Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          plM3ommKUcJf2SBgcrBz0R8gmeg6yoOGhc0Ui+WHE2w=
Subject key identifier:   E7:9C:7F:76:94:58:62:83:52:70:36:E3:3E:39:63:9B:22:E3:A5:48
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0985F6D9075AB99AA400F392B3CBB202D0EE506D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212669.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     212669
IP address blocks:        89.19.47.0/24 maxlen: 24
                          185.158.150.0/24 maxlen: 24
                          191.101.246.0/24 maxlen: 24
                          193.31.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:85:f6:d9:07:5a:b9:9a:a4:00:f3:92:b3:cb:b2:02:d0:ee:50:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=E79C7F7694586283527036E33E39639B22E3A548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:b5:ba:46:08:c0:1e:73:09:08:e9:dd:0a:
                    f7:25:fc:29:70:90:5d:ce:61:fb:76:9f:2b:7b:fd:
                    d0:92:19:96:44:20:9b:26:05:11:e4:53:a0:75:96:
                    3b:b4:b3:90:00:93:06:f5:cf:20:2e:6d:6f:e1:42:
                    98:68:cb:7f:61:7b:a5:a3:dc:7b:d9:54:1d:2a:25:
                    9a:08:17:92:6e:34:8e:e8:24:36:8f:38:a0:f9:c4:
                    8a:84:1c:7b:35:3b:2d:25:f4:f6:4d:b7:6c:87:58:
                    07:20:a5:0b:f4:03:9e:74:a0:fa:ba:05:de:66:61:
                    c0:7a:c2:19:f8:4d:e7:da:e9:8b:8f:a9:84:98:b9:
                    72:ef:20:9d:f4:a9:e5:8a:6a:f0:fa:94:f6:0a:a6:
                    32:06:de:fb:85:bf:4a:97:81:e9:e8:23:9f:a1:d4:
                    59:95:d2:66:77:b9:5f:40:c0:be:6e:1e:d7:44:c6:
                    73:fe:25:c8:fa:a4:33:6c:f4:f5:ea:b8:ab:cd:d1:
                    c5:85:11:7d:75:b2:84:d7:cd:41:c6:21:82:26:ce:
                    98:0e:46:3f:ab:35:60:75:71:97:c2:7e:05:60:8a:
                    09:52:4c:98:37:1b:3e:a9:d5:b1:85:63:4d:9a:7d:
                    76:04:b6:a5:bf:91:2b:66:a6:dc:5c:fb:c4:64:ff:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9C:7F:76:94:58:62:83:52:70:36:E3:3E:39:63:9B:22:E3:A5:48
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.19.47.0/24
                  185.158.150.0/24
                  191.101.246.0/24
                  193.31.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:8b:71:e7:50:eb:90:bd:fb:97:8c:5c:2f:03:cc:68:79:
         11:bf:76:4a:04:f7:ca:10:2d:b7:6b:cb:66:5f:c4:65:88:78:
         1f:37:ae:29:c6:78:65:02:03:1b:9c:bf:08:1a:41:09:ea:86:
         0e:01:3c:29:4a:7e:33:ed:4f:78:3e:a0:8e:ed:2b:26:55:73:
         0f:ce:f7:9e:34:f7:05:fa:b0:a8:45:d4:4e:24:66:25:64:7b:
         d2:98:2d:46:49:39:cf:c9:c2:d5:9d:9a:cd:52:69:c9:2b:4c:
         4e:0f:d1:bc:36:f9:56:26:7f:97:ce:e8:e7:07:e5:f9:e4:4b:
         81:44:5d:41:ea:3f:59:d7:62:08:b3:d3:6e:a2:25:f9:cd:45:
         cf:59:ad:84:8f:11:35:63:c4:c5:1e:fb:b8:23:08:c2:1e:e4:
         66:f3:16:e9:b0:e3:bd:58:e4:18:8e:5c:07:2b:68:72:63:9b:
         7b:2c:30:94:10:28:24:03:f9:63:b8:a9:16:57:e8:19:b6:ab:
         1f:2e:02:a6:c2:95:76:62:6f:d0:09:34:c1:0a:6d:ba:1f:ea:
         8f:51:57:b1:ba:99:e6:81:e9:cd:27:a9:b1:89:06:02:c3:78:
         c8:0f:03:e5:9f:15:03:56:cc:ce:04:e2:6e:94:fe:c3:e2:f1:
         73:5e:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org