Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS136744.roa
File:                     AS136744.roa (raw, json)
Hash identifier:          uq2I7kSdW9nx8WgHO/rHY/NoAXmnSexL/RfnY+iCh7Y=
Subject key identifier:   E8:38:B4:90:FF:05:6F:99:DC:FB:F9:50:0E:38:E3:90:19:A1:C1:C6
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       074B548410CA6C708408F67801D884515CDE1F45
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS136744.roa
Signing time:             Mon 28 Nov 2022 12:18:16 +0000
ROA not before:           Mon 28 Nov 2022 12:13:16 +0000
ROA not after:            Mon 27 Nov 2023 12:18:16 +0000
asID:                     136744
IP address blocks:        92.118.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4b:54:84:10:ca:6c:70:84:08:f6:78:01:d8:84:51:5c:de:1f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:16 2022 GMT
            Not After : Nov 27 12:18:16 2023 GMT
        Subject: CN=E838B490FF056F99DCFBF9500E38E39019A1C1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:5c:86:f4:de:df:85:3c:96:b6:07:05:0a:
                    a0:75:62:4d:40:73:12:27:e5:d1:51:51:50:e6:62:
                    a3:ac:ce:74:87:ec:84:40:9d:cd:d5:a4:d6:ab:8c:
                    ad:56:d4:7e:13:00:59:73:64:77:82:d4:e3:d2:37:
                    d5:23:60:e8:17:70:67:33:ac:a1:24:3c:10:16:75:
                    e1:33:f5:80:2b:a1:3d:d1:a8:a6:8e:35:5e:e0:84:
                    99:ef:74:f8:6f:47:70:dd:3e:5f:71:25:e6:1f:89:
                    57:ca:5f:cb:d5:c3:89:2a:d2:91:a5:90:ff:d7:91:
                    4a:fa:59:dc:3a:25:c0:24:02:56:cd:96:79:ad:d7:
                    25:b2:ad:64:53:20:5b:86:90:34:ad:75:6c:b9:a0:
                    07:74:29:e7:75:a7:aa:4c:f6:17:27:56:7a:76:a2:
                    64:a4:b3:78:4a:c2:cb:24:ac:02:3b:10:02:7c:5e:
                    89:fd:af:5a:73:d1:e9:bc:65:03:0a:8f:02:14:84:
                    93:e6:04:56:49:3c:aa:92:e5:da:62:20:cb:de:10:
                    73:fd:9a:ae:22:2d:fe:05:12:84:a1:9c:d7:6a:34:
                    43:3a:c8:08:0b:9f:bb:4d:9d:8b:2e:7d:57:59:0d:
                    5b:cb:14:13:14:4e:b1:7f:35:f7:0d:fa:9c:84:61:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:B4:90:FF:05:6F:99:DC:FB:F9:50:0E:38:E3:90:19:A1:C1:C6
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS136744.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:fd:9b:2a:6d:e5:bb:1b:14:64:c4:5e:fb:d2:dc:c9:7c:3f:
         f5:5a:10:78:fa:87:f9:82:72:b4:64:86:35:3d:b4:6d:43:46:
         be:5d:e2:be:0a:cd:0f:5f:ae:a8:14:c1:53:7c:ce:78:6f:ee:
         4b:a9:30:4b:7a:73:6c:df:47:7f:73:cc:38:16:79:76:9a:2e:
         71:5c:6d:43:45:05:ce:d0:57:ea:63:57:ca:a4:02:75:ed:e7:
         fa:7a:83:64:db:05:aa:4f:6d:ef:cc:67:9a:87:57:f9:a7:ad:
         1d:c1:d8:eb:77:e5:fe:53:ef:4e:46:4c:62:53:85:bd:e0:3b:
         ac:50:f6:84:3c:39:26:61:bb:1b:76:7d:22:ab:6d:ef:85:03:
         af:ff:b7:39:5d:22:ed:d4:ad:35:f0:fa:49:69:7d:68:fc:26:
         dc:7b:87:20:2d:19:56:1f:a9:d5:5f:88:a0:93:40:b9:97:26:
         9c:f1:10:5f:f0:11:b0:d8:73:21:eb:35:a1:00:15:2f:68:e4:
         91:d0:24:dd:82:54:44:41:09:47:e4:e5:6b:72:29:6b:0f:d5:
         5e:af:be:6d:95:6c:89:9f:0d:1d:db:00:4a:63:02:65:3f:25:
         b2:e0:4d:d8:c1:93:19:8d:6a:79:d1:2f:f6:4e:a3:ea:dd:65:
         19:21:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org