:c7:04:dc:f7:ec:94:59:59:f4:77:e0:4e:aa:ce:67:c7:
         26:fe:3d:fc:09:2a:6d:7d:3a:a0:3e:74:07:ad:8a:97:d8:cf:
         33:06:23:2b:58:dd:39:fc:0a:d9:fc:2c:ef:2d:42:1f:b0:1d:
         97:a4:21:87:03:09:aa:a2:d6:36:72:70:6c:11:38:02:cf:45:
         79:b7:c5:33:74:0e:99:d6:d9:f6:91:10:4f:ec:d7:8f:dc:aa:
         30:1f:29:fd:be:b1:06:43:0d:54:f3:e0:90:68:ce:1b:f6:42:
         5f:6c:99:7b:3f:1d:8c:c4:8a:45:1c:76:75:90:54:ff:9b:70:
         5a:34:fb:a1:8b:f1:07:14:8e:73:a5:9c:29:02:6b:7e:14:08:
         cc:a0:2f:4b:70:2c:af:75:2a:f4:7a:06:09:d1:ab:58:d3:c4:
         5f:bc:93:ad:24:91:c8:b3:df:d2:9a:ba:5b:ed:3d:69:ab:3b:
         ac:c0:9e:1e:11:8c:79:43:79:e1:82:4b:ac:34:c5:c1:62:f5:
         57:44:06:a6:06:ef:2b:6d:3d:a6:9b:46:de:d4:cb:07:7b:c7:
         64:14:d8:54:25:be:48:71:0f:d2:93:aa:68:0d:a0:ac:f0:65:
         86:d2:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org