Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS137571.roa
File:                     AS137571.roa (raw, json)
Hash identifier:          qyYhV9uNxTq4pb00UbgeBAIV4Ao/XWsb0k+Rq21xRLM=
Subject key identifier:   A0:DA:6D:51:17:DE:65:1E:1D:39:2E:6A:89:C4:7A:96:B7:1D:12:D4
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3ECF63CA8A07EB298B34EF916D714F192D11C6FA
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS137571.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     137571
IP address blocks:        191.101.44.0/22 maxlen: 24
                          191.101.45.0/24 maxlen: 24
                          191.101.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cf:63:ca:8a:07:eb:29:8b:34:ef:91:6d:71:4f:19:2d:11:c6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=A0DA6D5117DE651E1D392E6A89C47A96B71D12D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:8d:b0:d2:48:a8:88:9b:58:37:11:34:dc:
                    55:13:fb:1c:12:33:d4:da:2e:1b:61:5b:a2:8c:14:
                    91:58:df:0a:6e:e7:a8:7d:02:85:96:c7:e8:cf:47:
                    85:51:0f:65:9d:b7:03:d8:1c:e1:06:05:4b:66:59:
                    27:df:36:2d:40:1c:ed:91:ab:f8:2b:da:a5:db:b5:
                    fc:dc:7c:03:1e:24:aa:7f:4f:67:38:8c:3c:71:ee:
                    2b:aa:82:a5:34:f4:e8:9b:b8:23:de:54:be:04:8e:
                    6e:3a:16:c2:4d:46:c0:f7:09:fc:f0:7f:9d:26:c5:
                    e2:01:ce:98:8c:d7:67:2f:8a:c4:65:57:76:a5:89:
                    03:19:ac:ec:54:80:f7:8b:83:b9:65:b5:12:8a:bf:
                    87:bb:f4:f0:bf:2e:59:00:b2:fd:67:e6:d6:43:e9:
                    fb:fd:8b:0c:d3:4d:22:d2:91:a2:96:82:a9:de:1f:
                    6d:ce:c4:60:99:47:8a:a9:7a:01:0d:f6:83:9c:35:
                    82:4b:8e:94:45:08:d3:65:a3:3f:99:d3:03:68:f1:
                    76:19:20:20:78:5a:e6:27:92:60:58:6d:f5:be:28:
                    63:21:3c:39:14:7f:ec:9e:b2:7c:61:1a:a6:cf:28:
                    dc:69:6e:cf:db:ca:17:75:41:20:31:66:fe:e1:b0:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DA:6D:51:17:DE:65:1E:1D:39:2E:6A:89:C4:7A:96:B7:1D:12:D4
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS137571.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:53:b0:87:88:10:72:63:fe:bd:df:04:17:58:cc:f6:cb:
         25:30:c2:bb:27:f2:f8:b8:a2:57:e5:8d:60:bb:7b:15:8d:64:
         06:eb:68:a3:fb:ea:ce:7e:b3:db:16:36:66:49:93:4d:9e:7a:
         66:d5:a3:fc:b3:cf:bb:35:70:5e:6f:ab:97:c7:ca:ee:3d:11:
         12:66:e8:0e:db:ca:15:50:e1:18:94:30:f6:0f:ae:d0:c5:d2:
         4e:60:e5:d1:4e:77:56:66:aa:9f:d6:c0:32:06:d5:6e:c4:61:
         f8:44:0f:98:97:19:ba:65:2b:70:a2:b6:3f:c8:62:c6:83:b2:
         7c:9a:6e:f2:56:ab:aa:5c:5c:78:de:34:23:b9:6f:fd:ca:0c:
         65:5f:b3:7b:5f:0f:50:fd:44:d9:36:2f:e4:63:10:4c:f9:cd:
         61:fe:4d:9f:80:09:cb:c8:79:ab:34:10:0a:b7:b5:ad:5c:cb:
         df:61:f5:52:4d:e4:93:61:c7:0a:a7:1b:fe:d2:83:c0:cf:e3:
         a1:27:bc:1e:48:68:f0:5f:cc:1b:80:3d:14:10:0b:e2:55:85:
         19:3d:db:ae:30:eb:d9:d9:31:8d:ff:f2:20:69:79:cc:30:08:
         b3:d5:42:5b:74:3c:a3:cc:1c:84:31:c3:0a:0f:57:8b:85:84:
         e2:07:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org