Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49999.roa
File:                     AS49999.roa (raw, json)
Hash identifier:          zw08FxQYZ4sv6vL7XkrHShppQ1PMD8s7FTJ0N8mwuws=
Subject key identifier:   21:2F:6C:D1:C0:71:8B:76:37:32:BA:AF:0C:BF:63:D3:12:1D:7C:AC
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4BE1418980472AF1C9A14831C7E9014D775CF381
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49999.roa
Signing time:             Thu 23 Feb 2023 18:00:10 +0000
ROA not before:           Thu 23 Feb 2023 17:55:10 +0000
ROA not after:            Thu 22 Feb 2024 18:00:10 +0000
asID:                     49999
IP address blocks:        179.61.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e1:41:89:80:47:2a:f1:c9:a1:48:31:c7:e9:01:4d:77:5c:f3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 23 17:55:10 2023 GMT
            Not After : Feb 22 18:00:10 2024 GMT
        Subject: CN=212F6CD1C0718B763732BAAF0CBF63D3121D7CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:0d:37:48:6d:86:62:d1:e3:4d:6d:3a:fa:
                    e1:c0:37:46:97:be:8d:87:d1:b7:25:79:4c:c9:6b:
                    5d:68:2b:f6:f7:3e:08:4c:60:9f:e0:d3:68:0b:00:
                    d2:48:53:b0:98:5f:6a:ed:19:02:1f:d7:57:2f:f0:
                    ef:cc:69:01:7c:e8:e6:5a:51:b5:5f:76:fe:23:d9:
                    ba:35:47:4a:79:ba:eb:77:a4:c0:a6:26:c4:e0:0d:
                    09:e4:a3:ff:18:5b:c8:12:ac:cf:65:0a:86:1a:8b:
                    b9:9b:9f:9e:8f:b6:f3:65:d5:8e:ee:ba:03:2e:d5:
                    c8:51:84:79:ad:f7:54:42:77:ab:c4:1a:7e:c4:54:
                    81:d5:d9:b8:62:95:00:bf:f7:7a:8f:60:01:81:5b:
                    d4:06:5d:75:8f:72:cb:b1:72:16:56:f1:b2:ec:48:
                    ee:ff:80:22:da:0f:42:f5:84:7e:fe:15:3d:3e:de:
                    86:d3:de:60:47:f5:97:ef:da:78:09:5f:56:cc:3c:
                    81:7e:72:fd:2e:26:61:e1:d3:81:51:e6:ea:8a:8f:
                    57:e3:2c:7f:d4:82:6b:0c:8d:49:bc:f8:7d:93:fc:
                    b2:81:be:ff:0e:65:63:71:7b:f6:6f:7a:36:a2:61:
                    2b:99:53:3f:c9:e0:c3:07:0e:17:42:7c:ee:e2:eb:
                    f7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2F:6C:D1:C0:71:8B:76:37:32:BA:AF:0C:BF:63:D3:12:1D:7C:AC
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:ed:3d:d7:66:60:74:a5:8d:3e:aa:d4:f0:e5:38:69:30:
         5a:8b:30:41:34:f6:37:43:e2:2e:4c:70:e6:5c:f6:79:53:be:
         33:39:14:f1:35:12:a5:bc:21:78:f2:a0:ac:0d:0a:55:82:ae:
         38:0c:32:b8:d6:bd:25:48:62:38:ac:54:bc:f0:18:99:c3:f5:
         e5:b7:c0:0f:51:20:4a:95:ec:94:02:58:c9:61:c5:0f:cb:fa:
         a0:74:98:71:d8:9f:ed:8e:85:17:1b:3c:d3:c4:cb:9a:f9:0b:
         b7:f0:86:7c:ff:4a:d2:35:6e:d6:a9:a2:80:ff:8c:04:78:50:
         46:da:0e:98:29:9a:e0:00:d4:a7:92:f9:c2:42:02:7f:20:9a:
         14:cb:b2:27:ca:d5:0e:a8:c3:73:5e:72:8b:82:6e:f8:cc:40:
         f5:47:06:a5:b9:2c:0b:fd:ca:29:6e:c1:0c:6b:7a:91:97:59:
         ab:a9:b5:6e:93:c4:aa:d4:41:4f:c7:59:10:70:73:a7:38:28:
         75:05:4a:19:f3:59:3d:23:6d:0e:95:c3:cc:3a:37:cd:0a:37:
         9f:e7:14:90:f3:7a:5d:eb:28:c6:78:d1:5a:8f:02:7b:ca:9e:
         43:6b:99:70:71:90:9b:fb:07:4e:60:17:3e:9c:94:74:95:75:
         81:5b:30:1e
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUS+FBiYBHKvHJoUgxx+kBTXdc84EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMjMxNzU1MTBaFw0yNDAyMjIxODAwMTBaMDMxMTAvBgNV
BAMTKDIxMkY2Q0QxQzA3MThCNzYzNzMyQkFBRjBDQkY2M0QzMTIxRDdDQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/w03SG2GYtHjTW06+uHAN0aX
vo2H0bcleUzJa11oK/b3PghMYJ/g02gLANJIU7CYX2rtGQIf11cv8O/MaQF86OZa
UbVfdv4j2bo1R0p5uut3pMCmJsTgDQnko/8YW8gSrM9lCoYai7mbn56PtvNl1Y7u
ugMu1chRhHmt91RCd6vEGn7EVIHV2bhilQC/93qPYAGBW9QGXXWPcsuxchZW8bLs
SO7/gCLaD0L1hH7+FT0+3obT3mBH9Zfv2ngJX1bMPIF+cv0uJmHh04FR5uqKj1fj
LH/UgmsMjUm8+H2T/LKBvv8OZWNxe/ZvejaiYSuZUz/J4MMHDhdCfO7i6/fbAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUIS9s0cBxi3Y3MrqvDL9j0xIdfKwwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVM0OTk5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALM90zANBgkqhkiG9w0BAQsFAAOCAQEAdvLt
PddmYHSljT6q1PDlOGkwWoswQTT2N0PiLkxw5lz2eVO+MzkU8TUSpbwhePKgrA0K
VYKuOAwyuNa9JUhiOKxUvPAYmcP15bfAD1EgSpXslAJYyWHFD8v6oHSYcdif7Y6F
Fxs808TLmvkLt/CGfP9K0jVu1qmigP+MBHhQRtoOmCma4ADUp5L5wkICfyCaFMuy
J8rVDqjDc15yi4Ju+MxA9UcGpbksC/3KKW7BDGt6kZdZq6m1bpPEqtRBT8dZEHBz
pzgodQVKGfNZPSNtDpXDzDo3zQo3n+cUkPN6XesoxnjRWo8Ce8qeQ2uZcHGQm/sH
TmAXPpyUdJV1gVswHg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org