Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS133398.roa
File:                     AS133398.roa (raw, json)
Hash identifier:          iwEshRdouF89AacUbCxF9t7NbBdzo52E9dfDjnM5VVY=
Subject key identifier:   4D:DF:FA:BB:F8:31:A4:D0:F0:48:BD:C7:16:F2:6C:D0:98:8E:AE:E6
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       2CD615EA2FF2BED9D44D799BA12D976D1207EA83
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS133398.roa
Signing time:             Tue 08 Mar 2022 07:51:10 +0000
ROA not before:           Tue 08 Mar 2022 07:46:10 +0000
ROA not after:            Tue 07 Mar 2023 07:51:10 +0000
asID:                     133398
IP address blocks:        191.101.180.0/24 maxlen: 24
                          193.31.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d6:15:ea:2f:f2:be:d9:d4:4d:79:9b:a1:2d:97:6d:12:07:ea:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  8 07:46:10 2022 GMT
            Not After : Mar  7 07:51:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:11:b9:1d:63:90:e7:2a:96:ac:c4:41:4e:
                    3f:9b:63:28:7b:d7:ad:7e:3b:a6:eb:e7:cf:a0:16:
                    2b:66:06:fd:4c:01:bd:4f:b5:b2:f5:a1:22:56:2a:
                    25:c6:36:77:d5:0f:fc:94:af:60:44:25:f9:15:09:
                    68:2e:b6:50:7b:80:92:3c:29:00:9e:86:42:33:38:
                    c0:ec:79:f2:e1:4b:96:15:e9:5b:31:6f:3f:16:09:
                    f9:a8:5a:25:dc:96:37:0b:a5:94:3f:b0:42:fa:fd:
                    41:be:0b:3c:e1:e4:53:d2:35:1a:eb:70:c2:1b:d5:
                    2d:6e:93:4a:cd:34:cd:9c:84:f3:81:46:3a:ad:32:
                    fd:df:ed:93:61:4b:be:8e:91:33:22:b5:fb:c8:97:
                    0e:2c:d9:0f:ee:39:08:81:79:af:72:5f:cf:78:25:
                    40:10:54:e4:1d:4a:d9:b3:4a:45:b5:cb:4e:52:a3:
                    0b:15:13:dd:c8:a1:ac:7d:e0:ee:c8:60:ca:13:92:
                    47:b4:92:03:1e:5c:b2:ae:79:d0:1c:82:16:e6:8d:
                    3c:ec:81:95:9f:f4:78:08:34:f0:c4:e1:2a:87:d8:
                    ee:0c:b4:e8:60:f6:ea:67:f2:a0:cb:61:6b:7d:1b:
                    2e:04:10:00:4b:16:be:bb:8f:54:2c:c9:66:73:d4:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:FA:BB:F8:31:A4:D0:F0:48:BD:C7:16:F2:6C:D0:98:8E:AE:E6
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS133398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.180.0/24
                  193.31.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7f:94:f1:03:d5:93:72:d9:62:9d:1b:37:d1:3f:ad:51:e4:
         01:68:e2:ce:ba:40:8b:1c:ca:4f:43:aa:4b:4e:d8:3f:9e:a2:
         11:36:d6:93:08:6b:c5:7b:12:ea:01:6d:5d:0d:2d:fa:d2:c7:
         28:b8:c9:7f:4b:0f:6b:c7:11:02:9e:dd:98:1d:da:f4:00:53:
         d7:c8:05:8b:81:31:28:cc:7b:fa:de:63:72:d0:fa:18:86:2c:
         9f:38:45:4f:7b:31:a4:24:63:6a:06:fe:8c:c0:dc:4e:af:b3:
         a9:ca:de:2f:ed:6e:6c:cd:f0:10:d1:25:8a:05:db:07:29:e0:
         c6:41:15:30:be:94:40:1c:09:0e:1e:7f:93:20:68:da:c4:43:
         bd:32:07:79:36:22:1d:23:6e:d8:35:27:1e:9e:30:93:1e:80:
         98:af:d7:69:3a:7f:84:b7:25:4b:53:3f:1a:da:36:f6:7f:4c:
         15:17:18:d8:d9:e2:03:e1:fb:13:ec:41:0b:92:bd:6e:27:c4:
         4f:e1:97:64:53:f2:5c:34:48:0a:27:10:b0:44:c5:ed:f4:9f:
         f5:c9:65:72:b7:d3:3b:74:5b:a6:72:96:8c:88:07:a2:9d:86:
         c9:a9:f7:94:38:be:e3:d7:5b:1c:b9:46:e5:9a:aa:f4:cb:c7:
         25:32:df:87
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIULNYV6i/yvtnUTXmboS2XbRIH6oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMDgwNzQ2MTBaFw0yMzAzMDcwNzUxMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0IzMDExQjkxRDYzOTBFNzJB
OTZBQ0M0NDE0RTNGOUI2MzI4N0JEN0FEN0UzQkE2RUJFN0NGQTAxNjJCNjYwNkZE
NEMwMUJENEZCNUIyRjVBMTIyNTYyQTI1QzYzNjc3RDUwRkZDOTRBRjYwNDQyNUY5
MTUwOTY4MkVCNjUwN0I4MDkyM0MyOTAwOUU4NjQyMzMzOEMwRUM3OUYyRTE0Qjk2
MTVFOTVCMzE2RjNGMTYwOUY5QTg1QTI1REM5NjM3MEJBNTk0M0ZCMDQyRkFGRDQx
QkUwQjNDRTFFNDUzRDIzNTFBRUI3MEMyMUJENTJENkU5MzRBQ0QzNENEOUM4NEYz
ODE0NjNBQUQzMkZEREZFRDkzNjE0QkJFOEU5MTMzMjJCNUZCQzg5NzBFMkNEOTBG
RUUzOTA4ODE3OUFGNzI1RkNGNzgyNTQwMTA1NEU0MUQ0QUQ5QjM0QTQ1QjVDQjRF
NTJBMzBCMTUxM0REQzhBMUFDN0RFMEVFQzg2MENBMTM5MjQ3QjQ5MjAzMUU1Q0Iy
QUU3OUQwMUM4MjE2RTY4RDNDRUM4MTk1OUZGNDc4MDgzNEYwQzRFMTJBODdEOEVF
MENCNEU4NjBGNkVBNjdGMkEwQ0I2MTZCN0QxQjJFMDQxMDAwNEIxNkJFQkI4RjU0
MkNDOTY2NzNENEQ0QUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyzARuR1jkOcqlqzEQU4/m2Moe9etfjum6+fPoBYrZgb9TAG9T7Wy
9aEiViolxjZ31Q/8lK9gRCX5FQloLrZQe4CSPCkAnoZCMzjA7Hny4UuWFelbMW8/
Fgn5qFol3JY3C6WUP7BC+v1Bvgs84eRT0jUa63DCG9UtbpNKzTTNnITzgUY6rTL9
3+2TYUu+jpEzIrX7yJcOLNkP7jkIgXmvcl/PeCVAEFTkHUrZs0pFtctOUqMLFRPd
yKGsfeDuyGDKE5JHtJIDHlyyrnnQHIIW5o087IGVn/R4CDTwxOEqh9juDLToYPbq
Z/Kgy2FrfRsuBBAASxa+u49ULMlmc9TUrQIDAQABo4ICLDCCAigwHQYDVR0OBBYE
FE3f+rv4MaTQ8Ei9xxbybNCYjq7mMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMxMzMzOTgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB
MAwDBAC/ZbQDBADBHykwDQYJKoZIhvcNAQELBQADggEBAKN/lPED1ZNy2WKdGzfR
P61R5AFo4s66QIscyk9DqktO2D+eohE21pMIa8V7EuoBbV0NLfrSxyi4yX9LD2vH
EQKe3Zgd2vQAU9fIBYuBMSjMe/reY3LQ+hiGLJ84RU97MaQkY2oG/ozA3E6vs6nK
3i/tbmzN8BDRJYoF2wcp4MZBFTC+lEAcCQ4ef5MgaNrEQ70yB3k2Ih0jbtg1Jx6e
MJMegJiv12k6f4S3JUtTPxraNvZ/TBUXGNjZ4gPh+xPsQQuSvW4nxE/hl2RT8lw0
SAonELBExe30n/XJZXK30zt0W6ZyloyIB6Kdhsmp95Q4vuPXWxy5RuWaqvTLxyUy
34c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org