Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29066.roa
File:                     AS29066.roa (raw, json)
Hash identifier:          5s9RnwdWOsCFo3ZZ1eufzzGWvkINXccwc9SzSjlYE/c=
Subject key identifier:   C9:DE:FD:FD:4D:61:0D:1A:5A:DE:15:DD:C5:F6:FF:1A:E3:56:7B:7E
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       03E605C30F88660F48D064843473828F90B04FC4
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29066.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     29066
IP address blocks:        179.61.210.0/24 maxlen: 24
                          181.41.205.0/24 maxlen: 24
                          191.96.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e6:05:c3:0f:88:66:0f:48:d0:64:84:34:73:82:8f:90:b0:4f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=C9DEFDFD4D610D1A5ADE15DDC5F6FF1AE3567B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:e8:cf:0f:9c:14:38:53:b0:fd:ff:0e:14:
                    2d:67:44:d8:93:e8:d8:3b:91:5a:29:dd:2b:27:bb:
                    e8:d7:e3:78:4b:bf:2c:f6:9d:53:61:73:84:b7:7f:
                    ea:01:27:6d:c4:4a:00:3e:56:f4:ff:73:41:e5:02:
                    77:9c:b5:25:bd:2a:27:44:e3:92:51:dd:fc:a2:60:
                    41:53:26:c3:2c:3c:dc:ef:c8:67:d9:94:a0:5a:1d:
                    16:b5:d4:ba:65:d7:4a:64:5c:c2:ed:11:63:a7:cd:
                    99:59:bf:30:ac:76:e7:3c:18:ab:b8:ab:46:0a:e5:
                    51:a4:bc:31:e3:e6:9d:f0:52:6c:7c:e1:30:1b:9d:
                    37:4e:71:85:2c:f7:22:99:4c:6b:6b:fc:6a:7b:12:
                    53:a9:cb:1e:24:66:09:24:d9:26:8b:2e:f1:b0:1c:
                    30:1c:d7:68:4d:ed:46:36:b2:04:fc:d7:78:95:e1:
                    d7:0b:0a:a6:94:80:8c:11:6e:52:6b:57:1d:de:cb:
                    76:85:47:ec:67:a2:1f:3b:53:c1:aa:99:df:a1:2a:
                    1d:33:d9:a9:e0:73:58:68:09:2c:bb:cd:97:ce:a6:
                    f8:de:8e:34:8e:67:49:e4:04:0f:bd:e8:96:35:63:
                    c0:e4:00:44:87:81:7b:1e:4f:3f:c6:af:0c:1b:4d:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DE:FD:FD:4D:61:0D:1A:5A:DE:15:DD:C5:F6:FF:1A:E3:56:7B:7E
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29066.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.210.0/24
                  181.41.205.0/24
                  191.96.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:7d:73:5b:71:18:52:9d:8d:58:0b:4a:3a:8d:c2:b8:dc:
         19:f2:26:3c:0c:05:57:a1:1d:1c:d7:52:a7:dc:e1:9a:a0:54:
         fd:ba:ba:c1:11:eb:a0:da:94:c0:66:5c:97:f7:52:ca:b7:f1:
         58:ef:e3:de:0e:be:ac:47:a0:03:ed:28:ad:03:28:31:52:62:
         49:93:89:d5:4b:20:25:d4:40:df:1e:d3:08:66:6e:51:61:50:
         67:3f:06:cb:39:aa:90:5e:cf:c2:5c:5e:b7:7b:30:14:d2:33:
         4c:85:c3:ff:0e:d6:bc:6e:a5:98:ac:83:cf:d5:90:38:ed:22:
         9f:7b:83:fd:5d:9c:41:fc:d2:5d:75:2f:d8:10:b6:4d:72:ff:
         d4:24:2a:c8:b5:ce:62:fb:84:65:e8:79:35:16:92:4d:cd:da:
         37:b2:f0:35:7b:55:1b:d6:55:1c:d0:3d:c4:8d:13:5d:26:3a:
         a8:59:1a:31:49:41:52:7d:fa:f6:31:14:8a:25:59:b3:3b:8a:
         cf:30:cf:dc:77:07:a2:72:43:9a:4b:62:78:e8:e0:9e:41:73:
         6d:9b:3d:b3:ef:2b:07:fa:c9:84:37:00:48:62:64:a2:2a:34:
         2e:ea:75:c3:1e:fd:84:39:4a:9c:68:c0:1d:5a:75:cb:3e:a2:
         c8:5a:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org