Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          arIVs+WEsXagM6tONJjDHRrgrtehUQW5PARi39GX/HE=
Subject key identifier:   4E:E4:AF:64:0D:4E:F1:A5:9C:D6:A7:0E:19:69:8F:83:95:3F:01:67
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3BCACC8D6B4625308EA75881FFFC09162C301ABC
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396356.roa
Signing time:             Mon 28 Nov 2022 12:18:18 +0000
ROA not before:           Mon 28 Nov 2022 12:13:18 +0000
ROA not after:            Mon 27 Nov 2023 12:18:18 +0000
asID:                     396356
IP address blocks:        179.61.245.0/24 maxlen: 24
                          181.214.70.0/24 maxlen: 24
                          181.214.155.0/24 maxlen: 24
                          181.214.196.0/24 maxlen: 24
                          181.214.226.0/24 maxlen: 24
                          181.215.169.0/24 maxlen: 24
                          181.215.172.0/24 maxlen: 24
                          181.215.195.0/24 maxlen: 24
                          191.101.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ca:cc:8d:6b:46:25:30:8e:a7:58:81:ff:fc:09:16:2c:30:1a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:18 2022 GMT
            Not After : Nov 27 12:18:18 2023 GMT
        Subject: CN=4EE4AF640D4EF1A59CD6A70E19698F83953F0167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:9b:b7:b9:5f:88:c5:11:7c:88:b0:28:a6:
                    e3:41:71:84:f5:08:48:90:4d:5c:07:4e:9b:23:32:
                    90:3d:d4:67:be:4b:30:54:4b:df:38:b3:19:8c:a8:
                    82:a9:ca:bd:47:53:d2:a4:eb:44:9d:fc:b1:32:80:
                    cf:8a:0a:73:5f:ca:31:24:62:67:0f:89:76:2c:ab:
                    1d:b2:23:8a:d1:56:39:49:c4:75:3d:e6:1d:37:f9:
                    d3:a5:6a:14:1f:c5:c6:4d:15:07:99:85:b0:6c:d4:
                    0d:68:5d:72:a6:ec:fe:7a:55:50:c1:69:df:c7:e9:
                    d4:7d:65:db:e9:e3:53:53:f8:52:95:dc:ef:6e:3a:
                    01:73:9c:42:8e:ef:f9:0b:50:9f:1b:1e:3d:95:9b:
                    64:09:b1:76:2c:a8:64:dd:f3:37:26:db:61:14:12:
                    7e:a4:49:54:79:7c:9c:d2:70:bb:38:5c:93:32:42:
                    2d:6b:94:1d:f9:cc:30:18:06:b9:99:b4:39:9b:fe:
                    68:fb:25:6d:19:59:29:b2:f6:18:09:18:41:b3:93:
                    7b:d3:f8:88:8c:22:e9:d4:3e:5c:e0:01:cb:aa:91:
                    ba:97:9d:b0:75:19:51:0f:1a:b1:43:98:1e:17:69:
                    c8:a5:fa:52:f1:a1:c0:5b:85:e0:41:65:3b:2d:e2:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:AF:64:0D:4E:F1:A5:9C:D6:A7:0E:19:69:8F:83:95:3F:01:67
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.245.0/24
                  181.214.70.0/24
                  181.214.155.0/24
                  181.214.196.0/24
                  181.214.226.0/24
                  181.215.169.0/24
                  181.215.172.0/24
                  181.215.195.0/24
                  191.101.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:51:5a:c3:74:8b:ab:36:29:d3:c8:6b:9b:ff:38:cd:bd:59:
         56:6b:c6:f7:5d:49:a2:3d:a7:2d:2b:1c:5a:77:21:b1:89:16:
         f3:b1:47:43:aa:cf:aa:ae:c4:88:0e:e7:c6:28:2b:38:f7:35:
         b5:3c:6c:0e:ad:6d:4f:c9:e2:1f:a5:66:fb:d6:0a:ad:07:80:
         aa:b7:b4:33:cc:8a:01:9b:26:c6:8c:a8:a0:89:4a:ad:6b:4d:
         67:10:22:a3:70:15:06:f3:98:3a:6a:b9:70:be:c8:1d:10:ab:
         6a:ed:56:73:95:ba:a6:c0:df:e1:bc:9f:ba:88:f6:25:5a:ff:
         9c:5b:92:ae:d6:a8:bc:a7:a3:b1:01:86:2b:8a:9d:a2:a9:29:
         b7:72:e8:45:21:41:9c:39:c1:1c:ed:d7:d8:11:21:6d:d9:6b:
         48:b2:33:59:3d:c9:4a:77:93:26:33:1d:9d:3f:e0:0a:df:4e:
         f7:6d:14:30:6e:e7:7b:ac:1a:7c:1f:58:3a:af:d0:12:d5:7c:
         cd:b3:83:e9:73:c7:d0:de:7c:54:c2:12:e9:31:fe:ad:27:4b:
         b6:c6:47:03:96:bb:07:5c:3a:f4:1f:b2:cb:f9:59:58:0c:3e:
         58:f0:56:0f:84:7b:ad:38:e3:83:05:17:0e:8e:0d:31:ab:a7:
         9c:45:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org