Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS135752.roa
File:                     AS135752.roa (raw, json)
Hash identifier:          UDK+Amwr20hLSNXHjiXOAd8PPfBn66C/7AIBesk2b6s=
Subject key identifier:   3F:40:76:F3:3E:D0:01:A1:1D:BA:00:2D:26:7B:D7:DC:4C:6A:8E:4F
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4CC37D2E011B7416B0D200594FA0CC10447D4444
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS135752.roa
Signing time:             Mon 30 Jan 2023 12:30:04 +0000
ROA not before:           Mon 30 Jan 2023 12:25:04 +0000
ROA not after:            Mon 29 Jan 2024 12:30:04 +0000
asID:                     135752
IP address blocks:        191.96.129.0/24 maxlen: 24
                          191.101.19.0/24 maxlen: 24
                          191.101.69.0/24 maxlen: 24
                          191.101.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c3:7d:2e:01:1b:74:16:b0:d2:00:59:4f:a0:cc:10:44:7d:44:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 30 12:25:04 2023 GMT
            Not After : Jan 29 12:30:04 2024 GMT
        Subject: CN=3F4076F33ED001A11DBA002D267BD7DC4C6A8E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:e3:41:04:ac:9e:9a:b0:6e:86:b4:42:12:
                    66:ae:a6:d5:fc:7f:15:81:fe:eb:4c:47:ca:58:83:
                    e0:da:e3:40:c1:d2:c0:23:2d:88:e7:71:b0:fd:55:
                    ea:ed:3b:c6:27:43:ce:0f:41:0a:61:69:65:59:90:
                    06:39:6f:55:5d:29:c3:08:0a:92:cd:a3:9b:e8:f6:
                    02:0b:46:1c:a7:43:9e:56:2c:e7:b5:1c:16:f2:a1:
                    73:f8:f5:d2:1f:27:58:1e:14:16:7b:8a:c4:5a:d1:
                    32:37:e7:72:8f:c8:4a:8c:95:70:a9:e0:b2:d4:67:
                    09:ae:04:9b:2f:e6:7a:f0:71:62:0a:b1:19:db:ae:
                    9e:b9:4e:63:5a:0c:95:ad:11:a7:fd:33:45:93:ba:
                    0d:92:be:c1:be:1d:0a:f9:d1:32:0c:3f:83:c1:63:
                    86:e8:2b:a5:b5:98:df:bd:74:5e:ef:89:2c:78:04:
                    56:0c:1b:a0:a3:f1:4c:88:d8:69:14:6e:1e:39:6c:
                    7e:22:78:07:dd:5f:c8:ce:5a:48:0b:75:e4:c4:cb:
                    6b:b3:56:3f:84:82:b1:0a:97:47:ed:fe:55:62:e1:
                    a1:ac:ad:51:be:29:cf:b9:8a:70:42:eb:b8:5a:68:
                    d9:67:f5:89:bf:94:b9:ad:e5:6c:f4:2e:6c:e1:fa:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:40:76:F3:3E:D0:01:A1:1D:BA:00:2D:26:7B:D7:DC:4C:6A:8E:4F
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS135752.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.129.0/24
                  191.101.19.0/24
                  191.101.69.0/24
                  191.101.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:66:36:6b:b5:b2:ab:3b:52:eb:e6:cc:2c:06:21:3f:c3:
         7d:9d:57:d3:e8:40:d1:45:65:41:ac:c6:6c:69:9c:e4:c2:97:
         b5:82:91:6a:13:c0:f9:fb:57:93:8b:5f:58:be:93:1c:fc:62:
         b5:e0:e4:4d:8c:a6:4b:82:e3:72:aa:ac:c7:88:6a:5f:51:4b:
         a0:ec:84:65:d0:71:3a:68:61:56:e6:b1:ac:8b:d5:73:d4:63:
         4e:a7:95:30:37:86:02:d9:f2:69:66:33:36:b8:70:a1:9e:ad:
         20:86:36:86:67:32:98:ac:3c:a1:9d:24:72:29:6c:96:ad:9a:
         3d:8a:26:b2:c8:b6:0a:96:c6:26:69:d7:15:b9:6a:0e:d2:0c:
         80:4a:bd:c4:e1:36:c5:03:93:b6:c2:48:9a:b6:b2:5e:d5:04:
         9c:cb:d2:04:0f:35:c3:d3:89:70:c2:17:c4:c2:15:c7:a7:e5:
         2b:18:94:a6:d2:dc:30:d6:cf:ae:da:7b:ae:9d:c2:32:fd:33:
         f0:17:65:bf:94:61:cf:3b:c8:34:a1:a3:c5:2b:33:91:2f:a7:
         e3:db:ea:b3:da:02:4e:7b:4c:53:70:65:d1:e2:e5:34:bf:3d:
         98:a7:29:e4:e1:66:2f:3c:5e:3d:a9:6f:9e:5d:fc:62:97:a0:
         b7:1d:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org