Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          u1hSvibI1+qblNjiH1r2DuyIgdK1epjWhPK1A+0U+r0=
Subject key identifier:   6D:D7:9D:34:28:37:EB:4A:40:CC:2D:BC:A2:F6:0D:8D:81:F8:93:C6
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       509855A24D49DE5BB85F2C008096BE9900DC13EC
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS64267.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     64267
IP address blocks:        179.61.225.0/24 maxlen: 24
                          181.214.229.0/24 maxlen: 24
                          191.101.100.0/24 maxlen: 24
                          191.101.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:98:55:a2:4d:49:de:5b:b8:5f:2c:00:80:96:be:99:00:dc:13:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=6DD79D342837EB4A40CC2DBCA2F60D8D81F893C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:4c:7f:aa:29:09:3e:12:70:9f:0d:54:fe:
                    91:65:ce:3c:c5:be:36:be:d9:38:ba:74:5e:79:a8:
                    53:6a:0b:dd:d7:07:10:93:64:bc:12:92:55:b3:f9:
                    f3:de:80:4e:dd:f0:98:6d:23:10:85:3f:32:b7:4a:
                    ab:e1:cc:34:07:a6:08:16:0c:d2:60:a0:0f:ac:f7:
                    2c:44:c8:0e:9d:a3:6c:40:9a:c3:1d:a4:bd:ec:a9:
                    10:0b:15:c7:23:50:5b:30:cb:ee:76:3c:8d:00:d9:
                    73:b2:5b:6b:e9:7b:0b:da:6b:9b:4d:5a:02:33:8d:
                    18:17:4a:2e:9d:98:2f:a4:28:e7:b4:30:f2:13:1c:
                    3b:dc:03:89:0b:68:17:d6:73:95:d7:7a:3c:c9:e9:
                    06:be:db:71:74:37:a3:4d:58:30:56:2f:39:f9:89:
                    64:0b:8c:09:b0:6a:e8:95:1b:6e:52:79:ee:da:73:
                    55:e4:2b:c3:ba:bd:e2:eb:19:ca:98:9b:ed:5f:94:
                    c4:fd:78:47:f5:94:4c:7b:87:a2:96:62:d2:21:99:
                    fc:2e:b3:a2:da:d4:ae:cb:52:40:c0:5b:79:74:fd:
                    53:54:ad:6b:fb:0f:ab:98:54:77:a1:fe:71:74:42:
                    0a:e2:ca:31:6e:20:80:3a:66:94:28:2c:17:05:f0:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:9D:34:28:37:EB:4A:40:CC:2D:BC:A2:F6:0D:8D:81:F8:93:C6
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.225.0/24
                  181.214.229.0/24
                  191.101.100.0/24
                  191.101.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:cc:9a:1f:50:35:a8:0e:60:49:21:7f:4d:5c:d3:18:70:
         e7:2b:f3:fd:23:85:25:d2:2b:69:dc:72:3f:8f:1f:b9:50:32:
         42:65:dc:bd:6a:e2:90:1d:dc:b1:6b:6e:de:41:48:8a:fd:0e:
         86:ce:fd:0a:29:62:9f:42:22:b9:b7:19:7d:d4:98:73:63:84:
         67:fa:0a:e3:11:ac:d4:e9:42:18:e7:29:fe:20:1a:39:dc:bc:
         7b:e6:08:3a:60:94:4d:ea:85:34:a8:9c:25:80:a6:4b:59:46:
         33:18:52:37:74:fe:39:5d:16:30:d4:fb:72:1a:c6:c5:74:2f:
         f7:b4:b7:fa:23:ab:4d:ab:8d:96:74:c3:e6:9e:89:23:fe:67:
         a0:a9:dd:17:d4:91:fd:c3:e4:21:a6:6e:ac:c3:6c:8f:27:df:
         7d:d1:99:b7:40:da:ef:7f:d5:cf:d1:0f:e2:d8:23:33:1c:48:
         f3:39:08:9f:64:dd:c0:5c:18:e4:9d:ff:e8:03:cc:58:5b:31:
         5d:b1:85:31:20:80:4c:57:a2:d6:d5:0b:ea:6f:23:79:e4:58:
         b1:c0:29:79:d3:d3:33:eb:33:44:80:28:b6:b1:ad:8f:cb:ff:
         6b:f1:86:ec:d0:52:59:23:57:25:bd:8b:92:36:28:a4:2a:ac:
         5d:5a:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org