Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60819.roa
File:                     AS60819.roa (raw, json)
Hash identifier:          wJXauA4Z2P3jd15UG2GyhTdYVV5wkHVK3zinSbXd/Pg=
Subject key identifier:   45:6A:B9:0D:70:5D:D1:3A:24:86:59:EB:7C:F0:48:11:3D:59:C1:66
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       2BEB52F5C27B4A50FFACD82538B0ECBFFBCBA1BB
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60819.roa
Signing time:             Mon 28 Nov 2022 12:18:26 +0000
ROA not before:           Mon 28 Nov 2022 12:13:26 +0000
ROA not after:            Mon 27 Nov 2023 12:18:26 +0000
asID:                     60819
IP address blocks:        181.215.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:eb:52:f5:c2:7b:4a:50:ff:ac:d8:25:38:b0:ec:bf:fb:cb:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:26 2022 GMT
            Not After : Nov 27 12:18:26 2023 GMT
        Subject: CN=456AB90D705DD13A248659EB7CF048113D59C166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:4a:63:62:f4:91:7b:91:c5:9f:a5:73:49:
                    f5:91:e6:b8:e3:23:8a:35:fb:1b:09:82:0a:4e:aa:
                    9c:73:cc:3c:8e:e4:36:ab:7e:11:70:27:28:8a:04:
                    49:ec:31:55:3c:07:23:ea:cf:a0:7c:aa:d4:3b:b9:
                    57:97:6e:f9:c8:00:26:36:ad:bf:5b:5d:76:e1:51:
                    ed:7d:94:e7:4b:c0:79:e9:36:36:a7:a5:86:45:8e:
                    d1:4a:24:14:d0:a5:bf:56:be:40:4e:f6:b1:dd:3d:
                    08:1c:c4:00:d1:58:a1:67:a3:a4:5f:b5:a2:17:7d:
                    50:f2:6e:bc:39:d2:61:37:ea:cc:0f:c3:ee:c4:ce:
                    d3:c6:be:72:41:48:e5:b3:5b:72:26:54:fb:8c:ba:
                    63:1c:72:86:10:01:42:0f:e6:f9:5b:79:c7:aa:03:
                    52:82:f4:87:97:05:86:f7:65:22:f5:73:7d:f9:00:
                    9b:01:59:c2:5f:6a:2c:34:09:c7:98:02:59:28:71:
                    d5:96:f0:7b:9f:1c:a3:0a:0b:91:68:00:24:5e:de:
                    a3:65:7e:da:eb:69:a8:96:e7:0e:e2:50:ce:22:1d:
                    34:d1:88:74:66:8e:f7:80:ed:62:04:87:b3:24:83:
                    ae:c5:d1:8e:e7:8a:d0:50:2f:6b:62:11:9a:d4:36:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6A:B9:0D:70:5D:D1:3A:24:86:59:EB:7C:F0:48:11:3D:59:C1:66
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:99:ed:4f:b5:20:4d:2a:40:de:fe:92:9f:03:17:0f:a3:
         8c:2e:89:89:a5:de:e6:00:56:58:a6:24:e0:b6:cd:be:97:c4:
         27:63:a0:1d:18:2d:bb:25:c9:67:f5:ec:82:b2:87:c3:7c:21:
         e0:a6:e9:57:2e:d4:da:24:81:48:36:14:66:49:d7:23:25:36:
         0e:8f:c4:32:a6:d0:13:1f:59:bf:1a:74:82:33:ef:5f:6f:58:
         0e:7f:f8:40:41:65:ac:00:0c:4f:53:8d:59:9b:e0:f0:a8:88:
         bb:7d:de:d8:9e:fe:56:0d:b4:8a:e8:5a:75:8f:80:44:cf:0d:
         09:dc:67:52:8a:6c:d6:63:a1:e2:19:23:18:7e:5b:99:6d:57:
         24:61:2d:5f:18:aa:e1:da:71:f1:14:4b:8d:d8:b8:aa:ee:1a:
         35:02:d1:ab:86:a6:1a:96:d7:bb:ee:53:95:93:aa:60:87:04:
         2a:fa:ef:2f:50:47:b8:97:90:7f:90:8e:e2:61:3c:ff:0d:f5:
         35:0f:74:be:71:f6:e9:b8:0f:fb:20:79:a1:3a:8e:68:e2:a5:
         94:23:75:8c:14:51:46:d3:a8:2a:38:f5:70:09:7e:5e:3f:f2:
         70:0d:06:98:7b:af:4e:83:41:29:2c:ca:a0:47:c6:b5:85:ea:
         dd:e1:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org