Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396362.roa
File:                     AS396362.roa (raw, json)
Hash identifier:          ugzqLqzmGfMk5C4vfISFSrCiSbm0JePas0lRNuPCebs=
Subject key identifier:   0E:7D:B6:EA:6B:59:96:82:DC:A5:D6:F3:18:67:93:30:A5:88:8E:10
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       27FFB2DBFE32EF53930D56CACA26160E38DB34B5
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396362.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     396362
IP address blocks:        185.141.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:b2:db:fe:32:ef:53:93:0d:56:ca:ca:26:16:0e:38:db:34:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=0E7DB6EA6B599682DCA5D6F318679330A5888E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:d8:f5:77:a7:18:fb:d9:bf:bc:23:b3:8e:
                    97:1e:6f:a1:32:74:cc:29:cf:79:6f:4e:9a:b7:42:
                    fb:52:b3:f3:c9:11:16:c8:75:74:a7:1c:e8:90:8e:
                    55:77:e4:a1:6a:4e:f9:53:07:0e:ba:14:d0:8d:20:
                    52:38:c0:c3:26:a3:c1:4a:5b:a9:ad:b1:95:d2:ef:
                    2d:bd:95:ae:85:58:e9:8d:24:80:39:2f:02:87:c0:
                    5e:0f:49:e5:f4:74:fd:5e:ba:39:18:8f:1d:6c:36:
                    c0:00:ae:39:de:e6:fb:3a:97:c2:21:c9:70:af:e6:
                    1b:2e:58:33:59:d0:5f:9c:f5:af:c3:6a:22:f2:36:
                    df:3b:51:94:9a:75:53:8c:5c:62:0d:68:21:f4:34:
                    38:53:db:09:03:9a:c2:32:37:1f:c4:53:f0:f1:98:
                    04:2b:35:7c:bb:4a:92:b6:7d:cd:b8:8d:b2:d6:5a:
                    e0:06:2b:9f:29:83:13:40:00:9f:7a:8d:a0:9b:b7:
                    ea:b3:e4:bb:4c:97:16:4f:0c:48:d1:51:62:fb:1b:
                    7b:d2:72:54:a3:19:9a:01:29:7b:ee:a6:d0:75:11:
                    42:79:fa:03:02:ca:ce:f3:fe:f7:18:6c:0d:b1:2e:
                    a2:b8:65:a9:37:e5:e8:83:2b:3b:23:0f:48:66:e8:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7D:B6:EA:6B:59:96:82:DC:A5:D6:F3:18:67:93:30:A5:88:8E:10
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:22:12:ff:cc:4e:37:37:67:fd:64:50:5e:fc:72:d4:25:
         bb:72:1f:6d:ae:30:7e:ea:7e:fa:1d:31:c4:6e:29:c7:51:2a:
         9f:02:f6:4b:fd:58:f3:bd:16:8b:ad:a9:d1:4b:17:92:4c:e0:
         3b:91:ac:34:d9:99:3f:a0:8d:c9:a5:8d:7b:9d:48:68:3d:22:
         ea:cc:a8:43:03:b8:f4:b5:0d:d3:9e:80:3f:db:64:dd:4b:41:
         13:ca:f7:ae:7e:a8:21:e4:b9:00:29:46:6d:11:a3:e1:57:48:
         a4:6e:b0:b8:24:33:9e:88:c0:07:b2:a5:21:61:2b:c7:e7:01:
         ad:e1:fa:ca:82:24:e4:51:97:29:6a:8e:fc:32:76:50:ec:41:
         01:42:f6:74:6e:61:83:2d:17:a5:86:7a:b3:24:75:9d:9b:3d:
         b4:6f:96:4b:e1:77:30:97:55:14:6f:a2:ee:47:e5:11:ec:92:
         c7:df:a3:88:91:39:9f:e2:a6:9d:75:a5:f1:01:7a:71:f3:f0:
         9c:4c:fe:6f:71:ef:79:a5:f3:3a:69:83:37:5e:44:d8:08:3a:
         17:d7:41:0d:b3:e5:21:96:7d:e5:7c:99:81:ad:84:19:96:4e:
         77:6e:5e:be:a7:4b:bd:06:2e:28:34:19:ae:22:1a:04:5f:5c:
         6b:ef:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org