Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS210977.roa
File:                     AS210977.roa (raw, json)
Hash identifier:          NinxYSvCQeTpbSJFI/5M1drDnuYmN1qtZk6K5XQ9fig=
Subject key identifier:   5C:F2:70:86:AD:EC:F1:AB:A7:80:63:63:16:7D:C1:95:66:3C:CD:81
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5906EB192EFAD8D636CDD02FBD0FDFFF2093A3DE
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS210977.roa
Signing time:             Wed 09 Mar 2022 13:37:43 +0000
ROA not before:           Wed 09 Mar 2022 13:32:43 +0000
ROA not after:            Wed 08 Mar 2023 13:37:43 +0000
asID:                     210977
IP address blocks:        5.181.134.0/24 maxlen: 24
                          191.96.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:06:eb:19:2e:fa:d8:d6:36:cd:d0:2f:bd:0f:df:ff:20:93:a3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:43 2022 GMT
            Not After : Mar  8 13:37:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:f2:94:31:e5:1b:13:bb:a7:f7:9b:88:09:
                    60:87:91:e1:db:42:fb:7b:f0:e8:bc:40:4a:17:d2:
                    a3:de:cc:ae:7c:d3:4b:ea:ce:fc:84:27:f4:a5:30:
                    de:8b:71:fb:d1:64:73:26:e3:e0:af:00:bd:34:e6:
                    63:be:60:86:43:31:45:d8:ec:cb:22:ad:31:48:c3:
                    e3:88:fe:f3:bb:24:80:7f:eb:c8:5e:20:40:d4:07:
                    7a:f0:23:48:f5:65:4c:fe:99:d2:49:4f:53:2a:d2:
                    52:c9:08:38:30:fd:67:aa:61:15:6b:50:cd:0c:93:
                    0c:9a:24:33:85:4d:c8:0a:dd:c4:32:9f:d2:08:d8:
                    85:00:73:4e:f4:05:50:73:20:7c:a4:04:40:80:62:
                    08:a3:a6:8e:03:a1:64:32:61:3d:7f:2b:f5:89:02:
                    93:62:13:ed:f6:ea:9f:cb:65:54:6a:77:27:a6:fd:
                    ac:b5:15:3d:50:96:52:0f:9f:e2:07:a4:48:81:b9:
                    00:c1:c6:8e:95:a9:49:2d:c8:49:41:ad:b4:f7:5c:
                    4c:a3:2e:30:c4:32:12:3c:f5:82:b2:b1:21:81:73:
                    9d:b4:33:20:7e:c9:54:8e:e2:fc:6c:f8:ec:1f:fc:
                    dc:ab:cb:bb:59:df:14:46:2e:63:39:73:4e:d4:48:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F2:70:86:AD:EC:F1:AB:A7:80:63:63:16:7D:C1:95:66:3C:CD:81
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS210977.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24
                  191.96.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:39:59:3c:d1:c2:63:ca:d1:83:7b:6c:2d:7d:b5:34:23:9b:
         24:0d:60:f9:22:44:67:cf:ae:18:4a:08:dc:66:8a:a1:ae:ec:
         db:3f:dc:f1:0b:f6:da:b2:11:85:c3:c9:3b:a7:18:1d:1c:e2:
         a6:eb:96:3e:92:84:46:99:98:98:6e:9c:05:13:c2:57:93:ed:
         95:ff:aa:14:cf:e2:a6:c4:02:bc:93:f8:27:5b:87:05:44:84:
         06:22:67:70:48:28:30:aa:f0:cb:88:63:0b:66:ea:a6:d4:af:
         e5:0e:46:19:d7:97:0b:2d:5e:f9:62:61:f1:7e:8a:b5:57:04:
         02:6b:13:a5:6d:79:d4:fd:2f:5c:32:38:e5:d9:f4:db:33:2e:
         b1:8b:3a:85:e4:0e:f6:7b:46:96:b6:91:0a:64:ee:dc:2a:c7:
         bb:53:50:ba:6a:18:83:d3:ce:78:28:2b:80:09:c0:06:b3:2c:
         b7:89:37:a6:3d:64:d0:2c:dd:c4:84:15:ad:2f:a7:08:3e:94:
         60:9b:c0:cf:1f:5f:34:6b:82:44:b9:dc:a3:33:38:a6:29:a1:
         14:0a:0f:dd:45:48:7d:ca:ee:86:61:d6:fc:ce:1f:87:29:7a:
         1c:7b:f0:4c:cc:79:6b:2e:94:41:0e:51:f8:01:fa:c0:3e:f4:
         a6:2a:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org