Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS44486.roa
File:                     AS44486.roa (raw, json)
Hash identifier:          nSZv5dWDdxjcHZtzqFE/GmwK2mCWRYy5SsHLWvBtHv8=
Subject key identifier:   53:D4:93:C0:CF:05:CD:3F:78:C7:9D:7C:1B:8C:89:67:84:F8:AE:B5
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       351849064BBD523B7671C1675A87162F9DBD4B3C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS44486.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     44486
IP address blocks:        45.137.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:18:49:06:4b:bd:52:3b:76:71:c1:67:5a:87:16:2f:9d:bd:4b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=53D493C0CF05CD3F78C79D7C1B8C896784F8AEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6d:6a:6c:bd:39:04:20:7c:d9:ad:ea:8e:9f:
                    47:a1:2e:16:87:f2:f9:0c:c1:f2:91:d3:22:7d:8e:
                    8c:a1:5e:c0:cb:6c:7f:45:7d:f3:7e:a0:47:81:78:
                    11:08:3f:2b:78:e5:92:c7:ae:9b:df:34:2d:cd:fe:
                    e2:b7:12:62:79:65:0d:2a:99:b9:15:5d:12:74:30:
                    73:d3:a8:9e:19:b0:ad:01:4a:20:b7:0e:6d:8e:a1:
                    3c:fe:93:ee:9d:46:7d:c9:85:e6:67:ce:5f:ff:5d:
                    c5:2d:91:10:a1:96:32:63:a9:f1:47:3b:3d:d1:2f:
                    d7:cd:a4:6e:75:4b:0e:7b:b1:30:2e:63:f7:de:c7:
                    57:0f:49:fa:24:20:d7:3e:c8:36:fd:28:d3:5d:54:
                    6c:5b:83:9f:8d:88:1a:00:6b:c7:91:95:6d:f9:2a:
                    dd:b7:2a:20:8d:d0:c5:b7:8f:86:80:fd:e4:53:08:
                    ea:c7:2c:b8:65:e3:d3:4d:8d:9a:cd:b8:c5:2c:92:
                    6a:15:14:f1:6e:91:e6:dd:02:4b:c9:45:38:ff:da:
                    45:48:a9:a9:00:97:97:29:74:a6:93:ac:7d:07:18:
                    dc:f7:ab:39:b2:6f:5f:d9:e4:f5:af:50:c1:50:c4:
                    35:a4:c6:1a:02:d8:b8:ac:05:a3:3a:dc:93:a1:32:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:93:C0:CF:05:CD:3F:78:C7:9D:7C:1B:8C:89:67:84:F8:AE:B5
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS44486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:4f:ac:e3:5e:25:9b:50:d4:0b:cc:1d:fa:82:2f:97:3b:67:
         f0:15:8c:4b:97:bd:c5:0b:a8:2a:4c:97:24:dd:67:4d:38:a1:
         4a:6e:d9:2c:7b:43:e0:9c:b5:7c:47:f6:12:e4:15:ad:81:67:
         15:8e:06:04:f6:e9:05:f8:35:f7:e0:86:53:91:9a:3b:64:93:
         1e:19:09:1b:71:50:1c:d7:86:3c:40:d2:22:51:ee:86:b0:ff:
         6e:71:72:b6:a1:99:3a:d6:9b:cb:7b:5a:d4:82:b9:40:e0:ee:
         94:d4:69:1f:fc:bc:1b:e0:e2:ab:ad:51:61:49:3b:69:84:89:
         32:e3:49:20:e8:08:24:ca:99:91:6a:bf:22:21:42:47:3e:3b:
         2b:7d:3a:a1:7d:b2:de:9b:93:09:e0:53:04:5c:40:9f:39:2f:
         04:b3:af:c7:63:71:4f:ea:55:bc:21:39:3a:33:d9:c1:39:9a:
         7f:0b:bf:35:07:82:14:96:d6:d8:3c:12:70:46:07:f2:92:00:
         fb:d9:e8:9d:80:c2:c3:10:e2:75:6e:75:ee:3e:42:81:07:6d:
         75:2d:54:0c:ef:6c:c2:64:6d:5e:13:8e:2f:8b:20:f5:83:fe:
         48:c9:2e:83:12:fa:e3:dc:9a:df:12:67:51:bf:d3:2f:36:d6:
         29:7a:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----