Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS138156.roa
File:                     AS138156.roa (raw, json)
Hash identifier:          CCpBy72wGuCCn3sPfvlbmrza+H2Cudllyus06bJveyM=
Subject key identifier:   33:CF:E8:A3:94:3F:D5:B4:35:96:C8:A9:99:93:E5:32:33:22:6D:D0
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4FBA66F7B87ED33E6981C0532BB45961DD6EF733
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS138156.roa
Signing time:             Mon 09 Jan 2023 07:30:10 +0000
ROA not before:           Mon 09 Jan 2023 07:25:10 +0000
ROA not after:            Mon 08 Jan 2024 07:30:10 +0000
asID:                     138156
IP address blocks:        181.215.50.0/23 maxlen: 23
                          181.215.164.0/23 maxlen: 23
                          191.96.92.0/24 maxlen: 24
                          191.96.93.0/24 maxlen: 24
                          191.101.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ba:66:f7:b8:7e:d3:3e:69:81:c0:53:2b:b4:59:61:dd:6e:f7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan  9 07:25:10 2023 GMT
            Not After : Jan  8 07:30:10 2024 GMT
        Subject: CN=33CFE8A3943FD5B43596C8A99993E53233226DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:b2:91:eb:5c:e9:e9:98:27:80:46:1c:00:
                    67:54:2f:5c:2c:b6:e1:9e:ab:08:ae:ac:8a:7d:67:
                    08:42:09:2d:a5:16:bc:ae:c0:b4:ef:63:03:18:41:
                    06:b5:c9:ee:42:2e:a3:68:65:1f:ce:93:9e:a0:f5:
                    a2:c4:0a:d7:36:8a:a5:0e:87:9e:f9:a9:f4:d1:6c:
                    e9:25:b7:e5:12:6a:8c:b5:a8:5b:6d:bf:92:c1:17:
                    e5:94:1e:df:ec:fa:41:fc:ca:a0:de:f8:fb:c9:4e:
                    0a:07:8e:23:63:32:ca:fc:dc:6c:43:e9:cb:e5:55:
                    b1:14:2f:38:4b:88:a7:04:ca:bf:15:0c:4a:ab:21:
                    6d:3c:55:48:b8:32:9f:df:15:48:5e:bb:ed:98:9d:
                    20:89:51:80:0a:d7:8f:b0:f4:71:ca:7e:9b:0e:f6:
                    40:9e:70:53:c5:ac:d7:da:d5:0b:4b:99:91:e6:a1:
                    32:cc:3a:25:5f:7c:50:86:6a:cd:22:9d:60:ad:cf:
                    c8:f2:ba:e6:df:85:26:21:2c:3c:35:a7:cd:aa:43:
                    eb:7d:a4:21:0d:b8:7e:e4:7e:0c:83:d4:ec:0d:39:
                    ed:36:54:e9:47:c8:f7:6b:de:6e:19:29:72:51:89:
                    f2:6f:03:e2:01:2c:21:5b:17:37:5f:d9:9d:16:c2:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CF:E8:A3:94:3F:D5:B4:35:96:C8:A9:99:93:E5:32:33:22:6D:D0
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS138156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.50.0/23
                  181.215.164.0/23
                  191.96.92.0/23
                  191.101.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:73:da:8a:d9:87:be:e0:c5:21:f7:6c:6a:9c:03:2a:b5:2e:
         3c:0c:f3:0d:91:c0:b8:35:8f:d6:cf:ad:03:6b:46:33:a5:bb:
         35:19:87:31:4c:07:e1:34:21:e6:7b:de:45:07:ca:10:4a:ff:
         74:b4:02:92:ec:8c:00:3f:16:d6:4a:34:2c:cd:2a:d9:21:01:
         f7:66:67:0b:8c:12:72:48:14:f0:2d:2c:fe:fa:0a:85:e2:e5:
         b2:b0:84:cc:d9:7e:83:5d:81:2b:8e:77:12:d3:51:f0:3c:72:
         38:c0:df:56:ee:87:88:41:fd:b9:c3:f0:03:65:54:5f:d0:cc:
         48:69:05:e2:0b:cb:9c:e1:78:75:5e:87:7d:65:e3:99:9a:99:
         33:c2:2b:00:54:e4:4f:b4:5a:45:74:f0:1a:41:54:80:e5:57:
         a9:d1:37:83:90:4c:95:aa:92:90:ee:d4:01:0b:10:ac:ab:c3:
         ec:17:73:66:fb:91:fb:c7:83:6f:8a:7a:b0:82:c5:8d:96:f8:
         73:8a:4c:ab:7d:50:83:04:80:47:22:58:9f:65:28:05:1c:ec:
         cc:c6:2b:dc:19:00:2f:f8:17:5d:68:94:da:49:11:4d:76:47:
         ce:6e:d8:5a:32:3a:ec:3d:95:e8:22:4a:d4:57:97:83:20:ec:
         e0:1a:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org