Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS138156.roa
File:                     AS138156.roa (raw, json)
Hash identifier:          pDOnc+Hf9ztZX5zHKhbBW2bx3oV5RI1wP/KIsXL5z1M=
Subject key identifier:   CD:95:7E:54:5F:FF:AC:C2:03:B5:12:31:9E:F3:7D:11:B9:62:59:56
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6DCA6D11010831CB8A47F4D53B901671C3C6ED5E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS138156.roa
Signing time:             Wed 09 Mar 2022 13:37:41 +0000
ROA not before:           Wed 09 Mar 2022 13:32:41 +0000
ROA not after:            Wed 08 Mar 2023 13:37:41 +0000
asID:                     138156
IP address blocks:        181.214.186.0/23 maxlen: 23
                          181.214.188.0/23 maxlen: 23
                          181.214.190.0/23 maxlen: 23
                          181.215.50.0/23 maxlen: 23
                          181.215.162.0/23 maxlen: 23
                          181.215.164.0/23 maxlen: 23
                          191.96.92.0/24 maxlen: 24
                          191.96.93.0/24 maxlen: 24
                          191.101.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ca:6d:11:01:08:31:cb:8a:47:f4:d5:3b:90:16:71:c3:c6:ed:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:41 2022 GMT
            Not After : Mar  8 13:37:41 2023 GMT
        Subject: CN=3082010A0282010100D6A588533F9CC8615CD1E6F312B42F8BA55232BD26B0013373B5181FF141389FDD2662BBD1CCA9739764A9A35F724279018A8D71EC5E4FD25F370D052ADC6DCBF83099E696A892414986A22294A93A7D7CB575B38CEFEAA8BE3AB320DD33FF03AA8315ED4843D41D143992DFA1CDA49D9ED88081012A58A3A0FD7A65DA34ADEC1DE4806FDDE3205904BB539B4A4BC5A2A3313A2D68FEE6B9BBE8EA65D07ACE729F08070687021F083FA6CD88ADB83F533106311D9222EBA4C081C2E32692D8F7532BEAF4030EBC19296C434AEAAD76839CBEC6E0004EB6AD6E7529D6CD8763DAC82D3058D886A6711514CC2EAE1AEA54D1B5C40E937CCECD2B11CE02F53A77D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:88:53:3f:9c:c8:61:5c:d1:e6:f3:12:b4:
                    2f:8b:a5:52:32:bd:26:b0:01:33:73:b5:18:1f:f1:
                    41:38:9f:dd:26:62:bb:d1:cc:a9:73:97:64:a9:a3:
                    5f:72:42:79:01:8a:8d:71:ec:5e:4f:d2:5f:37:0d:
                    05:2a:dc:6d:cb:f8:30:99:e6:96:a8:92:41:49:86:
                    a2:22:94:a9:3a:7d:7c:b5:75:b3:8c:ef:ea:a8:be:
                    3a:b3:20:dd:33:ff:03:aa:83:15:ed:48:43:d4:1d:
                    14:39:92:df:a1:cd:a4:9d:9e:d8:80:81:01:2a:58:
                    a3:a0:fd:7a:65:da:34:ad:ec:1d:e4:80:6f:dd:e3:
                    20:59:04:bb:53:9b:4a:4b:c5:a2:a3:31:3a:2d:68:
                    fe:e6:b9:bb:e8:ea:65:d0:7a:ce:72:9f:08:07:06:
                    87:02:1f:08:3f:a6:cd:88:ad:b8:3f:53:31:06:31:
                    1d:92:22:eb:a4:c0:81:c2:e3:26:92:d8:f7:53:2b:
                    ea:f4:03:0e:bc:19:29:6c:43:4a:ea:ad:76:83:9c:
                    be:c6:e0:00:4e:b6:ad:6e:75:29:d6:cd:87:63:da:
                    c8:2d:30:58:d8:86:a6:71:15:14:cc:2e:ae:1a:ea:
                    54:d1:b5:c4:0e:93:7c:ce:cd:2b:11:ce:02:f5:3a:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:7E:54:5F:FF:AC:C2:03:B5:12:31:9E:F3:7D:11:B9:62:59:56
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS138156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.186.0-181.214.191.255
                  181.215.50.0/23
                  181.215.162.0-181.215.165.255
                  191.96.92.0/23
                  191.101.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:93:d2:34:a8:d2:39:79:ec:f7:ca:d6:04:ea:7e:bf:8a:e7:
         d8:3e:cf:b0:d7:e7:df:43:26:9f:1d:8e:a7:2d:35:b0:dd:1c:
         3f:e1:e8:03:71:90:66:9d:7a:04:1d:5a:f5:2b:70:10:23:b0:
         04:ad:dd:7d:5f:d5:20:e3:da:fa:17:df:10:ef:a6:31:d2:1e:
         9c:b1:7f:aa:df:bd:60:d6:8f:82:45:24:ba:fe:dc:5f:7c:03:
         05:2a:48:be:c0:a4:e1:89:0e:a5:d8:93:18:bb:77:d1:69:22:
         30:09:6f:0e:e8:d0:27:5c:88:80:2f:8e:cf:8a:6e:d1:ad:c7:
         0d:c0:c4:d5:89:bd:c3:0a:85:c7:f6:c2:47:63:01:81:a1:bb:
         72:d7:47:25:92:65:7e:b2:88:9c:3d:89:51:e7:8c:bf:ec:a7:
         40:eb:a3:76:b2:cb:07:76:9f:5e:6a:0a:02:4a:9f:65:7c:1d:
         4f:89:cc:24:ae:3b:84:8c:c1:9b:6c:b2:3e:89:35:1e:48:6f:
         ce:ab:33:f2:ca:33:09:12:fb:e4:75:a1:d7:84:cb:5c:57:2f:
         da:e8:2b:b1:48:cc:4a:14:c2:21:0e:3c:3f:3f:80:38:f6:1d:
         b7:9b:25:67:5e:e8:ea:85:fd:d3:94:d8:2a:db:8b:ef:f1:e3:
         24:fb:e0:32
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUbcptEQEIMcuKR/TVO5AWccPG7V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMDkxMzMyNDFaFw0yMzAzMDgxMzM3NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDZBNTg4NTMzRjlDQzg2MTVD
RDFFNkYzMTJCNDJGOEJBNTUyMzJCRDI2QjAwMTMzNzNCNTE4MUZGMTQxMzg5RkRE
MjY2MkJCRDFDQ0E5NzM5NzY0QTlBMzVGNzI0Mjc5MDE4QThENzFFQzVFNEZEMjVG
MzcwRDA1MkFEQzZEQ0JGODMwOTlFNjk2QTg5MjQxNDk4NkEyMjI5NEE5M0E3RDdD
QjU3NUIzOENFRkVBQThCRTNBQjMyMEREMzNGRjAzQUE4MzE1RUQ0ODQzRDQxRDE0
Mzk5MkRGQTFDREE0OUQ5RUQ4ODA4MTAxMkE1OEEzQTBGRDdBNjVEQTM0QURFQzFE
RTQ4MDZGRERFMzIwNTkwNEJCNTM5QjRBNEJDNUEyQTMzMTNBMkQ2OEZFRTZCOUJC
RThFQTY1RDA3QUNFNzI5RjA4MDcwNjg3MDIxRjA4M0ZBNkNEODhBREI4M0Y1MzMx
MDYzMTFEOTIyMkVCQTRDMDgxQzJFMzI2OTJEOEY3NTMyQkVBRjQwMzBFQkMxOTI5
NkM0MzRBRUFBRDc2ODM5Q0JFQzZFMDAwNEVCNkFENkU3NTI5RDZDRDg3NjNEQUM4
MkQzMDU4RDg4NkE2NzExNTE0Q0MyRUFFMUFFQTU0RDFCNUM0MEU5MzdDQ0VDRDJC
MTFDRTAyRjUzQTc3RDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1qWIUz+cyGFc0ebzErQvi6VSMr0msAEzc7UYH/FBOJ/dJmK70cyp
c5dkqaNfckJ5AYqNcexeT9JfNw0FKtxty/gwmeaWqJJBSYaiIpSpOn18tXWzjO/q
qL46syDdM/8DqoMV7UhD1B0UOZLfoc2knZ7YgIEBKlijoP16Zdo0rewd5IBv3eMg
WQS7U5tKS8WiozE6LWj+5rm76Opl0HrOcp8IBwaHAh8IP6bNiK24P1MxBjEdkiLr
pMCBwuMmktj3Uyvq9AMOvBkpbENK6q12g5y+xuAATratbnUp1s2HY9rILTBY2Iam
cRUUzC6uGupU0bXEDpN8zs0rEc4C9Tp31QIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FM2VflRf/6zCA7USMZ7zfRG5YllWMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMxMzgxNTYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRwYIKwYBBQUHAQcBAf8EODA2MDQEAgAB
MC4wDAMEAbXWugMEBrXWgAMEAbXXMjAMAwQBtdeiAwQBtdekAwQBv2BcAwQCv2XU
MA0GCSqGSIb3DQEBCwUAA4IBAQBEk9I0qNI5eez3ytYE6n6/iufYPs+w1+ffQyaf
HY6nLTWw3Rw/4egDcZBmnXoEHVr1K3AQI7AErd19X9Ug49r6F98Q76Yx0h6csX+q
371g1o+CRSS6/txffAMFKki+wKThiQ6l2JMYu3fRaSIwCW8O6NAnXIiAL47Pim7R
rccNwMTVib3DCoXH9sJHYwGBobty10clkmV+soicPYlR54y/7KdA66N2sssHdp9e
agoCSp9lfB1PicwkrjuEjMGbbLI+iTUeSG/OqzPyyjMJEvvkdaHXhMtcVy/a6Cux
SMxKFMIhDjw/P4A49h23myVnXujqhf3TlNgq24vv8eMk++Ay
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org