Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30475.roa
File:                     AS30475.roa (raw, json)
Hash identifier:          nj5Qb4gT2F38kXGhBQOySXdn7Y75CfBGrVD/zZUaHRA=
Subject key identifier:   83:59:20:0F:60:8F:F2:9D:8A:94:CE:8A:77:A9:BB:BD:77:C3:F4:A4
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       24D2D110AC1D7B6CD5FEA422021341E25B217A2A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30475.roa
Signing time:             Wed 09 Mar 2022 13:36:44 +0000
ROA not before:           Wed 09 Mar 2022 13:31:44 +0000
ROA not after:            Wed 08 Mar 2023 13:36:44 +0000
asID:                     30475
IP address blocks:        45.95.15.0/24 maxlen: 24
                          185.170.40.0/24 maxlen: 24
                          193.7.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d2:d1:10:ac:1d:7b:6c:d5:fe:a4:22:02:13:41:e2:5b:21:7a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:31:44 2022 GMT
            Not After : Mar  8 13:36:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:7a:5e:ff:63:ae:16:23:41:3f:f4:c8:80:
                    6e:e0:a3:f0:d4:f7:66:74:c7:f7:d7:1b:55:ba:8e:
                    b2:c6:af:84:d9:ba:d3:0f:c6:cb:63:d2:ab:1b:32:
                    8d:f8:ae:74:63:a9:c6:ad:8c:ab:03:24:55:0b:74:
                    ac:37:cc:22:39:7c:12:c5:69:16:d2:71:2a:de:64:
                    1a:d1:97:ba:fb:0b:10:f0:48:72:fa:22:4f:63:3d:
                    5b:29:73:7b:03:2b:07:e2:76:16:c0:ef:d5:44:a7:
                    fe:07:5e:ef:e9:99:35:77:d5:4d:67:15:b3:0d:18:
                    74:e1:68:6a:62:a9:cf:0b:2b:f6:3a:f6:19:13:f6:
                    c5:81:41:27:ef:65:9e:2d:aa:1c:ac:8b:74:de:cb:
                    51:78:fc:13:cd:a6:03:cc:50:a6:ce:f8:34:ce:74:
                    e4:db:07:39:2d:16:da:ad:a2:a7:aa:75:81:58:2f:
                    ad:40:63:c4:cf:4d:07:7e:a3:25:01:ac:dd:72:04:
                    4d:6f:c9:ce:94:3a:a4:dc:94:e5:02:de:fa:08:43:
                    16:d2:4d:28:fb:71:c8:29:df:1b:9d:20:b6:b9:ad:
                    aa:64:ee:07:5d:e1:cb:1a:ad:1b:bb:24:bf:aa:2b:
                    36:b5:ad:65:65:b7:6b:ab:31:c7:3b:90:17:9a:43:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:20:0F:60:8F:F2:9D:8A:94:CE:8A:77:A9:BB:BD:77:C3:F4:A4
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.15.0/24
                  185.170.40.0/24
                  193.7.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:e9:42:76:1f:45:01:08:ff:54:11:91:3c:d6:cb:ae:1f:
         82:68:73:12:07:1c:fc:0c:d8:e6:df:10:3b:87:c4:3c:82:25:
         75:4e:d9:55:a0:53:2e:77:3e:ee:e9:36:92:63:e4:f8:72:f0:
         f3:f8:54:be:38:e0:56:b3:dd:38:03:79:ab:e5:aa:ca:47:d8:
         6b:bc:e7:8b:49:da:77:6c:3d:12:74:c1:3b:91:57:98:60:d2:
         8b:84:3c:1b:2d:c8:55:9b:23:25:19:06:6f:8f:3f:e6:2d:dc:
         31:e1:89:05:ee:b5:53:67:bb:21:5e:d7:b7:5d:cd:9c:ca:be:
         0f:94:51:c4:33:a8:43:9e:7f:5f:1a:d3:84:94:5f:a7:36:44:
         31:46:c1:44:05:a8:22:f8:b7:8c:bf:1e:32:88:c4:b8:63:f6:
         07:c2:f7:38:9c:12:46:63:32:7c:65:e8:f0:17:e1:0d:c2:9e:
         c6:22:1a:69:95:8a:4a:c4:fd:17:d0:bb:6b:94:34:fb:63:6d:
         85:ea:0b:8c:7e:9e:53:71:6b:3c:65:5c:92:16:85:6e:76:97:
         40:bc:82:40:03:e1:85:85:8e:b9:a6:f8:63:78:ba:af:83:38:
         0d:65:c4:07:1d:4a:56:c5:e7:08:8b:98:14:6e:d7:d7:a8:d5:
         a8:70:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org