Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29066.roa
File:                     AS29066.roa (raw, json)
Hash identifier:          vjrTPxRtui5H0rkd/1FdtCyZ1q+FlKtR0GsYyLXZT1I=
Subject key identifier:   3F:E7:FF:7B:73:65:F2:F7:32:A2:19:0D:05:82:5B:26:F4:EE:7C:81
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7D9BBBB58C7C9DEC66E1A0AE7C60201C6986E297
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29066.roa
Signing time:             Wed 01 Jun 2022 14:49:04 +0000
ROA not before:           Wed 01 Jun 2022 14:44:04 +0000
ROA not after:            Wed 31 May 2023 14:49:04 +0000
asID:                     29066
IP address blocks:        179.61.210.0/24 maxlen: 24
                          181.41.205.0/24 maxlen: 24
                          191.96.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9b:bb:b5:8c:7c:9d:ec:66:e1:a0:ae:7c:60:20:1c:69:86:e2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  1 14:44:04 2022 GMT
            Not After : May 31 14:49:04 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:64:6b:1f:fd:09:f9:26:eb:cd:44:79:4c:
                    3f:70:75:3f:ba:7e:63:53:d6:1e:6b:e5:5a:f0:d0:
                    ae:6b:13:e5:f5:a5:2f:cf:4b:8a:0e:75:60:6c:19:
                    3f:76:53:38:dc:d1:3a:c1:67:30:a4:0c:67:60:ef:
                    22:81:fc:ea:16:ce:9d:94:b6:7e:c9:e3:b5:95:41:
                    0c:cf:4f:32:b7:a9:74:19:fb:ca:03:10:46:9d:6f:
                    5b:d1:c4:29:d9:09:46:4a:57:ec:3b:06:5e:5b:f0:
                    0d:07:a0:50:cd:3d:55:30:82:6a:e2:40:34:45:5c:
                    38:76:2c:46:b8:93:8e:a6:b0:b9:85:d7:7f:cb:4e:
                    51:7b:bb:00:04:79:35:fe:80:4d:e0:97:d9:4d:06:
                    f6:1f:8e:70:65:bb:46:df:ee:76:3d:95:45:ff:f4:
                    83:b2:78:4a:a1:b1:25:e3:c4:c9:bd:2c:ce:7f:19:
                    a0:61:57:3e:5c:17:ab:c9:c7:f0:1b:b2:92:f6:83:
                    a6:2a:d3:b0:4a:5c:03:5f:4a:97:9b:b7:1e:be:46:
                    c9:66:38:79:73:b9:01:4b:1a:5b:c5:67:de:2e:ed:
                    8d:a4:f0:df:ad:39:6e:ff:5b:e0:ee:b5:bf:17:e1:
                    e4:22:27:55:94:dd:b0:a8:cb:9e:0c:6d:08:4f:ad:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E7:FF:7B:73:65:F2:F7:32:A2:19:0D:05:82:5B:26:F4:EE:7C:81
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29066.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.210.0/24
                  181.41.205.0/24
                  191.96.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:13:17:b4:76:47:21:fa:d1:93:3f:bf:05:8d:71:7c:99:81:
         04:6d:72:f3:ee:f3:91:51:83:2a:83:71:9f:cd:6c:86:fc:fc:
         cf:9f:8d:22:a7:1c:96:a4:01:97:a6:2a:18:e1:cb:e1:7d:f8:
         89:ae:69:d1:49:a5:f5:7b:f3:b2:de:c5:57:92:9b:f6:64:09:
         91:2c:51:09:35:d6:57:2e:10:aa:27:31:1f:6b:4e:d1:cb:da:
         25:fb:2e:bd:96:40:49:46:5c:04:42:68:68:b9:db:c7:5d:8b:
         b8:3a:16:72:a8:ce:b6:ab:15:96:4f:7e:66:7c:8d:6c:54:16:
         80:e0:18:24:fa:44:a1:9c:51:a1:0b:31:3f:6d:93:4d:0a:cc:
         62:4d:dc:40:f2:48:e0:a8:6a:e3:c8:09:75:88:93:a3:ca:d1:
         63:e2:eb:08:f1:57:a4:c3:89:7b:e1:da:ac:d0:3b:1b:51:67:
         90:cb:57:b6:43:e6:bd:e2:17:e5:90:6f:4c:f2:6e:68:41:e3:
         58:bc:68:ef:85:a7:e6:0d:50:4f:f3:5f:b6:67:67:90:a4:ef:
         f4:07:83:f4:16:3c:94:f8:bc:33:20:3f:47:10:87:a2:c9:3a:
         36:5d:83:f8:61:65:3f:dc:db:34:49:0d:b6:50:29:65:00:e3:
         50:ee:3c:12
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUfZu7tYx8nexm4aCufGAgHGmG4pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjA2MDExNDQ0MDRaFw0yMzA1MzExNDQ5MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVFODY0NkIxRkZEMDlGOTI2
RUJDRDQ0Nzk0QzNGNzA3NTNGQkE3RTYzNTNENjFFNkJFNTVBRjBEMEFFNkIxM0U1
RjVBNTJGQ0Y0QjhBMEU3NTYwNkMxOTNGNzY1MzM4RENEMTNBQzE2NzMwQTQwQzY3
NjBFRjIyODFGQ0VBMTZDRTlEOTRCNjdFQzlFM0I1OTU0MTBDQ0Y0RjMyQjdBOTc0
MTlGQkNBMDMxMDQ2OUQ2RjVCRDFDNDI5RDkwOTQ2NEE1N0VDM0IwNjVFNUJGMDBE
MDdBMDUwQ0QzRDU1MzA4MjZBRTI0MDM0NDU1QzM4NzYyQzQ2Qjg5MzhFQTZCMEI5
ODVENzdGQ0I0RTUxN0JCQjAwMDQ3OTM1RkU4MDRERTA5N0Q5NEQwNkY2MUY4RTcw
NjVCQjQ2REZFRTc2M0Q5NTQ1RkZGNDgzQjI3ODRBQTFCMTI1RTNDNEM5QkQyQ0NF
N0YxOUEwNjE1NzNFNUMxN0FCQzlDN0YwMUJCMjkyRjY4M0E2MkFEM0IwNEE1QzAz
NUY0QTk3OUJCNzFFQkU0NkM5NjYzODc5NzNCOTAxNEIxQTVCQzU2N0RFMkVFRDhE
QTRGMERGQUQzOTZFRkY1QkUwRUVCNUJGMTdFMUU0MjIyNzU1OTREREIwQThDQjlF
MEM2RDA4NEZBREQ1NzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvuhkax/9Cfkm681EeUw/cHU/un5jU9Yea+Va8NCuaxPl9aUvz0uK
DnVgbBk/dlM43NE6wWcwpAxnYO8igfzqFs6dlLZ+yeO1lUEMz08yt6l0GfvKAxBG
nW9b0cQp2QlGSlfsOwZeW/ANB6BQzT1VMIJq4kA0RVw4dixGuJOOprC5hdd/y05R
e7sABHk1/oBN4JfZTQb2H45wZbtG3+52PZVF//SDsnhKobEl48TJvSzOfxmgYVc+
XBerycfwG7KS9oOmKtOwSlwDX0qXm7cevkbJZjh5c7kBSxpbxWfeLu2NpPDfrTlu
/1vg7rW/F+HkIidVlN2wqMueDG0IT63VdwIDAQABo4ICMTCCAi0wHQYDVR0OBBYE
FD/n/3tzZfL3MqIZDQWCWyb07nyBMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMyOTA2Ni5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw
EgMEALM90gMEALUpzQMEAL9gtDANBgkqhkiG9w0BAQsFAAOCAQEAgBMXtHZHIfrR
kz+/BY1xfJmBBG1y8+7zkVGDKoNxn81shvz8z5+NIqcclqQBl6YqGOHL4X34ia5p
0Uml9Xvzst7FV5Kb9mQJkSxRCTXWVy4QqicxH2tO0cvaJfsuvZZASUZcBEJoaLnb
x12LuDoWcqjOtqsVlk9+ZnyNbFQWgOAYJPpEoZxRoQsxP22TTQrMYk3cQPJI4Khq
48gJdYiTo8rRY+LrCPFXpMOJe+HarNA7G1FnkMtXtkPmveIX5ZBvTPJuaEHjWLxo
74Wn5g1QT/NftmdnkKTv9AeD9BY8lPi8MyA/RxCHosk6Nl2D+GFlP9zbNEkNtlAp
ZQDjUO48Eg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org