Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS51765.roa
File:                     AS51765.roa (raw, json)
Hash identifier:          kK7NQ/K/+EtjRuPYsKD0u2SOwXXnJ1FJbXomM8V9QNc=
Subject key identifier:   94:47:9D:1E:69:B6:EF:6A:F3:A2:D4:B4:E0:BD:62:A5:1E:01:33:81
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7542895436D4A165C67677090FFEED688D147D3C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS51765.roa
Signing time:             Tue 17 Jan 2023 17:00:52 +0000
ROA not before:           Tue 17 Jan 2023 16:55:52 +0000
ROA not after:            Tue 16 Jan 2024 17:00:52 +0000
asID:                     51765
IP address blocks:        181.215.204.0/22 maxlen: 24
                          185.158.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:42:89:54:36:d4:a1:65:c6:76:77:09:0f:fe:ed:68:8d:14:7d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 17 16:55:52 2023 GMT
            Not After : Jan 16 17:00:52 2024 GMT
        Subject: CN=94479D1E69B6EF6AF3A2D4B4E0BD62A51E013381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:e1:7c:dc:21:aa:05:c5:64:c8:01:d0:5b:
                    61:93:8d:ce:b6:92:2b:27:67:20:53:0e:90:b3:10:
                    94:d8:11:54:9f:3d:5f:e8:1d:fd:56:bd:d8:d3:dd:
                    cb:d7:ab:e2:3a:a7:92:1c:bb:60:9d:0f:ff:81:9b:
                    de:d0:46:53:f8:61:3e:71:02:43:76:eb:34:cf:af:
                    e2:b3:a4:ce:e8:fe:c7:4d:11:0a:c4:ae:c6:60:c3:
                    b4:a8:5b:c8:db:c0:bb:7a:7b:d8:6f:2d:d8:b0:be:
                    b3:89:24:33:6e:ad:fc:d2:26:3d:45:66:38:33:c7:
                    79:1d:ec:40:7c:ce:e9:39:df:80:e5:dd:c9:bd:92:
                    27:7c:4d:60:a9:bf:05:58:a5:4d:de:ca:c8:23:ff:
                    f2:6c:8e:18:cf:e5:08:93:ac:51:98:65:1f:f8:32:
                    c0:4e:7b:7d:50:a2:8c:1a:50:55:7e:ae:c0:80:42:
                    b0:73:cd:e4:a0:3f:a0:c3:3d:6d:2b:ae:e7:e4:96:
                    23:6e:61:26:b2:ce:8e:59:4e:3b:ea:c4:ec:26:1c:
                    0e:9a:e9:3e:bb:1a:fc:33:cb:81:2a:51:91:63:ac:
                    44:07:9e:c7:58:12:65:84:97:f5:76:0d:bc:b8:cf:
                    b3:17:59:a2:bd:8b:1c:8b:9f:b5:ce:84:38:aa:b9:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:47:9D:1E:69:B6:EF:6A:F3:A2:D4:B4:E0:BD:62:A5:1E:01:33:81
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS51765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.204.0/22
                  185.158.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:91:df:70:3b:a9:45:0d:5c:84:f9:87:de:9b:98:a6:69:33:
         41:fc:48:a6:e7:01:c9:b7:27:ab:4b:d1:f0:f0:8b:a2:b6:58:
         97:31:b9:fc:13:b5:2f:f0:73:8c:d4:c7:23:3d:18:30:d8:04:
         34:3e:9d:0c:3c:b9:23:0d:bf:62:5d:02:9c:6d:5c:43:78:56:
         50:04:3b:28:4b:92:92:10:cf:7d:11:9d:6a:d8:a0:10:f9:43:
         79:bf:ab:0d:dd:f5:dd:2a:fd:fe:b6:b9:a6:12:12:4f:d6:8a:
         4f:6f:a5:08:cb:e2:78:93:36:bb:9e:d8:42:5e:70:41:83:2b:
         44:6c:46:3b:66:8b:97:ec:36:e7:45:c2:8b:16:7d:53:1c:5d:
         4b:69:9f:30:01:f1:37:91:70:b7:00:3a:bc:4c:87:77:7a:9c:
         d5:e9:11:52:ef:5b:ef:94:4b:61:f8:d4:2b:ac:d9:7b:1f:2d:
         57:b9:93:d0:eb:11:01:b9:55:d7:54:d6:f4:40:cd:d9:8d:5d:
         1a:16:07:09:9f:75:36:cc:6b:32:ef:c2:54:25:5b:48:a8:ff:
         38:f1:7e:9c:1a:f5:24:4b:d5:79:31:5e:19:df:99:08:70:66:
         e5:e7:65:ec:fb:cc:fd:37:c6:3b:ce:c5:f8:c3:e5:71:57:e3:
         39:72:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org