Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS45671.roa
File:                     AS45671.roa (raw, json)
Hash identifier:          uY/O0aResyLHeEu5FzTCt1NFzC4IJvlJ7dBRAZDNmqI=
Subject key identifier:   5C:76:8E:BD:DB:47:92:75:1F:13:53:04:5D:16:E4:C4:82:71:2E:C0
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       39777ED5A7FAF6B3AE7B6E5FE24F0F8F2371D065
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS45671.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     45671
IP address blocks:        179.61.228.0/24 maxlen: 24
                          179.61.240.0/24 maxlen: 24
                          181.214.17.0/24 maxlen: 24
                          181.214.43.0/24 maxlen: 24
                          181.214.112.0/24 maxlen: 24
                          181.214.162.0/24 maxlen: 24
                          181.214.163.0/24 maxlen: 24
                          181.214.174.0/24 maxlen: 24
                          181.215.168.0/24 maxlen: 24
                          191.101.37.0/24 maxlen: 24
                          191.101.141.0/24 maxlen: 24
                          191.101.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:77:7e:d5:a7:fa:f6:b3:ae:7b:6e:5f:e2:4f:0f:8f:23:71:d0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=5C768EBDDB4792751F1353045D16E4C482712EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:5a:73:00:b2:49:1f:b2:19:c7:e8:1c:ca:
                    f8:cd:19:1e:14:61:11:1c:35:07:f1:54:a9:df:4b:
                    3d:6b:d7:93:a1:d2:10:73:d2:ce:54:6c:01:87:25:
                    ab:d7:1d:53:49:b8:b5:1f:e3:6a:20:ff:0d:ec:65:
                    a6:88:7b:ee:95:46:84:a6:88:09:82:26:db:34:7b:
                    eb:93:ab:aa:94:9e:70:58:e5:c3:04:b0:e4:0d:4d:
                    e1:89:f2:af:7f:3e:dd:f0:e3:0c:14:4c:34:47:8c:
                    40:a7:a4:9d:2a:77:c6:4c:d6:bd:c7:96:c4:86:d7:
                    05:ba:06:97:ec:68:86:36:40:79:a8:18:98:b7:58:
                    f9:69:59:f7:e3:9f:e1:5d:cc:e2:39:a5:7d:a2:22:
                    38:03:ef:f4:b2:8a:ca:d2:69:4d:34:94:f4:c7:4e:
                    ef:52:70:8e:49:e3:1a:26:4c:df:f9:27:00:e1:91:
                    2e:5c:7a:18:e3:34:56:41:77:b9:bd:8c:c7:63:ff:
                    46:6d:53:09:56:98:47:02:9d:b2:7b:ea:bc:47:71:
                    c3:91:af:58:c3:af:49:ef:0d:16:48:44:99:92:15:
                    6e:14:7f:da:4c:11:b3:0b:70:bc:f7:c9:be:2e:83:
                    8a:7f:f3:33:43:b0:e5:6c:82:b6:57:5b:83:9d:fd:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:8E:BD:DB:47:92:75:1F:13:53:04:5D:16:E4:C4:82:71:2E:C0
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS45671.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.228.0/24
                  179.61.240.0/24
                  181.214.17.0/24
                  181.214.43.0/24
                  181.214.112.0/24
                  181.214.162.0/23
                  181.214.174.0/24
                  181.215.168.0/24
                  191.101.37.0/24
                  191.101.141.0/24
                  191.101.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:fb:06:e3:3c:2a:69:00:46:10:51:57:aa:4e:2b:14:5b:
         ea:b2:f0:e6:87:9d:fa:d9:dd:e9:b1:71:d7:42:58:47:18:cf:
         a3:e0:f4:aa:e1:64:0b:9e:57:ef:e6:56:a9:a1:02:7a:32:f8:
         98:8f:20:c0:33:e2:12:5a:91:d6:56:a4:fb:46:6b:a7:4e:b2:
         99:f1:54:17:87:7a:1c:73:ae:d6:e3:c2:e0:08:ff:76:ee:42:
         9c:5b:d7:73:f5:a5:95:6f:d6:ef:d4:34:e5:65:23:30:ca:a7:
         ac:88:02:26:28:8f:db:00:33:c0:dd:50:36:a8:10:df:4c:b4:
         7f:e6:2b:49:5f:8a:35:3d:87:d1:0c:ad:ba:9e:67:e9:a8:fe:
         58:d6:8b:ae:7a:85:5a:a5:a4:39:6c:51:8e:f6:7c:14:e8:96:
         18:69:a2:0c:06:46:88:dd:2c:29:f7:a8:37:3a:1c:ed:d2:02:
         30:a3:11:67:84:cc:0e:6a:e2:d8:3d:98:35:91:00:66:be:19:
         87:a5:c3:4f:84:28:16:bb:bf:31:60:9b:3c:12:9b:f1:b1:9d:
         c1:8e:31:0a:cb:07:97:4f:6b:a3:67:7a:7f:fc:f3:70:03:c4:
         b5:2a:d7:2e:a7:3f:71:4a:a4:4e:0b:aa:2a:db:a0:89:44:ae:
         c5:e9:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org