Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30823.roa
File:                     AS30823.roa (raw, json)
Hash identifier:          I2Yssc3q0XhNtTmFuzLQnY5T5hZNaer4KGI/JNx9uIs=
Subject key identifier:   95:74:38:A8:29:64:C9:C4:6E:17:15:7B:A2:12:07:72:D4:F7:A7:EA
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       117B40E393B43F89EBE5702320A58808667EE6A0
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30823.roa
Signing time:             Fri 18 Mar 2022 11:25:37 +0000
ROA not before:           Fri 18 Mar 2022 11:20:37 +0000
ROA not after:            Fri 17 Mar 2023 11:25:37 +0000
asID:                     30823
IP address blocks:        45.137.116.0/24 maxlen: 24
                          45.137.117.0/24 maxlen: 24
                          45.137.118.0/24 maxlen: 24
                          179.61.237.0/24 maxlen: 24
                          181.214.240.0/24 maxlen: 24
                          185.173.34.0/24 maxlen: 24
                          191.101.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:40:e3:93:b4:3f:89:eb:e5:70:23:20:a5:88:08:66:7e:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 18 11:20:37 2022 GMT
            Not After : Mar 17 11:25:37 2023 GMT
        Subject: CN=3082010A0282010100AD098F1FC9521CC7C03B668AEBFF710C52A36466EC973DD3D89F5DC20CA92D6C142C330B24BFFC83A163E5708E65988DEAFFBB46F275B41046F4BA555B43091E558B0A5CBA65FFC30D7C44BA87ED5C305D7BCE36CA593615CB8AFA20A451F39210AF5B75F1A4232BDFF29F6886B75A2F09C46641215808BEE0E92B930241664339FDC5FEBA8E32E26B03389BA33950F4D6AAC3190B029EC805DDC3CB665F76FA7E8A46D03488B56C74C22389EEAD3599B756502FA03668F00907BC7CEFE1B266916AD8C17D0A324AB2FF8D29E87DC517BB6384C07E1D790C37DD357315FEFE690657C88627F29A47B67C979211007F19EB35075288F5B1F937F0F39CC03CF5D10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:8f:1f:c9:52:1c:c7:c0:3b:66:8a:eb:ff:
                    71:0c:52:a3:64:66:ec:97:3d:d3:d8:9f:5d:c2:0c:
                    a9:2d:6c:14:2c:33:0b:24:bf:fc:83:a1:63:e5:70:
                    8e:65:98:8d:ea:ff:bb:46:f2:75:b4:10:46:f4:ba:
                    55:5b:43:09:1e:55:8b:0a:5c:ba:65:ff:c3:0d:7c:
                    44:ba:87:ed:5c:30:5d:7b:ce:36:ca:59:36:15:cb:
                    8a:fa:20:a4:51:f3:92:10:af:5b:75:f1:a4:23:2b:
                    df:f2:9f:68:86:b7:5a:2f:09:c4:66:41:21:58:08:
                    be:e0:e9:2b:93:02:41:66:43:39:fd:c5:fe:ba:8e:
                    32:e2:6b:03:38:9b:a3:39:50:f4:d6:aa:c3:19:0b:
                    02:9e:c8:05:dd:c3:cb:66:5f:76:fa:7e:8a:46:d0:
                    34:88:b5:6c:74:c2:23:89:ee:ad:35:99:b7:56:50:
                    2f:a0:36:68:f0:09:07:bc:7c:ef:e1:b2:66:91:6a:
                    d8:c1:7d:0a:32:4a:b2:ff:8d:29:e8:7d:c5:17:bb:
                    63:84:c0:7e:1d:79:0c:37:dd:35:73:15:fe:fe:69:
                    06:57:c8:86:27:f2:9a:47:b6:7c:97:92:11:00:7f:
                    19:eb:35:07:52:88:f5:b1:f9:37:f0:f3:9c:c0:3c:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:74:38:A8:29:64:C9:C4:6E:17:15:7B:A2:12:07:72:D4:F7:A7:EA
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS30823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.116.0-45.137.118.255
                  179.61.237.0/24
                  181.214.240.0/24
                  185.173.34.0/24
                  191.101.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4b:97:3b:42:ef:d6:34:bd:0e:49:2a:92:5b:48:0c:db:89:
         fa:ea:a5:dd:c2:79:3c:6e:c6:99:49:99:c9:d4:a6:68:4c:55:
         4e:ef:71:9d:42:a0:81:9a:ec:f9:21:ed:e2:3e:ff:01:6e:f1:
         6e:b6:81:57:58:21:9a:94:96:8e:a5:2f:8f:41:43:07:af:00:
         3d:c2:f5:d5:b3:0a:cf:7f:0b:16:4f:e5:a0:50:77:18:aa:62:
         02:10:ae:15:37:db:ec:54:85:7d:35:18:75:bb:5f:69:8c:93:
         5c:02:61:e0:ea:f4:ef:0d:58:11:21:a3:5e:ac:27:1f:3c:7d:
         fd:e6:5c:2c:16:9b:e2:3a:c9:88:52:94:bf:5a:88:aa:6e:96:
         db:5a:fc:61:dd:52:35:4f:f3:1f:9c:e9:95:7b:7e:2f:f4:dd:
         1f:dc:00:29:b3:dc:58:6f:e4:95:52:9d:82:87:d9:7a:c3:fe:
         da:c4:30:87:dc:ac:24:75:c7:59:d4:84:84:f5:b1:3f:55:fa:
         fa:d7:91:ea:8f:0d:a9:5c:c8:99:34:da:92:5c:21:40:a8:59:
         63:05:27:89:83:5a:7d:09:62:e4:10:97:7e:a3:6c:11:c3:1b:
         cf:f1:c9:9c:03:1d:3b:01:a3:04:14:22:6f:79:bd:70:28:f4:
         1f:c2:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org