Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13213.roa
File:                     AS13213.roa (raw, json)
Hash identifier:          idwsXjwrE+t4FrCrmBD1TYI2kEEMMXG67np1zkxG8EM=
Subject key identifier:   66:CA:AE:18:46:9B:85:11:88:D4:BB:AF:41:25:6E:5B:8F:12:E4:7D
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4ED2C9A15E6A7B10C329497E64061445DCBFB50F
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13213.roa
Signing time:             Wed 09 Mar 2022 13:30:55 +0000
ROA not before:           Wed 09 Mar 2022 13:25:55 +0000
ROA not after:            Wed 08 Mar 2023 13:30:55 +0000
asID:                     13213
IP address blocks:        181.214.135.0/24 maxlen: 24
                          181.214.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d2:c9:a1:5e:6a:7b:10:c3:29:49:7e:64:06:14:45:dc:bf:b5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:25:55 2022 GMT
            Not After : Mar  8 13:30:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:c5:aa:51:3d:99:97:e2:82:76:54:f0:22:
                    5a:70:ea:d5:61:8b:d0:18:5c:79:f7:d4:8d:6c:cf:
                    15:86:d5:71:b6:ec:42:0c:f1:c6:49:80:cf:31:e8:
                    2a:ac:a4:cd:67:83:cb:64:c4:88:b6:b7:fe:3b:96:
                    9e:15:44:ac:1d:8b:58:c3:a4:0f:47:0e:21:66:e4:
                    4b:02:5b:a1:00:0f:6f:6d:cd:54:8c:9e:ea:69:87:
                    1a:df:f1:51:df:28:a3:52:4f:15:69:98:00:d9:af:
                    b9:96:91:ad:f9:fe:58:30:35:1d:1c:04:b1:17:78:
                    30:64:17:43:66:b3:2a:02:61:33:ba:30:b7:81:e6:
                    6c:f3:e1:d9:cb:0f:d1:33:be:7f:c1:1c:74:db:b7:
                    eb:c9:2f:53:63:2d:9a:3a:44:af:df:a3:47:71:ce:
                    9f:3d:49:33:ba:1e:0a:1c:7d:5e:3c:8e:68:8c:d9:
                    11:97:85:a8:07:63:e8:ee:1c:be:33:30:65:db:d9:
                    07:f7:9a:09:93:85:df:a8:d9:aa:5f:3c:d2:20:ac:
                    1b:d1:01:71:5b:f9:f8:fc:d4:7e:2f:cd:d2:f6:27:
                    ee:f7:62:d2:75:7c:86:23:55:a7:87:02:52:94:4d:
                    3c:f3:cd:7e:9b:70:5c:2d:02:ce:4e:4a:4d:f0:f8:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:AE:18:46:9B:85:11:88:D4:BB:AF:41:25:6E:5B:8F:12:E4:7D
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13213.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.135.0/24
                  181.214.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:86:d7:2d:4d:8d:b4:76:d7:5e:ae:45:51:4e:5e:4f:66:eb:
         b9:c9:31:8f:5b:77:c9:2d:25:37:84:a6:22:e1:be:9d:4f:d1:
         35:92:12:dd:31:2c:54:c1:ed:af:7b:75:54:3e:00:4a:30:a2:
         5c:33:e7:9c:15:cb:78:ad:28:22:f3:15:ce:d3:3e:df:9c:80:
         0d:fe:f0:6c:4a:16:b8:b5:ff:53:28:48:5a:72:78:70:8e:5a:
         38:37:9c:3c:a8:ed:e3:1f:87:3d:da:e6:e7:c9:77:fb:d6:dd:
         59:65:8e:4c:2c:77:54:35:af:84:16:38:c5:bc:07:c1:09:d1:
         53:d6:4f:ac:52:38:be:77:f8:3f:cf:b0:a8:a7:03:5c:11:d4:
         c9:b2:e1:af:a4:72:22:08:d1:0a:35:79:c8:11:cc:b3:50:4e:
         7d:53:49:78:0b:2b:69:db:4b:07:97:9d:73:07:fc:83:9b:5b:
         1f:71:3f:4e:0a:27:a8:41:88:76:ff:0a:82:57:48:db:2c:6f:
         89:e0:8c:40:e1:e7:81:f2:61:f5:28:0e:2e:83:8c:0e:ec:67:
         6e:e4:61:7b:8f:a9:20:06:36:d8:b2:a1:f5:e2:f4:3f:96:da:
         11:0e:4d:92:09:28:e0:2f:ca:6d:ef:01:3a:2a:26:48:72:ac:
         c2:3e:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org