Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS213060.roa
File:                     AS213060.roa (raw, json)
Hash identifier:          akwU6uchu4qaBWMkX8d2rb35AQW/dA29S0jKasMQtOc=
Subject key identifier:   1A:A8:EC:32:5A:AA:49:C2:CD:79:AD:9C:18:96:87:50:BA:56:0E:2F
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       756C90E968652A5506C94788C279E99C2C60AACD
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS213060.roa
Signing time:             Wed 01 Feb 2023 13:25:57 +0000
ROA not before:           Wed 01 Feb 2023 13:20:57 +0000
ROA not after:            Wed 31 Jan 2024 13:25:57 +0000
asID:                     213060
IP address blocks:        45.231.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6c:90:e9:68:65:2a:55:06:c9:47:88:c2:79:e9:9c:2c:60:aa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  1 13:20:57 2023 GMT
            Not After : Jan 31 13:25:57 2024 GMT
        Subject: CN=1AA8EC325AAA49C2CD79AD9C18968750BA560E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:e5:b1:20:b1:8b:0c:e6:78:4d:eb:1a:68:
                    a2:4a:85:55:6f:1e:9f:82:89:f2:f9:03:d1:4b:ad:
                    98:d0:9a:12:50:71:96:6c:24:79:83:21:88:0a:fc:
                    9a:d2:57:6a:d0:65:6c:71:14:8c:7e:9e:8a:61:7e:
                    fd:26:af:fc:70:4b:56:87:a3:48:97:0e:37:4f:b5:
                    50:56:f1:46:54:26:16:35:1f:6e:01:6b:5a:6a:88:
                    33:7a:27:cb:0b:c9:b8:3d:e2:a5:fe:d9:44:7b:73:
                    0d:fe:51:9c:b6:ac:34:ea:5d:10:3b:99:18:99:f7:
                    d9:9d:80:72:a9:3f:8e:2e:90:60:52:98:2a:b9:df:
                    00:f2:ee:36:43:fd:95:5f:3d:99:1b:6e:bc:7d:07:
                    61:ea:19:af:76:4a:aa:a2:c7:7f:d4:27:ed:27:07:
                    d2:da:80:d7:c4:1e:3d:1d:87:f6:a5:ca:bd:f8:7d:
                    90:5f:50:bd:e1:2b:bd:68:57:22:e2:18:95:60:84:
                    c9:cc:b7:c2:b8:5d:e6:d1:05:e4:d4:47:41:7b:aa:
                    01:fa:aa:17:70:dc:3d:28:bd:01:30:06:08:51:d0:
                    9c:03:c8:58:1b:c9:57:d5:1c:de:bf:3e:3b:29:1b:
                    4f:50:f4:df:41:47:f3:69:68:37:f4:ac:05:ab:90:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A8:EC:32:5A:AA:49:C2:CD:79:AD:9C:18:96:87:50:BA:56:0E:2F
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS213060.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f8:9f:c2:22:c9:b0:27:25:99:d1:f7:49:80:e9:97:40:9f:
         97:82:63:97:e5:ac:b5:43:95:62:aa:44:04:5a:3d:2f:a3:a0:
         d0:cb:ca:3a:83:3f:c3:69:5e:21:02:2e:c1:c2:aa:03:18:2f:
         2a:c1:1e:98:fe:7e:49:57:f0:4a:dc:e0:7c:58:d3:20:c2:21:
         55:cd:d1:8a:bf:61:43:98:5c:cc:e6:38:f9:8b:e8:9d:d5:f3:
         ce:9a:38:3d:e8:77:37:f6:3a:96:df:c7:01:77:ac:ed:9d:3a:
         48:2a:3c:ea:e4:dc:3c:90:23:4e:40:78:33:f4:8b:30:a1:0c:
         87:a2:cb:8a:68:0e:26:ef:4a:ee:c1:dd:85:88:16:0b:05:e6:
         27:78:30:c4:91:3a:2f:76:d9:74:dd:0a:03:d4:46:88:14:77:
         04:f9:87:30:6f:27:59:fb:41:53:a3:6f:05:0c:68:9a:b1:2a:
         c5:97:aa:c0:db:f7:5e:d1:6a:9c:53:ad:9f:f5:8c:4d:b2:e1:
         05:47:ed:10:b5:05:df:bd:7d:af:03:7a:27:e2:16:b9:2b:82:
         da:e9:f4:c4:be:85:d6:1a:7b:b6:5e:b5:18:64:4c:f8:48:79:
         07:ee:05:ff:65:f2:d6:bf:92:6b:eb:8a:97:b0:e6:67:0d:9a:
         90:ac:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org