Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46337.roa
File:                     AS46337.roa (raw, json)
Hash identifier:          BEHoBIQFQ/+UTJEM+OLBQc43WShoCl3qxeMtEKsUzmc=
Subject key identifier:   32:A0:DB:1D:02:DE:40:74:8F:A4:3F:4C:C6:5A:20:42:1E:0D:24:4C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0F47F1EE8026A061A2209EDAA8503D3E39345565
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46337.roa
Signing time:             Mon 28 Nov 2022 12:18:17 +0000
ROA not before:           Mon 28 Nov 2022 12:13:17 +0000
ROA not after:            Mon 27 Nov 2023 12:18:17 +0000
asID:                     46337
IP address blocks:        179.61.137.0/24 maxlen: 24
                          179.61.192.0/24 maxlen: 24
                          179.61.232.0/24 maxlen: 24
                          181.214.31.0/24 maxlen: 24
                          181.214.83.0/24 maxlen: 24
                          181.214.142.0/24 maxlen: 24
                          181.214.156.0/24 maxlen: 24
                          191.96.133.0/24 maxlen: 24
                          191.96.151.0/24 maxlen: 24
                          191.96.165.0/24 maxlen: 24
                          191.101.33.0/24 maxlen: 24
                          191.101.50.0/24 maxlen: 24
                          191.101.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:47:f1:ee:80:26:a0:61:a2:20:9e:da:a8:50:3d:3e:39:34:55:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:17 2022 GMT
            Not After : Nov 27 12:18:17 2023 GMT
        Subject: CN=32A0DB1D02DE40748FA43F4CC65A20421E0D244C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:55:02:d6:e4:a2:53:b2:2c:d5:3c:d0:3c:1b:
                    69:fc:b5:63:bc:60:b1:1d:f0:37:7a:68:98:cf:4e:
                    f4:17:73:b0:f2:bb:8a:04:30:5f:73:3f:c2:d6:4b:
                    37:63:72:49:c6:5c:d5:a0:7a:8c:37:8c:2d:e1:81:
                    05:d8:11:83:a8:1a:37:26:97:4b:62:39:d2:06:99:
                    d7:1a:c1:6e:65:e8:41:cc:3e:74:bc:25:a2:e4:7e:
                    5d:bf:de:06:b1:aa:45:41:56:a0:9e:d7:82:31:4b:
                    cd:d5:b3:aa:b3:5a:b7:e2:67:73:ef:2b:22:8a:47:
                    d9:8b:0f:21:ce:84:5e:0d:90:06:de:77:ae:e9:8e:
                    66:35:d1:75:2c:d7:b7:1d:ba:08:aa:01:05:d8:8e:
                    bf:a6:05:fb:a8:08:50:72:b0:22:bd:c7:4d:c1:09:
                    0b:87:f7:bf:f5:7e:8a:42:45:54:13:af:00:74:ca:
                    07:12:db:01:d7:72:2f:27:b5:6a:59:44:18:d8:df:
                    1b:4e:01:75:2d:c1:e3:91:44:c5:e6:25:5d:e6:0f:
                    43:3d:fc:08:42:20:54:45:95:b1:1c:45:37:5a:f0:
                    16:50:8a:24:5b:fe:bc:dd:a8:4e:8f:dc:87:8b:4a:
                    ca:47:00:cb:06:4d:99:fa:c7:df:1e:86:4d:04:c0:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A0:DB:1D:02:DE:40:74:8F:A4:3F:4C:C6:5A:20:42:1E:0D:24:4C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.137.0/24
                  179.61.192.0/24
                  179.61.232.0/24
                  181.214.31.0/24
                  181.214.83.0/24
                  181.214.142.0/24
                  181.214.156.0/24
                  191.96.133.0/24
                  191.96.151.0/24
                  191.96.165.0/24
                  191.101.33.0/24
                  191.101.50.0/24
                  191.101.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:36:f0:13:9d:e6:4b:4f:e7:cc:f8:82:02:d6:d5:ec:96:4e:
         24:5f:a0:46:7a:ac:29:73:e7:70:d0:1d:9d:58:e1:b9:1e:d0:
         f8:f1:8b:3e:15:bd:85:9a:6d:6c:a6:18:e8:d7:ce:07:2e:19:
         96:47:06:d9:04:9f:bf:9d:06:5b:33:4a:25:dc:92:6b:cf:d2:
         e3:22:1a:6c:db:9b:d4:75:86:c9:e0:69:fe:56:60:34:17:64:
         d8:2c:5f:cb:93:bb:bc:3d:78:14:ae:b5:d6:09:5d:6e:e2:51:
         08:83:f4:78:a0:5e:25:1a:79:c5:65:82:d7:f8:bd:30:b9:f3:
         86:9e:6c:16:5e:ef:c7:e6:cf:03:48:b2:55:ec:ea:fe:73:2c:
         42:c0:f9:c3:21:6b:63:ee:b7:11:5d:b3:c3:63:9d:d5:fd:45:
         17:bd:ec:9a:60:72:5e:08:05:eb:24:a9:f2:6e:b9:f7:ab:8f:
         4e:95:32:af:ae:48:dc:f3:17:3d:33:00:19:3a:ed:bb:3d:31:
         f0:41:0e:36:35:f1:c7:89:8a:d2:b7:3a:9f:ce:a3:f1:1d:12:
         dd:f4:13:ad:bb:dd:46:b1:40:48:cb:12:26:fe:97:e3:5a:72:
         94:88:62:00:3a:3b:bb:46:ad:9e:5b:79:8c:62:23:9c:2e:d7:
         2b:19:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org