Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211936.roa
File:                     AS211936.roa (raw, json)
Hash identifier:          Ev4p7IOC9qIgdRUbH1MwAtWWDTXCC71WG2YE6sUOE5U=
Subject key identifier:   1F:17:1B:37:11:4C:DC:F6:30:87:4F:78:DF:AE:5E:C8:F2:95:4B:DF
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7D8631A8468FEB78A5E1BE7F902440646019AE5D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211936.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     211936
IP address blocks:        179.61.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:31:a8:46:8f:eb:78:a5:e1:be:7f:90:24:40:64:60:19:ae:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=1F171B37114CDCF630874F78DFAE5EC8F2954BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:0a:83:35:84:0e:c4:25:c7:f2:63:46:8f:
                    e1:d5:91:d6:df:1c:d0:cf:a1:21:8d:c6:c2:1f:2a:
                    4c:ef:67:e1:97:88:25:af:f3:aa:43:d0:9f:96:23:
                    9b:60:9e:b1:6b:b5:df:dd:b6:49:33:68:8a:bd:0a:
                    27:b9:eb:1d:7d:ab:c8:20:22:13:90:58:24:c6:cb:
                    5e:a0:2e:5d:2c:26:bf:62:3e:b3:67:e4:dc:00:a0:
                    7b:3c:4c:ca:7b:84:4a:ca:98:26:32:dc:5c:1b:7a:
                    d8:ad:d0:35:84:7a:8a:f8:b6:80:1f:56:50:54:48:
                    12:3b:77:12:24:f6:62:4e:e1:d0:62:00:a5:f8:d0:
                    37:0f:30:1e:86:bd:50:d8:f0:c5:7e:66:19:cc:2d:
                    ba:ad:3d:d1:20:45:2c:90:3b:4b:37:4c:84:aa:15:
                    c5:50:a3:23:d6:26:72:9e:6a:48:86:9b:18:b8:3c:
                    4c:7d:37:71:6c:94:d9:5d:83:8d:b6:a7:cc:a4:89:
                    65:e6:b0:3b:7a:b9:8c:15:8d:6b:ee:8a:a3:b1:dc:
                    b8:5b:41:d4:b0:d9:44:b6:28:76:f5:45:ce:c2:77:
                    2d:97:59:ba:12:24:2b:d2:92:6c:24:e6:59:01:45:
                    e8:78:4f:dc:38:ee:56:9c:c3:f9:cf:ef:27:80:f4:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:17:1B:37:11:4C:DC:F6:30:87:4F:78:DF:AE:5E:C8:F2:95:4B:DF
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ba:9a:c5:e7:ba:98:58:c0:ac:07:12:f6:e5:62:a5:27:b9:
         01:d5:ba:46:25:ed:df:ca:fc:03:9b:4a:76:a1:11:0d:2b:61:
         12:c3:96:d0:b7:d4:cf:c1:29:81:cc:cf:f2:69:cf:bd:aa:ff:
         82:c9:2f:e8:1c:2a:3b:95:21:5e:f0:a4:e5:de:6d:39:07:34:
         ab:f6:0e:2c:e2:8a:e2:18:fa:ef:31:d5:b4:2d:98:2b:8e:b1:
         c4:fe:89:11:38:f1:91:23:75:41:d9:65:2d:b6:a5:cc:f1:65:
         19:13:58:64:e3:aa:b8:3f:e6:a7:79:b7:13:67:f8:a3:57:7a:
         cf:65:e5:e3:88:06:c2:67:05:f0:7e:97:2f:bb:3c:6d:57:e4:
         b9:9e:05:13:97:5d:ee:af:28:ad:da:20:4e:a0:94:d1:d9:e1:
         ab:4c:1f:7c:c2:2a:44:2f:ce:ee:72:49:f0:bd:a8:3b:08:ca:
         46:97:22:7f:f4:1e:71:1b:e9:69:2d:77:41:90:40:41:fe:77:
         ca:58:ea:cf:96:44:57:79:6e:05:18:c6:4f:9a:35:d1:8e:4e:
         e8:54:be:16:8e:9e:17:3b:bd:ae:23:d3:bf:d3:7f:74:e9:98:
         79:06:1e:dd:81:56:d3:1c:85:84:3c:38:08:a1:25:7d:64:3c:
         21:a2:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org