Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS204843.roa
File:                     AS204843.roa (raw, json)
Hash identifier:          4BYkQvFwSc1ClNL5Zo3D5vmB/vD0pR5MyS1cbbhXHrM=
Subject key identifier:   F2:6E:A3:BA:5A:5A:C7:76:7B:73:6D:09:8C:C4:C2:92:4A:24:F4:B1
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       22139A9B927550E74377D54CF6FBDE63EF14E8CA
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS204843.roa
Signing time:             Wed 22 Feb 2023 22:27:23 +0000
ROA not before:           Wed 22 Feb 2023 22:22:23 +0000
ROA not after:            Wed 21 Feb 2024 22:27:23 +0000
asID:                     204843
IP address blocks:        179.61.148.0/24 maxlen: 24
                          181.215.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:13:9a:9b:92:75:50:e7:43:77:d5:4c:f6:fb:de:63:ef:14:e8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 22 22:22:23 2023 GMT
            Not After : Feb 21 22:27:23 2024 GMT
        Subject: CN=F26EA3BA5A5AC7767B736D098CC4C2924A24F4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:8a:d8:30:a1:76:2d:d9:fd:3a:3b:55:59:
                    20:dd:57:0c:ec:64:69:36:86:e1:db:29:1c:5d:68:
                    ac:45:2d:d7:bc:06:1b:64:32:7d:29:99:85:e2:9e:
                    0c:2a:cf:8a:fc:1b:f0:c8:e8:ed:0e:aa:99:0b:25:
                    be:9f:6c:5c:04:0b:38:5f:b4:41:85:ba:40:0f:83:
                    12:11:d2:c7:f0:b2:0f:2e:37:32:69:b4:a5:71:ef:
                    03:c9:6e:26:d0:2b:cc:96:1e:6f:f6:0b:29:1a:bf:
                    59:62:5b:e7:ee:35:f1:f7:d0:8c:77:b2:4c:c5:1f:
                    3c:50:69:87:54:27:83:15:4d:08:c9:e9:d2:77:30:
                    a6:e9:c4:b4:7c:7e:1a:40:f9:d8:8b:59:45:66:05:
                    d5:9d:61:d0:79:76:0d:e1:fe:c8:60:cc:44:5a:46:
                    78:4e:e0:be:b8:78:66:0a:64:f6:65:d7:15:c5:50:
                    f9:56:e3:3b:c4:9a:f7:63:6e:45:f7:00:a6:2b:70:
                    36:04:cf:f8:be:f0:9d:4b:d9:f8:60:7e:20:8b:c3:
                    b9:b8:85:27:00:79:e0:b5:a3:2c:10:ae:f2:15:e2:
                    46:c3:4b:9c:ef:83:22:eb:06:a8:cf:b5:27:17:d2:
                    88:ab:05:c9:5d:c8:04:5a:6c:0b:f9:66:7b:8a:ab:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:A3:BA:5A:5A:C7:76:7B:73:6D:09:8C:C4:C2:92:4A:24:F4:B1
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS204843.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.148.0/24
                  181.215.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:3d:65:33:67:16:0c:5c:f0:1e:db:67:bb:6c:fa:65:4e:
         19:2c:b9:e9:0d:ca:37:ec:22:00:88:09:b3:09:f4:92:64:30:
         60:b7:fa:1d:86:9e:22:f8:33:08:4d:3a:07:44:3e:cb:48:ab:
         34:02:d2:e6:ba:ec:8f:50:84:41:35:f2:bf:e7:bf:44:a9:b8:
         a3:56:6a:ab:83:7a:14:68:d5:2b:1d:4a:b2:35:37:52:8a:fe:
         44:ec:f5:02:c4:0a:0d:06:42:0a:c1:71:5e:a7:7d:09:00:af:
         d6:04:5c:9e:aa:41:df:98:91:87:cf:38:f2:98:96:6c:0e:d8:
         70:41:cf:d5:10:dc:e5:da:d7:a0:22:69:8b:da:8a:06:52:6e:
         4a:0b:0b:7b:50:2b:e4:b6:64:18:4d:9c:a6:71:ab:ae:61:37:
         ac:ab:7c:84:0e:4c:57:a7:1d:7b:da:c4:a8:58:d8:b9:ec:d3:
         e6:08:f0:93:96:e1:b3:60:c9:24:e6:be:dc:55:c5:f2:3e:ae:
         eb:07:fb:3c:ad:45:55:ef:fd:e4:e7:83:19:68:63:f9:83:5b:
         9b:3d:fc:0d:7c:82:b3:c7:32:09:ca:da:26:f4:1d:a1:6b:8d:
         5a:03:d3:a8:e4:50:c8:92:5f:5b:da:3a:c7:83:47:af:6c:14:
         fa:ba:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org