Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS22773.roa
File:                     AS22773.roa (raw, json)
Hash identifier:          eIC0g5cQ/Hbd9FhiZMcRup3/zdzTR265fj3m9t4L+SQ=
Subject key identifier:   32:22:8C:49:8F:45:6A:5C:8C:CB:CF:72:B0:51:1B:5E:4A:49:BD:87
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       77C472A0CF92596B241FA3A8430D1DD5BB9EF22C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS22773.roa
Signing time:             Wed 01 Jun 2022 14:50:51 +0000
ROA not before:           Wed 01 Jun 2022 14:45:51 +0000
ROA not after:            Wed 31 May 2023 14:50:51 +0000
asID:                     22773
IP address blocks:        45.95.12.0/23 maxlen: 24
                          179.61.226.0/24 maxlen: 24
                          181.41.218.0/24 maxlen: 24
                          181.214.122.0/24 maxlen: 24
                          181.214.244.0/24 maxlen: 24
                          181.215.9.0/24 maxlen: 24
                          185.170.59.0/24 maxlen: 24
                          191.96.18.0/24 maxlen: 24
                          191.96.140.0/24 maxlen: 24
                          191.96.149.0/24 maxlen: 24
                          191.96.187.0/24 maxlen: 24
                          191.96.207.0/24 maxlen: 24
                          191.96.245.0/24 maxlen: 24
                          193.227.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c4:72:a0:cf:92:59:6b:24:1f:a3:a8:43:0d:1d:d5:bb:9e:f2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  1 14:45:51 2022 GMT
            Not After : May 31 14:50:51 2023 GMT
        Subject: CN=3082010A0282010100C18E434F85E7470BBAC54A027421EF7965B6237DA981696B8B6F5FA46D9004A6945E59E1AA07B570C0C42A8FFABDDEF89324807FF59018A3555BDA8DF7DE884A7B2F8444BD2F8E407744477E5F8241F06187C5B2DFE8E7BD27FBAB3577255F80952836135DF3B5E3EBB4F7678227AD6A4E73304FF13E90D2B0A685D79189B63AC3DA7AA52D01F0B0567A74140D84C9A98BD6F49768823BAF4D90EB7A1CF368199E935910892616A37EE269B6FBBB1AA4C970B43B5D8E468F7D48E221A8D39D8DD53F0DF88CA6B33EE4EF764F4C5DEA53E1951CB61BA661D7A9674E9784CCE1C1C953A27645D758102F0D7FBDA748B26DA99B3A8B7D44228AA73F36A12475370D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:43:4f:85:e7:47:0b:ba:c5:4a:02:74:21:
                    ef:79:65:b6:23:7d:a9:81:69:6b:8b:6f:5f:a4:6d:
                    90:04:a6:94:5e:59:e1:aa:07:b5:70:c0:c4:2a:8f:
                    fa:bd:de:f8:93:24:80:7f:f5:90:18:a3:55:5b:da:
                    8d:f7:de:88:4a:7b:2f:84:44:bd:2f:8e:40:77:44:
                    47:7e:5f:82:41:f0:61:87:c5:b2:df:e8:e7:bd:27:
                    fb:ab:35:77:25:5f:80:95:28:36:13:5d:f3:b5:e3:
                    eb:b4:f7:67:82:27:ad:6a:4e:73:30:4f:f1:3e:90:
                    d2:b0:a6:85:d7:91:89:b6:3a:c3:da:7a:a5:2d:01:
                    f0:b0:56:7a:74:14:0d:84:c9:a9:8b:d6:f4:97:68:
                    82:3b:af:4d:90:eb:7a:1c:f3:68:19:9e:93:59:10:
                    89:26:16:a3:7e:e2:69:b6:fb:bb:1a:a4:c9:70:b4:
                    3b:5d:8e:46:8f:7d:48:e2:21:a8:d3:9d:8d:d5:3f:
                    0d:f8:8c:a6:b3:3e:e4:ef:76:4f:4c:5d:ea:53:e1:
                    95:1c:b6:1b:a6:61:d7:a9:67:4e:97:84:cc:e1:c1:
                    c9:53:a2:76:45:d7:58:10:2f:0d:7f:bd:a7:48:b2:
                    6d:a9:9b:3a:8b:7d:44:22:8a:a7:3f:36:a1:24:75:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:8C:49:8F:45:6A:5C:8C:CB:CF:72:B0:51:1B:5E:4A:49:BD:87
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS22773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.12.0/23
                  179.61.226.0/24
                  181.41.218.0/24
                  181.214.122.0/24
                  181.214.244.0/24
                  181.215.9.0/24
                  185.170.59.0/24
                  191.96.18.0/24
                  191.96.140.0/24
                  191.96.149.0/24
                  191.96.187.0/24
                  191.96.207.0/24
                  191.96.245.0/24
                  193.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:3a:76:da:a7:eb:0f:a1:c1:47:77:96:a2:26:fe:07:c6:
         64:cc:08:ed:32:3d:cd:7a:79:01:5a:bf:16:df:4a:a0:de:cd:
         a3:12:9c:a3:41:3c:11:42:4f:14:1e:37:15:14:e0:bb:87:40:
         25:5e:99:fe:59:60:9e:8a:95:54:76:e4:6c:af:ac:80:dd:a3:
         cd:f9:2b:68:bd:82:14:d7:01:87:ff:39:5a:2d:dc:54:b5:e2:
         e4:3f:2e:6f:b8:33:56:82:28:97:8d:7d:d0:3f:98:73:a6:59:
         f5:47:4a:3a:b9:4e:38:9c:a1:38:5c:d7:26:03:36:41:bd:ad:
         52:6c:77:b0:b1:24:a0:a1:96:fa:4f:89:fa:29:b3:b1:e7:4d:
         06:64:e6:64:db:ab:21:85:cb:3c:cc:b5:70:78:24:15:a4:8c:
         5b:45:ac:48:b0:53:c2:74:58:97:48:c6:99:f9:29:13:9a:93:
         96:9d:b8:bc:71:0f:5d:de:f7:9a:c2:65:2d:cc:2b:e5:b6:5c:
         b6:03:59:f7:ff:ec:7e:36:a4:7f:0f:61:ed:5e:81:5b:81:3a:
         d3:24:66:18:6d:6e:4d:fd:de:c9:85:8e:84:67:f8:1e:39:96:
         66:0c:c8:86:b0:df:52:67:42:0f:90:06:4c:4f:55:e1:73:c3:
         f6:6e:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org