Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS32780.roa
File:                     AS32780.roa (raw, json)
Hash identifier:          fRB7L64CoXrb18lQK+EvI3S3+SB8OykeBkul3Xrd9cc=
Subject key identifier:   37:0E:54:09:1C:F6:6E:60:A5:86:AC:DC:A0:D4:67:8B:18:E5:62:9B
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5B3CE1109F23C25946D58A3D58A64AA1F60F9A05
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS32780.roa
Signing time:             Mon 27 Feb 2023 22:24:18 +0000
ROA not before:           Mon 27 Feb 2023 22:19:18 +0000
ROA not after:            Mon 26 Feb 2024 22:24:18 +0000
asID:                     32780
IP address blocks:        191.101.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3c:e1:10:9f:23:c2:59:46:d5:8a:3d:58:a6:4a:a1:f6:0f:9a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 27 22:19:18 2023 GMT
            Not After : Feb 26 22:24:18 2024 GMT
        Subject: CN=370E54091CF66E60A586ACDCA0D4678B18E5629B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:19:3a:a7:0a:4f:a3:5d:7d:e2:4b:63:8a:
                    5a:c4:6e:e8:5f:aa:83:59:02:92:03:56:2a:bb:4c:
                    d0:1a:a0:4b:8e:93:ec:d7:45:62:88:fd:a5:12:de:
                    f2:59:37:48:40:2a:43:ce:47:29:e7:44:a2:a3:5a:
                    ae:47:9f:a0:b4:cb:2e:d9:b5:c4:ad:6d:a0:44:91:
                    d8:1d:b1:33:19:f8:aa:f4:2f:dd:d5:d5:f9:28:4e:
                    b0:c9:3d:8e:86:4a:fc:c4:d0:70:da:7a:08:c3:69:
                    39:9f:2e:2d:d4:a3:99:2a:ff:d8:0c:b3:eb:ce:68:
                    ea:3c:fc:aa:82:92:47:e1:27:1d:96:0c:c9:77:e2:
                    7a:2e:b8:e8:af:65:71:f8:20:2d:96:e7:94:60:7c:
                    75:e5:74:87:7c:5b:20:3b:1b:94:be:39:54:10:64:
                    21:64:24:93:70:4b:b4:22:91:eb:8d:f0:84:64:f8:
                    f5:d6:75:37:77:0f:a5:a7:2e:90:a3:38:90:1d:a9:
                    48:d6:64:b1:91:c5:46:6f:fc:2f:f7:3b:87:7d:5e:
                    31:7b:2e:52:6a:14:fe:49:d6:c3:14:62:cd:c5:8f:
                    e8:aa:cf:ed:ed:2a:66:b8:9d:ce:29:75:76:9b:85:
                    ac:25:e5:5a:b9:a6:dd:10:56:33:23:de:83:57:97:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0E:54:09:1C:F6:6E:60:A5:86:AC:DC:A0:D4:67:8B:18:E5:62:9B
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS32780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:60:ca:a1:6f:a0:95:e6:ef:a1:29:02:81:6a:37:ba:56:
         a2:03:c5:9d:ef:8e:b9:a6:fa:66:ab:63:3d:2e:ac:0e:72:1e:
         b4:c8:bc:8c:1c:ce:2a:82:57:e0:9c:30:e1:8c:ba:1d:ae:31:
         12:b6:43:73:fc:25:dc:72:a6:13:03:b0:eb:c1:f4:53:8c:0f:
         43:d5:2a:a2:c3:7d:5d:a0:60:14:d3:67:aa:9b:d1:21:7a:c1:
         87:a1:8d:66:45:d8:c4:d7:60:5d:4d:a4:0f:87:2c:a1:1e:d6:
         33:b4:fb:5d:8c:17:78:07:30:4f:f6:4a:46:13:58:32:64:ce:
         7a:c8:d0:ff:85:fe:16:6c:58:33:20:79:fc:e1:de:42:80:79:
         df:04:73:ea:97:29:0c:de:9b:6b:fd:86:b9:b1:d7:4b:8b:f3:
         52:25:e0:db:b3:5f:6a:48:80:a9:20:32:54:7a:4f:dc:9c:24:
         19:96:c2:82:a2:c8:b2:61:8c:4e:34:6e:22:91:f6:af:93:d3:
         51:1f:b1:28:88:d4:87:91:98:20:2c:5a:55:cb:77:3c:72:99:
         09:c0:2c:d9:49:89:34:dc:68:20:bb:ea:a5:7b:29:84:e0:56:
         e3:14:86:12:de:d1:5b:00:8d:92:b4:55:b6:da:92:c0:a8:71:
         3f:46:69:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org