Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210439.roa
File:                     AS210439.roa (raw, json)
Hash identifier:          2gLsdhWiydODB/rzW5R7vSBtxnpTN0g5kE6/APotlgU=
Subject key identifier:   43:EA:4A:1F:4E:94:C1:5E:EF:BC:11:5D:6A:F9:50:44:4D:16:94:83
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       040F175CD3DA81A61B12E121736FE5A5427F6C7C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210439.roa
Signing time:             Mon 27 Feb 2023 07:41:28 +0000
ROA not before:           Mon 27 Feb 2023 07:36:28 +0000
ROA not after:            Mon 26 Feb 2024 07:41:28 +0000
asID:                     210439
IP address blocks:        179.61.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:17:5c:d3:da:81:a6:1b:12:e1:21:73:6f:e5:a5:42:7f:6c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 27 07:36:28 2023 GMT
            Not After : Feb 26 07:41:28 2024 GMT
        Subject: CN=43EA4A1F4E94C15EEFBC115D6AF950444D169483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:e8:a4:67:f2:74:08:dc:18:2c:62:5e:96:
                    27:a7:fc:c1:c4:c3:3b:18:4e:7a:63:28:0d:4e:cf:
                    d1:14:a2:04:89:22:0b:30:19:45:c6:fd:9f:30:bd:
                    b0:bd:6d:22:25:ec:43:a9:9f:a5:e8:5a:66:b4:c1:
                    b5:f9:bf:17:14:d3:f5:85:d7:3e:a2:7b:45:35:73:
                    3a:62:bb:cc:ef:56:ad:d7:1b:fc:cc:17:e7:ab:30:
                    26:39:92:7b:64:ef:ba:4e:94:f7:98:22:ec:74:bc:
                    93:65:f6:d3:ed:d2:96:6a:7e:ed:a3:d0:34:40:f1:
                    c6:f7:36:60:77:63:8c:58:da:d6:06:83:7a:c5:df:
                    ab:6b:11:a3:54:d6:43:85:02:87:2b:ef:20:d3:42:
                    1b:f1:af:e1:93:a1:0c:c0:01:f4:59:36:96:c0:40:
                    72:36:4b:7c:43:75:ef:ae:26:4a:c6:21:e8:ef:80:
                    7f:af:2a:ca:21:cb:70:87:9c:62:50:1d:3a:27:29:
                    9a:da:28:a1:cd:f9:f0:d8:1b:59:2a:d7:0e:94:7a:
                    b6:6a:40:d8:84:b5:6f:4b:79:3e:f7:6a:95:d5:20:
                    c6:39:33:22:35:72:f1:9e:6e:e2:fe:5b:31:db:40:
                    6e:d6:62:08:bb:3f:7f:c5:d1:bb:39:2d:9a:1a:b0:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EA:4A:1F:4E:94:C1:5E:EF:BC:11:5D:6A:F9:50:44:4D:16:94:83
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:cf:8a:92:af:5e:51:8b:51:95:bf:eb:e9:4b:01:6f:b2:
         f5:50:a3:85:7c:86:12:00:58:72:11:cc:d5:ab:0e:cb:f1:16:
         97:04:b7:0a:cd:f4:88:25:e8:1c:cb:c3:43:3f:e4:e0:db:14:
         14:2f:e4:a2:7c:29:dd:f4:9f:17:55:19:16:e1:5c:54:3c:3b:
         53:90:29:fc:c9:33:dc:0b:26:3e:9d:7f:53:5a:69:b6:74:bc:
         a6:99:f4:bb:ee:06:be:8e:4c:48:1d:48:df:b6:22:45:70:ba:
         96:37:60:ad:55:f3:f5:d8:cd:4b:e0:16:40:67:ef:05:5a:6b:
         0b:89:2a:42:16:0a:41:e5:20:2e:e3:bf:05:9e:fb:c8:7b:36:
         14:f9:1b:bf:19:6b:30:64:3c:03:6f:c4:1d:ca:a9:97:a6:aa:
         54:40:b3:27:1f:5a:29:86:c4:b1:dd:5b:7e:67:23:01:9a:fd:
         63:cf:91:c9:fe:ba:15:79:f3:6f:98:b0:0d:9e:2c:18:d1:c1:
         25:38:b0:7a:55:21:f1:1c:a4:20:7b:2e:b2:25:7d:4f:1d:06:
         f7:cd:ca:f8:f0:cb:e9:da:9b:0f:06:a1:31:d9:c2:71:49:e5:
         74:0b:ad:a9:a4:8e:b7:52:b8:ef:d4:06:03:b1:39:95:25:30:
         ee:1e:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org