Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          w1rPVykygJlwFWpSPlnjd3WLKOXVNys5uN2Xq9QlA9A=
Subject key identifier:   89:DC:96:02:6D:3B:67:3B:3C:CC:F6:53:29:D1:A4:48:93:AC:9C:1C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3B5862A7C45AA114EA986E71FEFADC1E457C9288
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS7029.roa
Signing time:             Tue 29 Nov 2022 04:17:48 +0000
ROA not before:           Tue 29 Nov 2022 04:12:48 +0000
ROA not after:            Tue 28 Nov 2023 04:17:48 +0000
asID:                     7029
IP address blocks:        149.62.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:58:62:a7:c4:5a:a1:14:ea:98:6e:71:fe:fa:dc:1e:45:7c:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 29 04:12:48 2022 GMT
            Not After : Nov 28 04:17:48 2023 GMT
        Subject: CN=89DC96026D3B673B3CCCF65329D1A44893AC9C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:57:32:4e:d9:72:15:c4:2a:26:a7:4e:c9:
                    3b:64:cf:04:1f:65:ad:97:f8:08:5e:d8:01:b6:14:
                    4d:c1:43:5f:91:09:bf:07:cd:cf:c3:2d:d2:8d:b9:
                    74:01:a8:b6:ce:4f:76:c7:67:eb:a7:2a:38:7a:ac:
                    a2:37:29:43:4e:42:28:48:c3:10:6e:d3:74:f1:fe:
                    cf:ba:b2:f1:48:dc:88:52:ad:eb:a1:cb:94:88:f8:
                    97:9c:ee:4f:0f:1a:4e:95:5c:ee:9b:c2:11:de:14:
                    41:f5:eb:5b:c1:69:e9:19:06:6f:c0:97:bd:55:5e:
                    f1:bd:9d:fa:a3:39:80:bc:38:a8:21:22:94:0e:01:
                    5f:bc:b1:1b:47:dc:6d:75:09:e1:5a:2b:c1:68:a2:
                    ea:c8:6a:a5:07:ec:50:12:c1:fb:a6:50:af:b4:84:
                    52:4e:9a:8b:0d:a4:41:27:9e:05:3e:77:77:07:c7:
                    96:9f:4a:2f:b5:7d:42:f8:31:00:b7:82:e6:4d:a6:
                    81:5a:ff:57:47:03:f5:8f:bf:36:82:26:82:66:08:
                    b2:e3:d4:5b:9e:91:0b:be:e9:05:55:05:86:73:e6:
                    6f:a1:5c:f6:f9:d6:41:7d:62:ff:be:b6:a5:00:ce:
                    e6:9c:f9:ba:73:8c:86:9d:10:b7:f4:6a:b1:c5:f2:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DC:96:02:6D:3B:67:3B:3C:CC:F6:53:29:D1:A4:48:93:AC:9C:1C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:ea:f8:46:d3:c7:2c:55:45:bc:ed:7b:53:1d:32:36:35:
         6d:7b:15:39:e8:10:ec:c1:db:23:36:39:cd:03:74:42:1f:c5:
         fb:72:af:60:d1:62:a6:e4:01:45:4d:b9:84:d7:4c:95:6d:6c:
         ca:f1:3f:4d:52:b3:40:a5:d4:b5:b8:fb:6d:0c:75:52:ab:ce:
         0f:df:93:84:32:ab:56:38:77:3e:5f:0a:d7:64:a9:26:d6:dc:
         d3:5a:56:17:a5:ab:19:de:19:42:c4:e1:dc:03:24:ef:3c:bb:
         29:76:e1:86:2a:53:59:e2:01:d2:65:b0:25:07:46:1b:81:96:
         ed:a0:0a:69:b3:42:32:0a:fb:3f:f2:b6:70:fe:33:a6:6e:d9:
         82:82:0f:b6:9a:0d:30:28:d8:35:cc:a7:a0:39:bc:84:7c:b3:
         22:a8:b4:a6:cc:98:a5:45:04:a0:ca:2b:0a:68:73:62:c7:f8:
         d4:d0:e7:99:46:e2:75:c5:16:2b:25:5e:8f:92:01:1b:54:c6:
         93:0a:f9:81:e0:f2:e1:30:02:34:de:cd:9d:8c:6e:66:e0:7d:
         c2:3e:4c:bd:ca:2f:c2:1a:e2:4b:15:21:87:8d:e1:bc:74:b5:
         11:6f:3a:00:30:97:d7:e2:8d:4d:1f:28:a2:c3:b9:c0:d2:02:
         f2:67:93:ec
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUO1hip8RaoRTqmG5x/vrcHkV8kogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjkwNDEyNDhaFw0yMzExMjgwNDE3NDhaMDMxMTAvBgNV
BAMTKDg5REM5NjAyNkQzQjY3M0IzQ0NDRjY1MzI5RDFBNDQ4OTNBQzlDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzVcyTtlyFcQqJqdOyTtkzwQf
Za2X+Ahe2AG2FE3BQ1+RCb8Hzc/DLdKNuXQBqLbOT3bHZ+unKjh6rKI3KUNOQihI
wxBu03Tx/s+6svFI3IhSreuhy5SI+Jec7k8PGk6VXO6bwhHeFEH161vBaekZBm/A
l71VXvG9nfqjOYC8OKghIpQOAV+8sRtH3G11CeFaK8FoourIaqUH7FASwfumUK+0
hFJOmosNpEEnngU+d3cHx5afSi+1fUL4MQC3guZNpoFa/1dHA/WPvzaCJoJmCLLj
1FuekQu+6QVVBYZz5m+hXPb51kF9Yv++tqUAzuac+bpzjIadELf0arHF8jV9AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUidyWAm07Zzs8zPZTKdGkSJOsnBwwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBwBggr
BgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVM3MDI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAlT4qMA0GCSqGSIb3DQEBCwUAA4IBAQCnRer4
RtPHLFVFvO17Ux0yNjVtexU56BDswdsjNjnNA3RCH8X7cq9g0WKm5AFFTbmE10yV
bWzK8T9NUrNApdS1uPttDHVSq84P35OEMqtWOHc+XwrXZKkm1tzTWlYXpasZ3hlC
xOHcAyTvPLspduGGKlNZ4gHSZbAlB0YbgZbtoApps0IyCvs/8rZw/jOmbtmCgg+2
mg0wKNg1zKegObyEfLMiqLSmzJilRQSgyisKaHNix/jU0OeZRuJ1xRYrJV6PkgEb
VMaTCvmB4PLhMAI03s2djG5m4H3CPky9yi/CGuJLFSGHjeG8dLURbzoAMJfX4o1N
Hyiiw7nA0gLyZ5Ps
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org