Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS206995.roa
File:                     AS206995.roa (raw, json)
Hash identifier:          elvzgaF1y37ws701nEfbFC4r08bxPBzQ0Qzkh2XrmCI=
Subject key identifier:   8B:39:2C:4E:98:F4:62:4E:4E:38:E6:6C:4D:01:C8:E6:04:CA:CF:4A
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       268E07D0E1EEFFC294C0942ACCD5C18A057DD7C0
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS206995.roa
Signing time:             Fri 24 Feb 2023 08:04:13 +0000
ROA not before:           Fri 24 Feb 2023 07:59:13 +0000
ROA not after:            Fri 23 Feb 2024 08:04:13 +0000
asID:                     206995
IP address blocks:        181.214.75.0/24 maxlen: 24
                          185.158.151.0/24 maxlen: 24
                          191.96.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8e:07:d0:e1:ee:ff:c2:94:c0:94:2a:cc:d5:c1:8a:05:7d:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 24 07:59:13 2023 GMT
            Not After : Feb 23 08:04:13 2024 GMT
        Subject: CN=8B392C4E98F4624E4E38E66C4D01C8E604CACF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:7b:c3:82:76:d9:7b:5f:3b:5f:61:28:01:
                    7a:fc:1c:1f:31:dc:5c:ce:1c:00:a7:86:82:32:13:
                    c0:dc:1e:c9:26:8e:9f:11:19:06:52:e1:e0:f4:7b:
                    21:5d:a4:83:d9:08:d5:9a:c6:7c:66:74:52:7b:64:
                    ec:65:6d:1f:6f:34:c4:c5:ac:0e:4e:7f:15:82:6a:
                    77:83:51:bd:d6:28:b4:61:df:30:2e:4f:fc:52:33:
                    e2:77:03:34:b1:e9:7e:c4:a4:09:dd:0e:eb:ed:e0:
                    e5:af:54:ed:de:88:67:2e:05:d8:ca:df:8c:3d:b7:
                    d1:e9:b2:fb:96:4d:25:83:c1:5c:4a:28:05:ac:a4:
                    4a:4a:41:f3:dd:1d:07:63:c7:94:eb:f4:97:0a:01:
                    bc:6b:c8:58:a1:d2:b9:d9:d0:0f:da:ab:5a:4b:12:
                    0b:1c:f8:d7:72:a4:cd:0c:41:49:85:fb:ce:d6:45:
                    51:53:ea:ba:8f:ca:e8:24:6d:39:ac:78:3b:86:ce:
                    52:09:db:f7:45:72:46:d5:15:dc:fa:c3:1c:b6:d1:
                    4f:b6:1e:23:4e:2c:be:ad:59:b0:f6:56:b3:a8:fe:
                    e5:f3:51:bf:9d:68:2a:0f:a8:89:c9:bb:e1:b0:c9:
                    24:05:01:fb:e5:74:50:5b:01:1c:ef:3b:14:84:1b:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:39:2C:4E:98:F4:62:4E:4E:38:E6:6C:4D:01:C8:E6:04:CA:CF:4A
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS206995.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.75.0/24
                  185.158.151.0/24
                  191.96.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:d8:19:1d:3d:73:be:d1:07:6e:5d:71:3c:6f:37:fa:33:
         9f:05:4e:e6:40:15:25:38:e2:bd:92:09:f2:b6:77:3a:12:92:
         b7:2e:30:56:99:38:44:3d:60:5d:a4:3c:82:9c:da:36:c6:41:
         80:ae:a7:e2:5c:00:02:1c:bb:66:e1:a3:37:e9:3a:58:5e:21:
         63:cc:1b:f1:df:e0:88:b8:01:fe:d6:1c:f3:95:d7:9e:09:08:
         2b:38:ee:79:d1:56:e7:b5:8b:fc:76:30:0c:aa:fc:b3:50:e0:
         48:5b:8d:51:bb:86:bd:ae:c1:fc:4a:e3:67:60:71:1d:5c:a4:
         49:43:67:45:e7:f1:1f:00:83:80:47:d1:97:73:ff:84:b3:07:
         f9:bd:23:1c:bc:32:2f:07:17:87:75:cc:f9:30:27:14:39:f0:
         dd:1e:11:a3:97:f3:60:17:a9:af:b9:b8:d9:0b:fb:db:05:37:
         92:1b:d0:e8:c1:a0:e2:11:40:07:74:1f:1f:c4:a9:44:b6:20:
         a8:6f:52:6d:c6:27:91:c9:c2:ea:19:4c:50:7a:73:e2:ca:8d:
         79:70:b4:85:e6:4a:23:ce:1b:c1:41:9d:30:43:9b:43:1c:ca:
         7d:b4:70:ee:68:49:18:fb:c1:2f:09:0b:95:2b:8e:72:1f:4a:
         82:fe:21:6d
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIUJo4H0OHu/8KUwJQqzNXBigV918AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMjQwNzU5MTNaFw0yNDAyMjMwODA0MTNaMDMxMTAvBgNV
BAMTKDhCMzkyQzRFOThGNDYyNEU0RTM4RTY2QzREMDFDOEU2MDRDQUNGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdHvDgnbZe187X2EoAXr8HB8x
3FzOHACnhoIyE8DcHskmjp8RGQZS4eD0eyFdpIPZCNWaxnxmdFJ7ZOxlbR9vNMTF
rA5OfxWCaneDUb3WKLRh3zAuT/xSM+J3AzSx6X7EpAndDuvt4OWvVO3eiGcuBdjK
34w9t9HpsvuWTSWDwVxKKAWspEpKQfPdHQdjx5Tr9JcKAbxryFih0rnZ0A/aq1pL
Egsc+NdypM0MQUmF+87WRVFT6rqPyugkbTmseDuGzlIJ2/dFckbVFdz6wxy20U+2
HiNOLL6tWbD2VrOo/uXzUb+daCoPqInJu+GwySQFAfvldFBbARzvOxSEG8uBAgMB
AAGjggIAMIIB/DAdBgNVHQ4EFgQUizksTpj0Yk5OOOZsTQHI5gTKz0owHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMDY5OTUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYB
BQUHAQcBAf8EHDAaMBgEAgABMBIDBAC11ksDBAC5npcDBAC/YJowDQYJKoZIhvcN
AQELBQADggEBAA6K2BkdPXO+0QduXXE8bzf6M58FTuZAFSU44r2SCfK2dzoSkrcu
MFaZOEQ9YF2kPIKc2jbGQYCup+JcAAIcu2bhozfpOlheIWPMG/Hf4Ii4Af7WHPOV
154JCCs47nnRVue1i/x2MAyq/LNQ4EhbjVG7hr2uwfxK42dgcR1cpElDZ0Xn8R8A
g4BH0Zdz/4SzB/m9Ixy8Mi8HF4d1zPkwJxQ58N0eEaOX82AXqa+5uNkL+9sFN5Ib
0OjBoOIRQAd0Hx/EqUS2IKhvUm3GJ5HJwuoZTFB6c+LKjXlwtIXmSiPOG8FBnTBD
m0Mcyn20cO5oSRj7wS8JC5UrjnIfSoL+IW0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org