Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30456.roa
File:                     AS30456.roa (raw, json)
Hash identifier:          MruXqNzx/bEOhWuMc4XKcF8DWmlngsEvk6gDbZ4sVdA=
Subject key identifier:   F5:ED:01:47:4E:CF:A7:9C:A5:49:2F:4E:EA:46:18:ED:D6:8D:1C:84
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       03AB1CDD94A463AC466CB997CDCA7269C936D778
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30456.roa
Signing time:             Mon 28 Nov 2022 12:18:17 +0000
ROA not before:           Mon 28 Nov 2022 12:13:17 +0000
ROA not after:            Mon 27 Nov 2023 12:18:17 +0000
asID:                     30456
IP address blocks:        181.215.31.0/24 maxlen: 24
                          185.135.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ab:1c:dd:94:a4:63:ac:46:6c:b9:97:cd:ca:72:69:c9:36:d7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:17 2022 GMT
            Not After : Nov 27 12:18:17 2023 GMT
        Subject: CN=F5ED01474ECFA79CA5492F4EEA4618EDD68D1C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:2a:98:96:e7:2e:56:f4:54:d8:97:0a:ea:
                    1b:0d:6a:2e:0a:eb:12:70:b7:96:ec:b8:49:e0:53:
                    c4:d6:25:91:c3:1f:96:12:2b:0f:dd:ee:84:f4:59:
                    e1:b6:7b:ed:e3:f8:56:4e:e2:59:eb:4d:e7:82:91:
                    b5:60:03:31:a2:3d:20:b4:5b:5b:fc:09:da:3d:12:
                    fc:1e:f8:5b:52:f1:04:be:26:99:d4:65:2b:52:28:
                    ae:ac:61:c1:60:6d:ce:79:77:de:54:2a:e4:bf:cc:
                    45:24:31:55:b7:96:aa:1d:f0:e7:fc:d9:22:6a:83:
                    4d:c3:cc:35:57:31:ab:50:11:ed:53:1f:8d:52:08:
                    fc:db:44:46:69:34:11:c4:c5:c6:9e:0b:2a:2e:06:
                    a2:59:b3:81:da:78:b1:85:85:e4:15:5e:ce:96:50:
                    9a:8f:99:0e:7f:25:81:37:65:d1:f9:a3:6a:71:ce:
                    1d:79:40:92:9b:3f:25:c0:76:e6:1d:6f:72:a8:a8:
                    56:bf:b7:c1:0e:d3:63:6a:56:49:ae:e2:18:1d:0e:
                    e1:d0:ef:73:3f:96:bd:3f:29:a3:a9:1c:6e:af:2e:
                    e7:4d:b9:42:46:a0:32:c8:5c:b3:99:94:21:64:06:
                    7b:72:94:c2:31:04:b9:cd:e4:67:76:80:27:23:64:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:01:47:4E:CF:A7:9C:A5:49:2F:4E:EA:46:18:ED:D6:8D:1C:84
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30456.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.31.0/24
                  185.135.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:b5:57:c9:f5:a4:28:67:42:38:6f:f9:db:a9:18:b9:6c:
         8b:13:5d:25:c6:dd:d7:25:55:3d:4c:63:dd:2c:b4:4a:03:6a:
         b4:1e:86:99:ef:26:4d:eb:df:27:61:ba:7e:05:cc:37:0f:73:
         70:33:b3:19:b0:92:27:d3:94:10:05:15:53:b9:d2:26:b0:e7:
         5d:a7:a3:a9:4b:8f:8b:01:01:70:46:6f:14:21:f3:bf:fc:98:
         b1:d4:82:9c:0e:e6:a5:62:d5:82:2a:15:51:b7:16:f4:e8:28:
         a3:4b:b2:0e:a0:54:4c:fb:7c:d8:a4:1d:cb:d9:eb:54:f4:82:
         2a:5f:c1:a6:59:a7:af:f4:09:e3:2f:94:2c:4d:e6:5c:2b:cd:
         73:46:49:22:37:33:cb:65:6c:ac:9e:32:da:e0:1a:81:15:7c:
         c1:5b:ad:86:b7:3c:28:e5:92:e7:a8:22:cf:0b:2b:b2:47:04:
         50:e1:95:f9:12:4d:f8:c8:cd:cf:08:e0:72:66:c7:8a:cd:53:
         8e:61:94:01:cf:80:2c:c2:d6:d1:f5:2b:06:b1:8a:0a:d7:82:
         39:59:16:48:44:92:6b:9c:af:1c:a9:62:d0:18:66:01:d5:82:
         84:a1:74:ed:e9:aa:97:3e:74:00:cd:75:ec:4d:9e:d5:60:74:
         6f:7c:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org