Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30823.roa
File:                     AS30823.roa (raw, json)
Hash identifier:          WIrhF1FWOA5LiQsXG/gz5EF2+hQjd1SHhSlwOe2kyFg=
Subject key identifier:   09:82:BD:5F:8E:3C:95:07:AF:FF:C0:C9:E8:E7:6E:F3:E9:27:7A:C6
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       06DC55C20051BCCB3ADD57F9354C66F109B7D6C8
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30823.roa
Signing time:             Sun 01 Jan 2023 00:00:10 +0000
ROA not before:           Sat 31 Dec 2022 23:55:10 +0000
ROA not after:            Sun 31 Dec 2023 00:00:10 +0000
asID:                     30823
IP address blocks:        45.137.116.0/24 maxlen: 24
                          45.137.117.0/24 maxlen: 24
                          45.137.118.0/24 maxlen: 24
                          179.61.237.0/24 maxlen: 24
                          181.214.240.0/24 maxlen: 24
                          185.173.34.0/24 maxlen: 24
                          191.96.15.0/24 maxlen: 24
                          191.101.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:dc:55:c2:00:51:bc:cb:3a:dd:57:f9:35:4c:66:f1:09:b7:d6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 31 23:55:10 2022 GMT
            Not After : Dec 31 00:00:10 2023 GMT
        Subject: CN=0982BD5F8E3C9507AFFFC0C9E8E76EF3E9277AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:bf:f6:dc:de:87:22:34:91:b0:b1:00:60:
                    af:70:df:c8:65:64:20:df:14:ee:5f:72:bc:9c:6b:
                    b6:1c:84:56:de:45:f0:b8:df:ab:9a:f4:ac:de:5e:
                    7c:66:6d:c3:ac:77:07:88:bb:29:8f:e6:e0:e6:fa:
                    3e:42:90:89:53:88:10:53:82:d2:cf:ad:e3:86:7e:
                    f8:ab:41:e9:67:7c:98:c8:d0:01:a3:12:91:0b:81:
                    4a:7e:e8:c5:4b:ca:da:7d:a8:00:59:0d:2e:58:96:
                    d5:e5:c6:82:f3:6f:99:47:c4:8a:d6:a4:48:29:f5:
                    5b:e8:c9:3e:f6:04:f6:94:5f:ae:76:58:9c:30:3d:
                    45:f8:52:f2:41:72:8b:61:ab:40:4c:d0:8c:3f:0b:
                    7b:e4:bc:fc:0c:10:8c:44:fa:84:88:c2:07:ba:4e:
                    61:c8:ff:ab:f8:90:40:c9:5d:3e:3d:63:3f:6a:fb:
                    28:2b:95:2f:83:86:c5:bd:a7:0e:3c:6a:7b:39:f6:
                    80:24:54:c9:0b:94:89:aa:66:d6:2d:69:dc:1c:76:
                    d6:bb:a3:d0:a2:45:d6:a8:c8:73:30:6f:eb:52:1a:
                    f9:44:20:dc:e9:2f:b1:5d:69:94:20:b7:f8:0f:76:
                    54:37:0e:f3:2d:b7:df:c1:cd:f6:46:92:91:0f:35:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:BD:5F:8E:3C:95:07:AF:FF:C0:C9:E8:E7:6E:F3:E9:27:7A:C6
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.116.0-45.137.118.255
                  179.61.237.0/24
                  181.214.240.0/24
                  185.173.34.0/24
                  191.96.15.0/24
                  191.101.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:92:35:5b:8a:47:02:45:52:24:f8:d0:15:51:7d:67:a0:
         9e:bc:22:83:c0:b3:b1:68:b9:1f:15:fa:2a:f1:cb:51:ab:f7:
         17:d9:11:29:a2:70:a8:5b:f7:44:2d:51:3c:24:ce:43:83:84:
         61:34:d0:28:b2:fc:e0:7d:ca:b4:ec:9d:37:b6:8e:da:b4:d7:
         85:cb:19:8e:a0:2b:2a:28:56:26:8e:d7:07:af:dd:93:e9:31:
         11:ee:d2:ad:6b:fc:a6:dd:fb:31:d2:2e:1f:99:01:d0:cd:49:
         95:73:28:4f:8d:8c:df:5e:6d:3c:a7:6f:7c:03:e1:98:44:34:
         de:48:02:5f:de:77:a7:78:e2:1a:f0:15:4d:8a:03:1b:fc:50:
         64:d4:ad:ac:c5:a5:68:3c:69:d0:8f:d7:9e:a6:1d:c6:31:bb:
         73:a5:36:e7:74:4b:1a:06:de:8c:f7:86:bc:6c:a1:6a:7b:da:
         e2:99:b0:8b:ed:f5:54:62:64:89:4a:4c:5e:50:43:61:cf:e1:
         b7:bc:ee:fa:0d:a5:c0:57:e9:3e:da:cb:09:62:12:d1:a3:99:
         3c:0f:6d:9b:b5:4d:fb:c3:4d:3d:03:3c:98:86:b2:05:67:6b:
         0b:6d:d1:09:25:d4:b1:c5:7c:a1:3e:51:6d:8a:0f:76:a4:85:
         80:ea:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org