Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212335.roa
File:                     AS212335.roa (raw, json)
Hash identifier:          2+WNM3IdUDkrFQocwLVSMMmQG9tI85IIfi/SxEDglk0=
Subject key identifier:   9E:87:06:9E:5D:C9:20:03:B2:80:F8:70:6F:C4:0E:BE:C4:47:A8:C9
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       01F4BD7029E4909A2220E0BB532059110EA8BF2E
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212335.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     212335
IP address blocks:        45.137.157.0/24 maxlen: 24
                          191.96.18.0/24 maxlen: 24
                          191.96.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f4:bd:70:29:e4:90:9a:22:20:e0:bb:53:20:59:11:0e:a8:bf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=9E87069E5DC92003B280F8706FC40EBEC447A8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:38:e7:4d:fd:ef:b4:fb:c6:97:ac:82:97:
                    21:fb:cd:6f:3d:d5:1d:dd:e9:85:6f:92:5d:b5:a7:
                    15:bc:4c:a3:05:44:20:b5:e7:7e:43:66:96:40:83:
                    7e:ad:14:43:d4:d3:e0:86:bc:4b:8b:fb:16:ae:bf:
                    56:88:1a:9c:50:1c:6b:f7:b8:c1:68:06:9d:ae:a5:
                    1d:12:6d:ab:d3:43:dd:31:84:77:9d:f6:05:77:c8:
                    18:46:07:44:86:7b:19:34:88:0f:d4:7c:70:07:47:
                    1d:d3:51:18:76:ed:1c:2f:82:c3:e0:7b:2f:68:b4:
                    28:47:db:6c:d4:de:e1:43:4b:eb:53:17:90:77:c4:
                    77:b8:30:2a:6e:50:c2:98:90:b3:5a:2d:b2:bf:a6:
                    70:99:51:9e:79:83:66:0b:53:3d:5a:27:b4:24:08:
                    7d:48:12:77:2e:d2:56:00:49:aa:c0:81:77:12:18:
                    14:64:e8:c5:d0:c3:ac:fd:af:8f:d3:30:1b:97:ea:
                    c9:dd:3d:53:c7:76:1a:8f:bb:ef:d6:d0:a2:7a:35:
                    ed:dd:e9:2a:8d:eb:0b:58:aa:c8:64:e7:bb:c5:13:
                    68:80:f2:3a:87:05:b3:e2:47:63:7a:5c:09:e8:10:
                    ff:bc:1e:18:f7:83:ad:79:e9:24:25:d5:ab:f3:c6:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:87:06:9E:5D:C9:20:03:B2:80:F8:70:6F:C4:0E:BE:C4:47:A8:C9
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.157.0/24
                  191.96.18.0/24
                  191.96.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:6f:69:bb:a2:2c:cf:3d:fb:d5:d5:60:2e:64:3e:35:ca:
         a4:50:be:c9:04:21:9b:84:76:04:bc:ae:f1:e8:f7:91:14:ff:
         07:91:bc:dd:0f:75:c6:35:d3:f6:be:2f:5f:15:64:99:46:80:
         ea:95:9c:74:c4:15:65:50:2f:9e:92:5f:b1:33:62:2d:eb:dc:
         36:86:5a:5a:f6:67:d8:05:13:1d:91:7d:d6:bd:bf:f3:d4:99:
         79:f1:bf:a1:62:fa:95:ac:76:0d:88:5c:85:21:d3:db:3a:b2:
         85:25:97:9c:cb:61:6f:59:a3:de:23:4d:c7:5d:09:03:25:2c:
         90:cf:4a:4d:ac:55:2d:22:32:a3:f5:f7:d3:27:ca:7f:3a:74:
         42:91:96:83:e0:3f:93:74:e7:a3:85:47:f1:a1:0d:f4:1f:9c:
         0a:04:c0:28:01:e6:ef:60:8b:3b:d7:cf:da:6c:15:43:17:9e:
         70:21:f7:c8:ca:97:47:9b:7c:1d:e7:49:e4:dd:72:be:fa:c0:
         ce:06:2d:1b:8e:84:bc:08:39:a7:de:01:f8:69:0d:58:c0:41:
         4c:61:02:71:00:b3:13:cc:c7:53:84:8f:92:fc:d9:cc:c3:2a:
         2d:28:22:a5:b1:e4:fd:dc:3d:99:c0:60:90:99:ce:7b:89:2c:
         c4:2c:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org