Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60064.roa
File:                     AS60064.roa (raw, json)
Hash identifier:          uXfnlq1AVUpoSrhLhZi3dB7LPm/pyosC4riLa5Pfbl4=
Subject key identifier:   4B:4A:E1:0A:CC:4D:69:E9:6C:AC:FD:DF:BB:9A:A5:C1:23:3F:27:03
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       2760ED5DBD391DB344D4DA2FD3469F0612E95CD6
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60064.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     60064
IP address blocks:        191.101.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:60:ed:5d:bd:39:1d:b3:44:d4:da:2f:d3:46:9f:06:12:e9:5c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=4B4AE10ACC4D69E96CACFDDFBB9AA5C1233F2703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9a:c4:2b:87:c1:49:5d:73:9a:40:1d:d1:8a:
                    61:c4:0f:19:6b:ac:f5:39:49:71:00:13:33:a1:85:
                    9e:4d:37:e9:55:e7:27:f1:9f:f6:69:b2:fd:07:cb:
                    6d:27:24:12:42:2e:f1:ae:eb:05:4e:93:43:3e:f8:
                    c4:5c:64:01:bc:5f:0d:82:ca:0f:d1:72:88:4a:2a:
                    50:89:4c:c4:e9:7f:36:b8:d1:1a:b8:be:57:3a:18:
                    66:f7:99:ff:6f:1a:7d:4e:7a:c5:d9:99:88:80:5c:
                    3d:9c:d9:4d:7a:9d:9c:4e:cb:05:1b:8e:2c:58:b7:
                    42:51:74:75:e7:cc:19:c1:33:a1:97:67:68:eb:de:
                    70:76:a9:9f:24:c0:9d:f7:b0:58:de:2e:d0:f1:64:
                    04:50:b4:b6:34:fc:2f:4c:f2:46:9b:4f:29:b4:e3:
                    2b:8b:c6:06:60:ce:14:a2:98:95:9a:1a:a0:84:88:
                    20:86:98:da:9e:88:16:55:fc:bd:0f:3b:07:cf:5f:
                    ff:99:fb:cb:3b:42:2a:25:11:93:18:3e:80:94:13:
                    c3:44:a7:c4:80:9c:60:73:bc:60:95:10:b9:10:7e:
                    59:d2:77:7b:41:f5:80:13:01:28:e2:9d:36:fb:b6:
                    16:ca:2a:09:c5:da:33:62:b3:90:ef:49:55:e1:6e:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:E1:0A:CC:4D:69:E9:6C:AC:FD:DF:BB:9A:A5:C1:23:3F:27:03
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60064.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:51:27:b2:14:34:b3:bf:e1:af:85:af:d5:c4:05:d9:5c:
         10:6c:3b:00:3a:c9:9a:e2:52:bb:73:a7:42:04:10:a4:61:a1:
         86:b6:92:cf:aa:0f:b1:a8:f5:8e:4b:d0:03:87:96:73:b2:86:
         7d:f3:04:e7:6c:ab:a4:7f:64:6b:5f:16:cd:88:de:da:33:bd:
         ac:77:6f:85:60:0c:5c:ea:ed:10:7c:5c:6a:81:e4:44:51:9c:
         9f:28:56:8a:db:dd:53:02:6a:b8:f3:62:99:56:09:d8:6b:39:
         f5:d9:aa:1c:06:79:fc:c1:65:a3:0a:6f:3b:f5:28:78:34:95:
         43:9b:c5:7f:b2:3e:36:d0:b2:de:99:93:3c:d1:1e:85:0f:48:
         59:d1:2b:19:7b:67:65:1c:6f:a0:16:0f:08:b1:f7:b3:3c:3d:
         55:c7:22:a4:ec:89:93:06:d2:0c:d8:0a:1b:61:7d:4b:bf:ab:
         41:58:ab:05:10:96:9d:d2:ef:6a:6f:da:9f:ac:58:ef:2a:3b:
         ca:45:06:8c:a2:63:61:d1:81:0b:30:75:7f:f9:fc:37:40:4a:
         ee:3a:08:d0:58:d6:72:f8:e8:14:3b:e7:c9:18:55:bb:06:70:
         0d:7e:40:5b:07:88:3f:73:6b:8b:12:95:05:0b:8f:a2:36:fc:
         b2:74:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org