Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS40244.roa
File:                     AS40244.roa (raw, json)
Hash identifier:          WApU+LDI7Ov4pzl1ZPFKwanx2ZfI2n2TJy4Dxhq6Tyo=
Subject key identifier:   5B:F1:8D:88:04:1F:33:39:28:0C:64:1D:3F:2B:E0:88:F6:85:D8:E3
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4D277FE6C1F0B711BCEA6414577C0C5959447D42
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS40244.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     40244
IP address blocks:        181.214.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:27:7f:e6:c1:f0:b7:11:bc:ea:64:14:57:7c:0c:59:59:44:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=5BF18D88041F3339280C641D3F2BE088F685D8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:21:0a:30:59:3e:99:20:09:77:3c:a8:1c:
                    c0:8a:d7:c0:e1:0c:66:ec:2b:9a:23:2f:25:4f:81:
                    4d:ef:4e:ce:12:6f:70:b1:0c:6f:e8:51:37:e8:cf:
                    57:56:18:ea:8e:c9:2f:e4:94:fa:05:fe:c1:e4:40:
                    a1:a5:40:0e:a1:2e:25:21:49:c0:70:7c:51:ad:53:
                    21:12:b9:20:b2:e7:91:81:4d:e7:e6:77:60:72:12:
                    34:6d:e3:06:2e:99:b2:16:7a:1b:de:80:6c:84:8c:
                    bd:67:cc:44:76:15:57:2d:db:e7:c2:6a:6e:e4:e2:
                    d5:e6:ff:fc:81:7e:93:e6:79:99:5d:f1:10:65:95:
                    39:37:a0:59:8b:a0:ee:72:0b:be:5d:97:a9:13:da:
                    0c:af:57:f6:60:29:d8:96:fe:1a:f2:07:7d:ce:9a:
                    68:a2:25:96:ce:8e:71:00:6e:3a:7d:b5:ba:6a:24:
                    2b:82:e5:9b:37:f6:13:6b:74:33:af:2b:ce:11:6a:
                    19:70:6d:9a:28:27:8c:56:fc:0f:b4:b4:cf:c5:28:
                    0c:bc:49:95:fa:9a:85:24:e8:1d:d2:98:53:0f:0e:
                    12:9b:51:a5:0c:94:4f:c9:90:4b:ab:0b:89:64:fb:
                    3a:b7:45:d2:72:b7:c6:3a:84:bc:3c:68:9b:53:87:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:8D:88:04:1F:33:39:28:0C:64:1D:3F:2B:E0:88:F6:85:D8:E3
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS40244.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:ca:61:ec:de:f2:76:7e:e0:8d:ea:ae:78:6c:c7:ab:3c:
         e4:f3:8e:b5:50:78:61:23:12:4c:e6:fa:09:ba:70:0c:89:89:
         58:08:18:6a:4e:c2:9e:8f:be:bc:e6:51:0b:32:79:ec:58:73:
         a0:0e:68:73:1f:ea:ae:aa:b4:f2:05:e6:96:0d:c4:fc:70:a3:
         44:b9:8f:cc:82:ed:2d:18:1c:51:81:c3:14:67:f3:27:37:b6:
         3c:04:40:f3:cb:57:91:18:9a:9c:fc:c2:b0:6c:48:4a:ab:a5:
         83:40:04:b8:5c:c8:56:1d:8d:40:84:06:b5:1b:a8:df:3c:de:
         e0:a9:5f:b8:02:45:5a:cb:32:5c:8d:f1:59:7c:5a:41:52:98:
         d1:70:8b:0f:27:ad:a8:01:08:52:9e:cd:7a:5a:bb:68:d6:e9:
         ee:38:ba:b6:42:af:8c:b9:43:a9:7b:cc:11:79:09:9a:69:a0:
         27:8b:1d:b7:cd:6e:55:7e:7a:ee:ea:65:6f:12:cb:0c:f0:74:
         14:10:c9:e7:30:b3:83:b1:f9:43:eb:19:bc:44:a4:57:13:83:
         6a:13:5b:b5:c6:cc:5f:46:0b:b2:38:67:56:1f:96:06:eb:bb:
         04:e4:8c:d5:9f:4d:a1:44:27:75:4b:6d:c4:9f:8b:bd:67:77:
         7b:54:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org