Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS265867.roa
File:                     AS265867.roa (raw, json)
Hash identifier:          OO35K0g3DqLKqtD4XMD5NWC0jtN0CDX6+dLLyX7+mDA=
Subject key identifier:   C1:40:4D:2E:22:64:C8:20:78:5B:A6:6E:EA:3B:12:95:2C:6C:67:AE
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       6D8CAF29141537C8D9A1F45AE1C2A56191E77075
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS265867.roa
Signing time:             Tue 13 Dec 2022 13:00:37 +0000
ROA not before:           Tue 13 Dec 2022 12:55:37 +0000
ROA not after:            Tue 12 Dec 2023 13:00:37 +0000
asID:                     265867
IP address blocks:        179.61.230.0/23 maxlen: 24
                          181.214.137.0/24 maxlen: 24
                          181.214.158.0/23 maxlen: 24
                          181.214.192.0/23 maxlen: 24
                          191.96.200.0/24 maxlen: 24
                          191.96.216.0/23 maxlen: 24
                          191.96.218.0/23 maxlen: 24
                          191.101.40.0/24 maxlen: 24
                          191.101.96.0/24 maxlen: 24
                          191.101.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8c:af:29:14:15:37:c8:d9:a1:f4:5a:e1:c2:a5:61:91:e7:70:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 13 12:55:37 2022 GMT
            Not After : Dec 12 13:00:37 2023 GMT
        Subject: CN=C1404D2E2264C820785BA66EEA3B12952C6C67AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:4d:dc:f2:0c:fd:11:61:9f:a0:d0:cc:0c:
                    40:15:35:58:4f:e3:ee:b4:65:7e:63:8a:21:e1:be:
                    bc:6c:91:a7:5f:90:e6:ca:9f:e2:94:fb:00:d4:4c:
                    24:dc:e4:63:7f:6d:5b:86:e7:4a:87:94:ad:0d:64:
                    30:49:36:d8:33:66:c4:60:b2:e9:09:1a:87:a5:e0:
                    b2:7d:34:d1:4a:a4:a0:38:67:8d:ef:45:06:08:86:
                    97:38:9f:55:91:4b:1c:24:95:60:1f:27:11:e1:8f:
                    d1:ef:92:52:80:18:f0:0e:b0:ec:9c:72:03:5a:b9:
                    ca:50:b4:2b:f9:06:ff:85:c6:fe:b8:ec:67:c1:70:
                    a8:fe:d2:7c:7b:a9:3f:f1:ce:d1:be:44:2b:a1:46:
                    50:17:ea:6a:4a:05:22:c6:62:52:a6:fe:8a:38:ed:
                    6e:f1:08:85:34:2d:6e:c5:07:4b:b7:6f:43:ac:29:
                    f7:d3:97:fc:0f:61:db:37:e4:b5:aa:20:f3:09:b2:
                    67:ff:48:4d:a2:b0:8d:df:98:00:f2:e7:91:66:87:
                    12:b4:26:c8:ef:0f:49:7d:5f:ef:4e:e3:b0:a8:42:
                    7d:0a:60:60:04:bb:4d:da:3a:3d:1f:a5:64:38:90:
                    df:c4:68:02:62:2d:65:c2:3b:9f:4a:d1:c2:1a:a8:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:4D:2E:22:64:C8:20:78:5B:A6:6E:EA:3B:12:95:2C:6C:67:AE
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS265867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.230.0/23
                  181.214.137.0/24
                  181.214.158.0/23
                  181.214.192.0/23
                  191.96.200.0/24
                  191.96.216.0/22
                  191.101.40.0/24
                  191.101.96.0/24
                  191.101.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:54:07:8e:a0:41:f6:2f:7d:16:51:43:f7:2f:72:a7:a8:
         45:43:3e:65:47:52:4e:75:22:45:40:f5:db:0e:d5:6e:9a:e5:
         4e:b5:cd:4d:85:b3:e6:dd:74:12:06:12:6e:b4:f7:1a:07:15:
         7e:2c:cd:e2:5c:71:73:80:a8:f9:34:74:37:ff:d2:c1:d1:2c:
         d2:26:92:81:97:91:a6:a2:37:86:b0:ff:37:46:c3:c9:cc:23:
         03:03:97:2c:90:dc:ce:2b:0f:eb:6e:23:25:0c:ce:6e:d6:ad:
         ae:ac:f1:33:e0:4b:82:29:24:4e:eb:04:c8:24:bf:a4:a4:a2:
         dc:bb:a8:e9:29:eb:cb:fc:c1:14:3f:fc:62:e8:69:18:0f:09:
         47:a7:5b:61:10:f0:c7:39:a7:2b:40:a8:03:d5:24:c0:e4:c3:
         49:0e:fe:93:2b:bb:e8:30:c1:dd:b7:bd:ec:1e:c2:cd:a6:60:
         f1:38:44:4f:f4:9f:6e:65:f8:88:f6:5e:75:91:aa:83:a7:81:
         40:8c:97:45:8d:b1:ca:f8:c3:ab:20:73:23:8d:33:d4:d0:1f:
         49:ac:39:fa:2a:9c:05:04:5f:9f:4d:1c:12:fd:0e:93:6a:64:
         d7:98:06:53:78:12:bf:73:39:d1:40:ee:25:c2:9b:8a:16:4b:
         7b:49:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org