Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS36352.roa
File:                     AS36352.roa (raw, json)
Hash identifier:          v8LxmqxN3WROYX74ZjUd2Gt/C1d8zdBzxV0JzHAZqes=
Subject key identifier:   E8:2D:99:38:7D:58:E6:75:5C:0B:23:4E:F4:F7:00:F1:68:D4:1C:4B
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       519D9D0D696FB53A9A06135258253EAAA0540A86
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS36352.roa
Signing time:             Mon 28 Nov 2022 12:18:16 +0000
ROA not before:           Mon 28 Nov 2022 12:13:16 +0000
ROA not after:            Mon 27 Nov 2023 12:18:16 +0000
asID:                     36352
IP address blocks:        185.142.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9d:9d:0d:69:6f:b5:3a:9a:06:13:52:58:25:3e:aa:a0:54:0a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:16 2022 GMT
            Not After : Nov 27 12:18:16 2023 GMT
        Subject: CN=E82D99387D58E6755C0B234EF4F700F168D41C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:b1:9c:b2:ac:9b:fe:b0:de:20:75:3b:70:
                    85:a7:e6:7f:9e:60:13:5a:55:58:a7:97:d8:08:02:
                    65:d2:69:b6:fe:b3:e5:cf:92:4c:54:a6:3e:75:0a:
                    ec:00:d0:c5:1a:d3:d8:94:c3:07:2d:22:ae:63:64:
                    19:cd:05:19:71:36:99:79:46:b3:37:45:43:22:19:
                    a0:1b:6c:e9:91:52:a9:8b:07:be:79:4b:25:83:2a:
                    a4:7d:e1:32:7d:e0:9a:9b:0a:e8:d2:d8:14:86:a4:
                    f4:21:43:0f:11:e4:46:88:37:7c:b0:e2:54:3d:ae:
                    45:af:4c:1c:f3:23:22:b6:81:c3:a9:41:f7:fd:e7:
                    06:ae:7d:5b:0c:ac:6c:32:4e:de:29:a7:20:65:71:
                    8c:b9:ac:08:01:42:5d:c0:3e:f9:9b:1a:d6:7a:dc:
                    32:4f:59:c2:8c:e5:70:c4:eb:13:0d:2f:46:02:88:
                    7e:e4:9e:d5:74:df:13:3f:11:ca:e8:af:a8:78:5c:
                    17:48:75:9f:c6:b3:79:b0:28:d8:37:2e:a3:3d:dd:
                    45:83:7e:34:0f:7c:86:41:27:2c:b5:ce:69:22:7a:
                    19:1a:cc:73:b6:b9:70:64:5d:e5:29:99:3e:b8:1d:
                    c1:7e:ef:d7:48:e8:75:8b:bd:22:08:8f:82:85:92:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2D:99:38:7D:58:E6:75:5C:0B:23:4E:F4:F7:00:F1:68:D4:1C:4B
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS36352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2c:0c:85:40:eb:16:77:8d:f4:c4:94:a8:63:20:e7:04:c3:
         59:cc:38:03:0a:00:73:7d:38:df:e6:48:11:5a:d6:3d:1f:3d:
         b2:ad:17:6e:3a:9b:cc:ca:42:1b:32:8d:b2:8f:ad:c9:20:38:
         51:4b:6d:c7:21:c5:20:06:7a:1e:77:7e:8e:3c:df:8c:b8:0a:
         f9:e7:91:cf:3e:7f:14:bb:65:11:22:49:5d:51:54:88:1a:8d:
         95:e3:8b:6c:a4:83:ca:51:53:50:6a:13:45:eb:83:52:4a:d8:
         39:f9:7f:e3:cf:5c:63:67:e8:9c:5c:cd:08:d4:bd:ea:77:f0:
         00:a1:52:46:75:09:66:21:09:f1:f8:62:91:04:3a:b3:19:44:
         e6:3a:43:8f:88:b9:62:e0:27:7d:d3:9c:38:4b:d7:07:f8:19:
         f5:57:9a:54:b0:cb:bd:c6:a8:dd:7c:3d:86:06:64:a3:43:01:
         60:69:a0:02:96:f6:a4:8a:f7:d3:89:81:ce:2c:7b:14:cd:90:
         6f:34:82:f6:e3:f9:b8:d0:04:6f:7c:70:c4:d3:00:52:3d:8a:
         57:8e:2f:fb:49:f6:28:7e:46:ec:1e:9e:41:6e:50:81:12:e0:
         a5:3e:71:79:4c:ed:55:81:b7:79:bf:1b:30:48:be:b1:1c:4c:
         3a:35:2d:e1
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUUZ2dDWlvtTqaBhNSWCU+qqBUCoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMTZaFw0yMzExMjcxMjE4MTZaMDMxMTAvBgNV
BAMTKEU4MkQ5OTM4N0Q1OEU2NzU1QzBCMjM0RUY0RjcwMEYxNjhENDFDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP97Gcsqyb/rDeIHU7cIWn5n+e
YBNaVVinl9gIAmXSabb+s+XPkkxUpj51CuwA0MUa09iUwwctIq5jZBnNBRlxNpl5
RrM3RUMiGaAbbOmRUqmLB755SyWDKqR94TJ94JqbCujS2BSGpPQhQw8R5EaIN3yw
4lQ9rkWvTBzzIyK2gcOpQff95waufVsMrGwyTt4ppyBlcYy5rAgBQl3APvmbGtZ6
3DJPWcKM5XDE6xMNL0YCiH7kntV03xM/Ecror6h4XBdIdZ/Gs3mwKNg3LqM93UWD
fjQPfIZBJyy1zmkiehkazHO2uXBkXeUpmT64HcF+79dI6HWLvSIIj4KFkhwxAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU6C2ZOH1Y5nVcCyNO9PcA8WjUHEswHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMzNjM1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALmOGTANBgkqhkiG9w0BAQsFAAOCAQEATSwM
hUDrFneN9MSUqGMg5wTDWcw4AwoAc3043+ZIEVrWPR89sq0XbjqbzMpCGzKNso+t
ySA4UUttxyHFIAZ6Hnd+jjzfjLgK+eeRzz5/FLtlESJJXVFUiBqNleOLbKSDylFT
UGoTReuDUkrYOfl/489cY2fonFzNCNS96nfwAKFSRnUJZiEJ8fhikQQ6sxlE5jpD
j4i5YuAnfdOcOEvXB/gZ9VeaVLDLvcao3Xw9hgZko0MBYGmgApb2pIr304mBzix7
FM2QbzSC9uP5uNAEb3xwxNMAUj2KV44v+0n2KH5G7B6eQW5QgRLgpT5xeUztVYG3
eb8bMEi+sRxMOjUt4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org