Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205320.roa
File:                     AS205320.roa (raw, json)
Hash identifier:          atpPG8mO9yHDsM6/G4dXLGjLUW53M4eUleCRgA6cDck=
Subject key identifier:   77:1B:D1:C9:41:7B:5C:E5:C4:87:84:24:CB:55:7A:C6:EB:97:8A:BC
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       64773AC26CD6B8339F9D2A34E5B97C4DAC21183D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205320.roa
Signing time:             Fri 02 Dec 2022 16:33:19 +0000
ROA not before:           Fri 02 Dec 2022 16:28:19 +0000
ROA not after:            Fri 01 Dec 2023 16:33:19 +0000
asID:                     205320
IP address blocks:        45.139.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:77:3a:c2:6c:d6:b8:33:9f:9d:2a:34:e5:b9:7c:4d:ac:21:18:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec  2 16:28:19 2022 GMT
            Not After : Dec  1 16:33:19 2023 GMT
        Subject: CN=771BD1C9417B5CE5C4878424CB557AC6EB978ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:0a:43:51:a2:ba:3d:02:b8:10:25:d3:cb:
                    60:6e:c0:a9:c5:55:7c:42:a0:26:3b:31:1f:2d:02:
                    6c:34:55:2d:79:f5:77:72:9a:19:60:35:e3:2a:cf:
                    75:bf:a7:2a:e0:a6:c3:62:05:45:69:b2:08:3e:13:
                    c0:d3:2d:fd:56:9b:6b:e4:c0:c7:f7:e8:0c:e0:44:
                    8d:6a:ce:a6:b5:f6:f7:03:01:90:46:f9:e7:c0:67:
                    47:f2:66:ab:81:fa:f3:d3:3d:e5:36:23:23:ea:d9:
                    6c:f8:dd:34:7b:af:19:47:d5:08:f3:21:33:9f:dd:
                    95:e4:58:7d:14:ed:04:40:dc:68:ec:e9:75:83:8d:
                    12:92:22:cf:20:fd:05:5b:c4:81:ab:6c:4c:18:2b:
                    f6:ef:20:5c:56:cd:11:88:3b:fb:3b:17:fc:5e:f2:
                    43:16:ae:3e:36:0f:ae:82:95:01:0f:fb:40:d5:73:
                    0e:62:70:4d:01:08:57:f5:b2:d0:4f:da:67:62:fc:
                    49:6e:cb:a9:db:85:9a:94:1c:9d:0c:b6:93:f8:8a:
                    a0:54:be:a8:8e:a6:81:b1:1b:b6:1b:5a:b7:84:5c:
                    75:d5:01:30:86:0a:56:96:63:09:ed:83:79:1a:af:
                    32:42:ce:12:af:66:b9:dc:f3:91:0d:fb:3f:cb:c7:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1B:D1:C9:41:7B:5C:E5:C4:87:84:24:CB:55:7A:C6:EB:97:8A:BC
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:cc:fc:98:d5:39:69:95:f4:84:87:d4:18:af:fc:ca:14:86:
         d0:e2:3c:ff:d1:db:2d:2f:3a:e7:7e:ab:6f:39:c6:52:89:ff:
         eb:42:e0:3a:ee:77:33:c0:af:78:95:9a:c1:a7:a9:7b:0c:8b:
         36:7e:af:03:2e:d0:f4:21:8c:45:fa:57:d7:f7:5c:19:79:34:
         f3:d4:0e:4f:5b:39:9b:bf:aa:7e:98:57:e0:df:1f:40:01:89:
         84:87:66:3f:9e:91:ea:cd:3f:bd:45:71:c7:28:1d:31:72:74:
         a4:0a:f5:64:0e:07:12:d5:dc:d4:9e:06:67:86:7e:68:f9:fc:
         9a:1e:2e:95:b9:93:33:7e:b2:0a:7d:70:74:82:75:99:0d:3d:
         fc:2a:92:78:24:1b:4a:52:1f:8b:52:d9:aa:27:8c:3e:61:bf:
         07:90:8f:15:a7:ae:69:aa:bd:15:d1:f3:ef:20:f8:ce:4b:eb:
         7f:6a:51:1e:31:a1:ed:35:f1:1f:e7:7e:df:0a:d7:75:ff:ad:
         5d:26:06:93:eb:56:46:d2:ba:4e:c6:69:b1:ff:a4:8e:50:ce:
         4d:8d:00:10:75:9a:71:ea:a9:31:94:8c:17:d0:5d:81:92:f3:
         47:97:0c:34:e3:ee:53:8e:a7:cb:2c:91:fa:26:89:99:d1:23:
         e3:b2:44:c1
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUZHc6wmzWuDOfnSo05bl8TawhGD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjEyMDIxNjI4MTlaFw0yMzEyMDExNjMzMTlaMDMxMTAvBgNV
BAMTKDc3MUJEMUM5NDE3QjVDRTVDNDg3ODQyNENCNTU3QUM2RUI5NzhBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9gpDUaK6PQK4ECXTy2BuwKnF
VXxCoCY7MR8tAmw0VS159XdymhlgNeMqz3W/pyrgpsNiBUVpsgg+E8DTLf1Wm2vk
wMf36AzgRI1qzqa19vcDAZBG+efAZ0fyZquB+vPTPeU2IyPq2Wz43TR7rxlH1Qjz
ITOf3ZXkWH0U7QRA3Gjs6XWDjRKSIs8g/QVbxIGrbEwYK/bvIFxWzRGIO/s7F/xe
8kMWrj42D66ClQEP+0DVcw5icE0BCFf1stBP2mdi/Eluy6nbhZqUHJ0MtpP4iqBU
vqiOpoGxG7YbWreEXHXVATCGClaWYwntg3karzJCzhKvZrnc85EN+z/Lx85jAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUdxvRyUF7XOXEh4Qky1V6xuuXirwwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMDUzMjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAti7cwDQYJKoZIhvcNAQELBQADggEBADbM
/JjVOWmV9ISH1Biv/MoUhtDiPP/R2y0vOud+q285xlKJ/+tC4DrudzPAr3iVmsGn
qXsMizZ+rwMu0PQhjEX6V9f3XBl5NPPUDk9bOZu/qn6YV+DfH0ABiYSHZj+ekerN
P71FcccoHTFydKQK9WQOBxLV3NSeBmeGfmj5/JoeLpW5kzN+sgp9cHSCdZkNPfwq
kngkG0pSH4tS2aonjD5hvweQjxWnrmmqvRXR8+8g+M5L639qUR4xoe018R/nft8K
13X/rV0mBpPrVkbSuk7GabH/pI5Qzk2NABB1mnHqqTGUjBfQXYGS80eXDDTj7lOO
p8sskfomiZnRI+OyRME=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org