Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          FnM7FIgHSiziTlHBiZpTCjxeZtINfV9AUG1XEXyPkGY=
Subject key identifier:   FC:27:14:92:20:A4:34:06:EC:DE:64:01:CF:8E:0A:30:DD:83:D7:9B
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       656EBFD477C610086D6704ACAD0405136F913F35
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49581.roa
Signing time:             Wed 08 Feb 2023 00:00:11 +0000
ROA not before:           Tue 07 Feb 2023 23:55:11 +0000
ROA not after:            Wed 07 Feb 2024 00:00:11 +0000
asID:                     49581
IP address blocks:        179.61.226.0/24 maxlen: 24
                          181.215.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6e:bf:d4:77:c6:10:08:6d:67:04:ac:ad:04:05:13:6f:91:3f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  7 23:55:11 2023 GMT
            Not After : Feb  7 00:00:11 2024 GMT
        Subject: CN=FC27149220A43406ECDE6401CF8E0A30DD83D79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:73:29:03:5b:c3:35:7f:07:63:a7:d7:96:
                    67:70:01:bd:f1:1d:71:52:54:ba:54:fc:d0:ca:78:
                    6c:63:78:9d:4d:d3:b4:42:43:2d:36:5e:9c:f0:2a:
                    a8:17:a1:cf:ea:04:48:ee:1d:d5:94:32:85:38:ff:
                    4e:31:a1:fb:03:db:9d:4e:c2:02:9e:be:ea:91:9f:
                    cb:0c:0d:6a:0c:4d:91:81:45:75:ab:06:b3:60:ec:
                    cf:c2:a0:47:d2:e4:94:ea:f2:ea:22:cf:43:81:70:
                    04:9e:2d:34:a5:ea:c9:37:b4:61:1b:d6:35:00:7d:
                    c2:f4:17:e4:03:c3:bd:92:a9:58:0e:88:6d:47:b8:
                    54:49:92:9b:3b:1d:f5:8b:7f:1d:10:03:b3:d5:28:
                    93:2c:8f:35:3b:a8:39:cc:6c:37:78:d7:88:27:56:
                    d0:17:1b:aa:c5:53:2c:27:d5:f9:2d:a4:78:a2:e9:
                    fd:2d:00:2f:2d:91:67:f2:98:83:bc:3e:3e:aa:73:
                    b5:b2:f9:9b:41:3f:b4:d6:39:f1:46:c4:af:90:0b:
                    29:3c:d5:5f:1e:99:d7:30:0b:bc:35:e7:df:63:04:
                    bd:53:d0:39:d8:0c:3e:13:29:bc:7d:f2:ed:04:38:
                    0b:36:56:92:60:30:f2:37:e1:a1:a1:62:86:e2:81:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:27:14:92:20:A4:34:06:EC:DE:64:01:CF:8E:0A:30:DD:83:D7:9B
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.226.0/24
                  181.215.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:58:d5:80:9e:85:62:3b:6d:13:e1:1b:f8:59:ba:2b:a6:
         54:99:83:1d:ff:6d:5c:69:84:f2:b4:36:53:e6:de:33:9f:cd:
         59:29:ce:d0:a7:8f:b7:b0:15:84:c1:71:72:0d:08:ee:3c:8d:
         2c:88:fb:cf:d8:42:e0:b4:85:9e:7a:e1:a3:8a:b5:1d:d6:f5:
         9b:04:da:60:b7:97:f1:bf:82:32:c9:3f:61:ad:c8:20:72:81:
         4c:ff:9c:76:fb:29:62:72:bd:ff:2a:f8:f9:2e:d1:c2:a5:df:
         7e:27:72:88:49:e2:fb:60:0c:ce:2d:69:f7:05:45:42:6f:50:
         73:bc:77:44:57:c2:65:ab:0d:bb:26:b0:45:7e:8b:89:02:5d:
         78:e5:aa:20:a1:05:e6:dc:d4:d0:52:0a:7a:31:3e:9a:df:d3:
         e4:fc:c5:b7:d1:81:a0:70:87:d3:02:e6:36:25:9c:e5:16:c5:
         f2:df:9c:84:48:9d:6d:34:ad:18:95:56:e2:2c:e5:e6:e2:23:
         2f:2c:31:90:1c:f6:11:4f:72:d6:8e:c0:f8:75:8a:f4:6d:df:
         21:05:21:85:2f:53:2e:b8:67:33:3e:32:e8:57:b4:dc:36:98:
         a4:fd:4f:de:e6:b1:d7:07:dc:4a:72:5f:c2:f5:f8:99:54:56:
         12:87:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org