Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49832.roa
File:                     AS49832.roa (raw, json)
Hash identifier:          ynziN3C7sREvIzRPYAu01n6JbbQ85woVt5PVZnbnG84=
Subject key identifier:   17:6C:AA:ED:08:AA:AF:AB:2B:A0:66:39:AA:EA:25:10:05:09:AA:99
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       039CBB5EF2543ED1FA9CB6180536B1B5335A2077
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49832.roa
Signing time:             Mon 28 Nov 2022 12:18:26 +0000
ROA not before:           Mon 28 Nov 2022 12:13:26 +0000
ROA not after:            Mon 27 Nov 2023 12:18:26 +0000
asID:                     49832
IP address blocks:        185.135.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9c:bb:5e:f2:54:3e:d1:fa:9c:b6:18:05:36:b1:b5:33:5a:20:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:26 2022 GMT
            Not After : Nov 27 12:18:26 2023 GMT
        Subject: CN=176CAAED08AAAFAB2BA06639AAEA25100509AA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ec:de:ef:fa:73:96:d9:6d:24:19:d6:86:94:
                    bc:8a:5a:55:7c:66:da:8e:8f:4c:1c:89:73:8c:1a:
                    c8:9c:c8:51:ee:bf:30:d1:47:73:07:7a:c2:44:ec:
                    bd:d4:f1:06:04:49:7b:ac:05:53:31:89:8f:4b:2b:
                    a4:8f:0b:e2:d6:07:62:9b:94:63:d5:5e:e0:6a:70:
                    34:69:5f:6b:e4:49:de:28:8e:f4:9f:12:03:88:3c:
                    7b:20:a4:cc:8b:98:81:21:dc:50:ac:96:8a:69:fb:
                    23:9c:39:28:d8:91:a5:de:94:54:a0:ed:69:a4:cf:
                    3b:a6:9d:e9:c5:a6:08:02:75:a0:0a:7c:17:87:dd:
                    20:d2:28:6b:40:62:32:eb:9a:87:76:8b:52:2e:d5:
                    b7:dc:f3:68:56:cb:0b:78:9b:89:6a:57:84:03:94:
                    e2:96:77:e5:86:9d:3e:f5:73:8d:56:44:67:c4:0c:
                    3e:ea:28:46:3f:a2:20:dc:cb:17:9e:f4:63:5b:df:
                    3e:11:ac:71:5b:ea:d6:b7:b9:2e:5c:3f:5f:6f:c2:
                    64:e4:18:ff:77:ab:b8:d8:b3:04:83:28:f0:23:7a:
                    54:ee:6d:21:33:72:da:60:fe:6d:a4:a5:7f:25:93:
                    9f:1e:47:9d:9e:b9:33:87:57:1c:07:c4:60:7d:a3:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6C:AA:ED:08:AA:AF:AB:2B:A0:66:39:AA:EA:25:10:05:09:AA:99
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:b8:10:81:66:b8:49:57:e4:12:de:a7:4f:9a:75:04:17:
         da:a3:f2:c2:8e:7a:ef:c4:4e:86:27:a8:25:cb:e4:b7:ba:65:
         08:27:7f:9e:be:b0:b7:e1:9a:13:75:c7:42:b4:13:34:3a:d2:
         5b:89:2c:f0:87:1e:91:6c:91:56:06:c2:3d:f6:cf:36:40:28:
         c3:32:f8:ea:de:f2:4e:72:73:d5:8e:a6:d0:cb:e8:dc:1a:54:
         bf:2d:7c:f0:17:7d:60:46:63:ef:35:98:2d:97:d5:15:de:c1:
         da:a3:a8:61:81:30:37:3a:f0:58:b3:60:34:e3:0c:5d:68:0f:
         71:6a:1e:00:99:7e:db:e0:6b:66:33:e6:b2:30:7f:48:c4:7d:
         0a:17:ca:36:30:3b:f4:9b:5a:69:3d:97:e7:76:75:12:87:55:
         1f:35:ff:c2:b5:8e:81:e0:db:86:f2:77:33:d4:af:88:56:b2:
         a4:db:af:a1:26:ef:db:c1:7b:ca:d5:37:f2:ad:29:b5:66:06:
         a9:29:4a:27:6e:c7:87:8b:61:15:73:b0:dc:6c:f2:7b:7d:5d:
         b3:b7:77:d0:12:4c:2d:a7:4b:78:78:df:12:8e:48:36:20:d9:
         2a:f2:c1:f9:48:05:51:fc:7b:e4:36:75:35:66:8b:23:70:b8:
         19:b4:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org