Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30456.roa
File:                     AS30456.roa (raw, json)
Hash identifier:          n3m01s3fP8ngt54Gc7mqtryxihMknQCOmG4DK5tW1pY=
Subject key identifier:   87:68:23:B9:01:8C:1E:AA:60:C6:A9:97:F0:91:7E:12:39:F7:18:0E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       01DCD39F9172A54BE2718209F0C5AE54DF20DA24
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30456.roa
Signing time:             Mon 06 Jun 2022 11:47:53 +0000
ROA not before:           Mon 06 Jun 2022 11:42:53 +0000
ROA not after:            Mon 05 Jun 2023 11:47:53 +0000
asID:                     30456
IP address blocks:        181.215.31.0/24 maxlen: 24
                          185.135.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:dc:d3:9f:91:72:a5:4b:e2:71:82:09:f0:c5:ae:54:df:20:da:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  6 11:42:53 2022 GMT
            Not After : Jun  5 11:47:53 2023 GMT
        Subject: CN=3082010A0282010100A759ED0B4C799CE6F0114157781965733C4A05F014145320FE5F6FC2B28DEB718276312981CCA976A18C8CF3D602B6F3373FA40D46E562198B438A854182574422D4F096D5D09B2BE05807775FC8DEDAF3ADF44FA66396F65AC565A2866CC239E4D0644889795CF8BBB174ACA08DC55240C3F28E69D7B115FC158BAAAE61703140393708E0580E33F5C04F2A64CB051D5B5B2318BD6F7D30ECCB5CF95A6A2CF4D01A26AEA647F66CFA534721C2BA5B2C7AD1657CE056B9173FAC017C66619377822039DF7650184C18E9EC98CBF7CD39F6F9A5926AC497538B3416510EC8C732D2994BD6F39B892C342CB227844016EBB23FA8F9C611AB8DC6139E18B47C5BA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:ed:0b:4c:79:9c:e6:f0:11:41:57:78:19:
                    65:73:3c:4a:05:f0:14:14:53:20:fe:5f:6f:c2:b2:
                    8d:eb:71:82:76:31:29:81:cc:a9:76:a1:8c:8c:f3:
                    d6:02:b6:f3:37:3f:a4:0d:46:e5:62:19:8b:43:8a:
                    85:41:82:57:44:22:d4:f0:96:d5:d0:9b:2b:e0:58:
                    07:77:5f:c8:de:da:f3:ad:f4:4f:a6:63:96:f6:5a:
                    c5:65:a2:86:6c:c2:39:e4:d0:64:48:89:79:5c:f8:
                    bb:b1:74:ac:a0:8d:c5:52:40:c3:f2:8e:69:d7:b1:
                    15:fc:15:8b:aa:ae:61:70:31:40:39:37:08:e0:58:
                    0e:33:f5:c0:4f:2a:64:cb:05:1d:5b:5b:23:18:bd:
                    6f:7d:30:ec:cb:5c:f9:5a:6a:2c:f4:d0:1a:26:ae:
                    a6:47:f6:6c:fa:53:47:21:c2:ba:5b:2c:7a:d1:65:
                    7c:e0:56:b9:17:3f:ac:01:7c:66:61:93:77:82:20:
                    39:df:76:50:18:4c:18:e9:ec:98:cb:f7:cd:39:f6:
                    f9:a5:92:6a:c4:97:53:8b:34:16:51:0e:c8:c7:32:
                    d2:99:4b:d6:f3:9b:89:2c:34:2c:b2:27:84:40:16:
                    eb:b2:3f:a8:f9:c6:11:ab:8d:c6:13:9e:18:b4:7c:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:23:B9:01:8C:1E:AA:60:C6:A9:97:F0:91:7E:12:39:F7:18:0E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30456.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.31.0/24
                  185.135.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:3a:86:8a:f0:93:24:99:31:72:ed:91:09:32:e5:2d:ad:
         02:f0:b0:90:a3:01:db:bd:d5:54:bc:bd:dd:3d:48:4b:94:b6:
         0b:4e:82:f8:2d:32:90:a4:cd:66:bd:0d:da:dd:7e:4d:6c:c7:
         78:0d:35:e2:59:aa:10:2c:0c:b7:69:40:9f:1c:e5:b4:a6:6a:
         23:56:f6:ef:14:de:e1:c7:2d:38:21:be:94:94:05:9e:d7:75:
         da:f2:83:f4:31:6d:b8:99:1f:de:67:df:c8:85:8a:b0:64:47:
         eb:4a:0c:00:d6:66:0b:cc:b7:8d:45:83:ab:77:66:b8:2f:7c:
         85:59:a4:ec:58:1b:66:51:16:05:bb:f2:18:36:71:f9:ae:15:
         02:1f:30:17:be:19:cd:0b:8f:1e:c2:db:3e:57:21:41:eb:28:
         ff:eb:9f:eb:43:d1:b6:82:8c:42:6b:7c:52:1a:4d:ab:8d:b6:
         ca:a6:8a:a5:89:09:03:18:70:08:c8:eb:79:fe:2a:55:64:50:
         a3:63:ac:88:aa:67:e0:4f:38:02:ff:48:72:cf:50:86:ae:df:
         dc:c9:ac:b3:8f:c1:ba:fa:f8:4d:1a:ff:a7:a2:6b:dc:1a:6f:
         56:fd:ee:be:73:91:07:0d:76:85:5f:7d:50:e1:0b:1a:34:94:
         5c:c2:e5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org