Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS135375.roa
File:                     AS135375.roa (raw, json)
Hash identifier:          eBP5NebiRVlslMjuZ30AGylwyJabmoYsF3yQmp6Fdjg=
Subject key identifier:   6F:AC:4B:7C:C5:E4:63:04:DC:6D:E3:0A:6A:2E:74:40:46:87:3B:FC
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       396D49654B6203B21B434714D8B0E0B444EC44A8
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS135375.roa
Signing time:             Fri 24 Feb 2023 00:00:17 +0000
ROA not before:           Thu 23 Feb 2023 23:55:17 +0000
ROA not after:            Fri 23 Feb 2024 00:00:17 +0000
asID:                     135375
IP address blocks:        45.133.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6d:49:65:4b:62:03:b2:1b:43:47:14:d8:b0:e0:b4:44:ec:44:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 23 23:55:17 2023 GMT
            Not After : Feb 23 00:00:17 2024 GMT
        Subject: CN=6FAC4B7CC5E46304DC6DE30A6A2E744046873BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:51:df:e6:bb:9e:ea:0a:b1:b6:ff:57:d1:
                    e3:08:60:e4:cc:f8:f9:23:db:44:1e:a2:ca:8a:c9:
                    ae:03:b9:61:d5:6f:c5:8b:24:5b:a6:56:00:d7:d7:
                    2e:d8:71:7b:a5:8a:de:cc:65:46:5b:c5:29:1e:f0:
                    a4:c1:7b:6d:90:6b:0e:b1:90:b7:c6:57:dc:dc:3e:
                    65:40:33:88:90:56:be:82:84:39:99:e5:f3:1a:60:
                    66:3c:bf:c5:70:95:1f:5e:f5:16:68:f8:b7:1e:9a:
                    49:21:26:69:37:4b:93:81:ef:46:1a:d6:c0:89:1f:
                    1d:50:fa:50:b4:e8:b3:0f:cc:d7:bc:8b:0b:0e:44:
                    8b:5e:f3:22:0e:7b:3d:ce:f6:53:cb:77:9d:6e:4b:
                    a7:98:81:c2:f8:4d:5c:6a:d4:4a:64:ae:28:36:be:
                    83:0b:41:80:ae:56:14:8a:f4:f8:8d:1b:9a:cb:9c:
                    87:d1:5b:2d:39:5e:c5:88:7f:5c:a8:aa:27:bf:e4:
                    a1:ad:59:cb:d6:ca:73:02:c9:c3:b3:2a:a1:81:0a:
                    f1:3d:04:b6:b6:56:d6:fe:3c:48:46:4c:d5:ac:f7:
                    19:3b:0e:df:a6:63:e2:e7:cd:7f:c9:ff:a6:10:06:
                    2f:99:39:bb:ec:45:c6:61:4e:2f:56:00:fc:22:d1:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AC:4B:7C:C5:E4:63:04:DC:6D:E3:0A:6A:2E:74:40:46:87:3B:FC
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS135375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:88:b3:de:86:96:df:0a:ea:5e:0b:4b:6c:a7:fa:d9:e0:
         70:75:58:e5:29:1b:25:1c:ad:f3:8c:f4:f8:33:9f:26:50:6c:
         e1:b0:27:08:d2:90:8f:f2:bf:ed:6c:bf:94:15:be:93:07:23:
         38:4f:6f:36:5d:56:0d:d2:f1:5d:1d:cc:32:07:2d:fc:7a:c5:
         5a:a8:ac:57:1c:e9:8c:1a:09:ba:40:d6:f9:9b:e6:79:97:05:
         1d:d5:bb:d2:04:03:23:d8:01:f7:29:9a:e9:c8:df:9a:b0:3c:
         eb:a1:53:f9:cc:31:42:da:db:24:4d:66:25:d0:2c:d4:0a:99:
         73:f8:06:0d:a1:51:00:60:b8:38:58:08:b2:8f:f9:92:bf:6c:
         a1:b4:5a:eb:ca:64:d7:d0:62:6d:33:78:57:fd:42:60:3f:20:
         3e:6d:cb:1e:d1:84:15:ac:21:e0:e2:24:97:dc:83:11:8c:9a:
         f0:3e:76:ca:03:6d:f3:32:bc:32:ac:ce:99:ff:d0:18:e8:7d:
         66:35:b0:aa:6c:08:da:95:bf:13:69:96:f7:45:9e:12:2f:1a:
         f3:8a:da:52:ba:03:ff:99:63:df:83:74:cb:8c:b8:2e:2a:79:
         20:9d:2e:a1:44:28:53:56:bb:ab:e8:07:67:b3:7f:9c:2e:8f:
         e7:22:ae:1a
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUOW1JZUtiA7IbQ0cU2LDgtETsRKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMjMyMzU1MTdaFw0yNDAyMjMwMDAwMTdaMDMxMTAvBgNV
BAMTKDZGQUM0QjdDQzVFNDYzMDREQzZERTMwQTZBMkU3NDQwNDY4NzNCRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBVHf5rue6gqxtv9X0eMIYOTM
+Pkj20QeosqKya4DuWHVb8WLJFumVgDX1y7YcXulit7MZUZbxSke8KTBe22Qaw6x
kLfGV9zcPmVAM4iQVr6ChDmZ5fMaYGY8v8VwlR9e9RZo+LcemkkhJmk3S5OB70Ya
1sCJHx1Q+lC06LMPzNe8iwsORIte8yIOez3O9lPLd51uS6eYgcL4TVxq1Epkrig2
voMLQYCuVhSK9PiNG5rLnIfRWy05XsWIf1yoqie/5KGtWcvWynMCycOzKqGBCvE9
BLa2Vtb+PEhGTNWs9xk7Dt+mY+LnzX/J/6YQBi+ZObvsRcZhTi9WAPwi0Yh9AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUb6xLfMXkYwTcbeMKai50QEaHO/wwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMxMzUzNzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthagwDQYJKoZIhvcNAQELBQADggEBAAqC
iLPehpbfCupeC0tsp/rZ4HB1WOUpGyUcrfOM9PgznyZQbOGwJwjSkI/yv+1sv5QV
vpMHIzhPbzZdVg3S8V0dzDIHLfx6xVqorFcc6YwaCbpA1vmb5nmXBR3Vu9IEAyPY
AfcpmunI35qwPOuhU/nMMULa2yRNZiXQLNQKmXP4Bg2hUQBguDhYCLKP+ZK/bKG0
WuvKZNfQYm0zeFf9QmA/ID5tyx7RhBWsIeDiJJfcgxGMmvA+dsoDbfMyvDKszpn/
0BjofWY1sKpsCNqVvxNplvdFnhIvGvOK2lK6A/+ZY9+DdMuMuC4qeSCdLqFEKFNW
u6voB2ezf5wuj+cirho=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org