Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43260.roa
File:                     AS43260.roa (raw, json)
Hash identifier:          PM6ggyEVRBxoAXAeD5j5ky/6RMq/239LSvb2Ys4o87M=
Subject key identifier:   DA:10:DC:61:F1:D4:F3:18:DF:4C:BE:12:64:14:F4:D8:B1:B8:C1:AD
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       1C4E6C65B4605203090196A04ADE16D747579C4A
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43260.roa
Signing time:             Tue 28 Feb 2023 09:06:06 +0000
ROA not before:           Tue 28 Feb 2023 09:01:06 +0000
ROA not after:            Tue 27 Feb 2024 09:06:06 +0000
asID:                     43260
IP address blocks:        45.89.253.0/24 maxlen: 24
                          179.61.191.0/24 maxlen: 24
                          181.214.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4e:6c:65:b4:60:52:03:09:01:96:a0:4a:de:16:d7:47:57:9c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 28 09:01:06 2023 GMT
            Not After : Feb 27 09:06:06 2024 GMT
        Subject: CN=DA10DC61F1D4F318DF4CBE126414F4D8B1B8C1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:de:d3:40:ef:b4:89:1f:9d:4e:b0:f1:4e:
                    a5:4c:a7:47:c9:d8:7d:e4:6b:31:47:bb:f1:84:be:
                    94:81:0b:a7:58:dc:1a:59:fc:4f:96:fe:19:07:6f:
                    05:39:97:19:0e:94:df:07:78:00:05:aa:1b:0f:c6:
                    7b:d3:03:d8:92:fc:61:ed:f6:46:da:88:16:69:93:
                    8d:a0:63:46:d4:af:fd:c5:d9:f0:a0:9c:1c:9a:d2:
                    b8:68:f8:5b:05:ae:c2:3f:c3:cf:89:46:4e:fe:9a:
                    66:0e:79:d1:45:f4:8f:a4:0d:24:d9:4e:8d:76:d5:
                    ca:64:1b:ef:4b:ec:b0:75:7d:33:63:42:7a:3e:cd:
                    57:d0:6a:b9:57:16:c4:64:ac:84:71:41:02:c4:b2:
                    e4:8f:5a:ed:41:d1:d8:b2:39:d4:33:7f:8e:cf:3e:
                    f0:d8:61:a3:ae:96:b3:17:90:b7:58:4c:ac:10:45:
                    c7:88:24:3a:f1:dc:ee:a9:38:61:e4:21:99:68:0b:
                    fe:43:01:73:91:ce:08:5f:4c:a7:0e:ed:26:67:08:
                    c3:b7:d5:e5:65:da:f7:e5:89:2a:3f:04:9f:13:6d:
                    11:e2:5b:d5:75:fc:e0:74:85:9c:a7:ab:e7:ab:1e:
                    3a:b9:14:6a:f6:11:fc:2a:f4:fd:d0:3b:26:2b:55:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:10:DC:61:F1:D4:F3:18:DF:4C:BE:12:64:14:F4:D8:B1:B8:C1:AD
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.253.0/24
                  179.61.191.0/24
                  181.214.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:d0:68:5a:36:b7:db:1a:e6:39:ff:b1:95:40:25:31:28:00:
         e4:21:d2:37:87:ff:3e:91:ff:23:96:52:c6:f3:d0:a2:e8:22:
         85:4f:09:ce:7b:04:ca:ed:c3:15:a8:51:dc:a7:d2:6a:f6:5a:
         85:ad:c1:ca:be:e7:43:70:92:0a:21:af:2c:96:79:ff:85:ac:
         fe:8b:f0:88:ab:f0:f5:f9:44:fa:2f:1d:0b:4d:21:93:36:43:
         85:74:60:b8:cc:df:13:4e:99:4f:d7:7b:b6:66:d5:9d:08:ec:
         b1:76:39:f2:6d:62:df:71:24:de:7c:e1:c6:03:1a:48:58:f0:
         37:09:f9:61:c3:a5:aa:16:05:f4:5d:4a:25:3d:22:b4:12:7e:
         60:2f:93:81:b9:ea:2d:c8:32:a4:67:04:46:d0:77:2d:90:48:
         3d:38:63:d3:0f:77:f9:7d:6b:57:57:06:f1:98:f8:4c:8d:57:
         b4:58:5d:34:fc:a4:61:59:c8:bb:a4:a9:74:f3:76:ef:e3:05:
         3a:65:7c:c0:de:7d:5c:83:bd:82:c5:1e:86:3f:ff:93:5e:54:
         ff:2d:d9:8b:e1:ed:30:03:85:e6:3f:41:68:59:33:b0:18:d2:
         01:ee:ef:e8:5e:49:53:92:5e:f6:90:86:5c:28:8d:81:51:83:
         d9:a2:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org