Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS139660.roa
File:                     AS139660.roa (raw, json)
Hash identifier:          APx0X3H7r5WgmNLdiTiAjBfpEuYOJsLsSZs5FegfBW8=
Subject key identifier:   92:E6:71:CE:A4:C7:81:4C:13:C1:15:BF:D8:73:AC:6D:7F:5D:A5:D9
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       02B22A9D374BBB3E40181E4E96517318341222D2
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS139660.roa
Signing time:             Fri 03 Feb 2023 15:00:44 +0000
ROA not before:           Fri 03 Feb 2023 14:55:44 +0000
ROA not after:            Fri 02 Feb 2024 15:00:44 +0000
asID:                     139660
IP address blocks:        92.118.162.0/24 maxlen: 24
                          191.101.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b2:2a:9d:37:4b:bb:3e:40:18:1e:4e:96:51:73:18:34:12:22:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  3 14:55:44 2023 GMT
            Not After : Feb  2 15:00:44 2024 GMT
        Subject: CN=92E671CEA4C7814C13C115BFD873AC6D7F5DA5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:c9:e2:59:a9:1f:dc:54:79:b9:7b:21:ac:
                    2b:70:ea:8f:62:bb:a8:7a:5c:d5:18:79:16:f5:43:
                    b4:be:4a:45:82:e5:07:44:1a:84:f7:b3:b0:d8:32:
                    a4:b7:87:cc:6e:69:a8:34:60:bb:62:c9:ff:6f:35:
                    82:1f:32:29:c1:91:03:18:79:e5:b9:c1:2e:2f:16:
                    81:0b:56:57:42:6c:68:2b:4d:fe:14:59:ca:20:c0:
                    a7:c7:b5:06:c3:1e:fc:a8:6c:6e:30:c1:37:24:03:
                    34:54:96:97:39:78:90:d1:1c:a7:cf:fb:7d:4f:1b:
                    33:4b:9e:1f:02:ba:78:e1:a8:8b:89:f8:48:43:fe:
                    af:27:8e:1f:2e:c8:dd:3b:f9:67:ae:ed:75:28:df:
                    7b:ab:bc:1b:b6:80:6f:2d:f2:63:23:ac:a9:b6:5e:
                    49:7c:40:5c:29:41:79:39:6a:62:9e:1e:74:cf:de:
                    7e:ae:fe:1f:16:61:f0:7d:76:3c:f6:ef:90:f8:e7:
                    32:78:5a:30:84:80:a0:71:dc:c7:e9:da:b6:99:83:
                    99:f1:2f:c9:33:dc:c4:88:e6:b1:8d:90:b8:ac:67:
                    be:b3:e3:69:8e:de:e3:06:ad:c7:94:e4:19:e4:c8:
                    11:f2:a6:c8:68:4d:45:1c:77:5c:3f:1a:52:55:76:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:71:CE:A4:C7:81:4C:13:C1:15:BF:D8:73:AC:6D:7F:5D:A5:D9
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS139660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.162.0/24
                  191.101.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:cc:a7:e2:69:bb:e1:a0:9c:fa:07:8d:87:0b:6e:75:b7:4e:
         5d:73:27:83:41:2d:0a:8d:be:4e:e4:94:ad:18:79:93:e9:38:
         64:11:a7:16:08:6c:67:c5:39:01:34:e6:b7:b4:74:0d:46:dd:
         20:15:54:17:e8:e3:6b:f4:7f:03:e9:c4:18:41:3f:e4:b6:2c:
         79:05:85:fa:62:fa:de:43:cb:af:44:b9:28:46:c9:c4:8e:7a:
         e2:ab:cc:b2:4f:27:ae:1f:e0:25:63:1a:a0:27:3b:76:39:cd:
         7e:d6:4a:f8:f4:64:56:e5:e2:97:c0:a1:0e:bf:44:83:9b:6b:
         28:77:0b:d5:11:95:a6:d1:08:a0:c4:e0:7f:1a:36:a3:96:94:
         83:47:24:a1:ba:18:eb:24:47:f7:c4:1f:b7:42:3a:00:a1:52:
         84:61:77:40:a0:53:51:bd:eb:94:9b:80:da:5e:42:6f:9c:8f:
         8f:e2:fb:08:18:fc:6f:2b:22:b6:6f:2b:fa:95:a6:84:e8:22:
         b8:6e:46:9c:3c:0f:a7:fc:59:b9:c3:ff:11:52:5b:bc:98:da:
         1e:66:17:78:a0:48:e4:f6:f1:4a:36:4a:36:d6:cf:25:70:6f:
         f1:4e:35:13:2a:7d:e1:73:68:9d:63:45:06:4b:1d:6d:cc:13:
         fc:05:86:2a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIUArIqnTdLuz5AGB5OllFzGDQSItIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMDMxNDU1NDRaFw0yNDAyMDIxNTAwNDRaMDMxMTAvBgNV
BAMTKDkyRTY3MUNFQTRDNzgxNEMxM0MxMTVCRkQ4NzNBQzZEN0Y1REE1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0cniWakf3FR5uXshrCtw6o9i
u6h6XNUYeRb1Q7S+SkWC5QdEGoT3s7DYMqS3h8xuaag0YLtiyf9vNYIfMinBkQMY
eeW5wS4vFoELVldCbGgrTf4UWcogwKfHtQbDHvyobG4wwTckAzRUlpc5eJDRHKfP
+31PGzNLnh8CunjhqIuJ+EhD/q8njh8uyN07+Weu7XUo33urvBu2gG8t8mMjrKm2
Xkl8QFwpQXk5amKeHnTP3n6u/h8WYfB9djz275D45zJ4WjCEgKBx3Mfp2raZg5nx
L8kz3MSI5rGNkLisZ76z42mO3uMGrceU5BnkyBHypshoTUUcd1w/GlJVdv9tAgMB
AAGjggH6MIIB9jAdBgNVHQ4EFgQUkuZxzqTHgUwTwRW/2HOsbX9dpdkwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMxMzk2NjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYB
BQUHAQcBAf8EFjAUMBIEAgABMAwDBABcdqIDBAC/ZWcwDQYJKoZIhvcNAQELBQAD
ggEBAIHMp+Jpu+GgnPoHjYcLbnW3Tl1zJ4NBLQqNvk7klK0YeZPpOGQRpxYIbGfF
OQE05re0dA1G3SAVVBfo42v0fwPpxBhBP+S2LHkFhfpi+t5Dy69EuShGycSOeuKr
zLJPJ64f4CVjGqAnO3Y5zX7WSvj0ZFbl4pfAoQ6/RIObayh3C9URlabRCKDE4H8a
NqOWlINHJKG6GOskR/fEH7dCOgChUoRhd0CgU1G965SbgNpeQm+cj4/i+wgY/G8r
IrZvK/qVpoToIrhuRpw8D6f8WbnD/xFSW7yY2h5mF3igSOT28Uo2SjbWzyVwb/FO
NRMqfeFzaJ1jRQZLHW3ME/wFhio=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org