Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          Th9VnMg8M+KxCSo+SjQaHVH5NPzHDWgGI5Zp8qHpuPM=
Subject key identifier:   41:15:19:57:EF:84:2E:FA:2D:A0:17:DD:90:01:5A:0A:60:12:0F:52
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       2F4AAEA1EE016AB1C29A52A045BE079BA5E01492
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS396356.roa
Signing time:             Thu 07 Apr 2022 17:15:02 +0000
ROA not before:           Thu 07 Apr 2022 17:10:02 +0000
ROA not after:            Thu 06 Apr 2023 17:15:02 +0000
asID:                     396356
IP address blocks:        179.61.245.0/24 maxlen: 24
                          181.214.70.0/24 maxlen: 24
                          181.214.155.0/24 maxlen: 24
                          181.214.196.0/24 maxlen: 24
                          181.214.226.0/24 maxlen: 24
                          181.215.169.0/24 maxlen: 24
                          181.215.172.0/24 maxlen: 24
                          181.215.195.0/24 maxlen: 24
                          191.101.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4a:ae:a1:ee:01:6a:b1:c2:9a:52:a0:45:be:07:9b:a5:e0:14:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr  7 17:10:02 2022 GMT
            Not After : Apr  6 17:15:02 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:52:c8:3b:70:d1:39:ca:d3:40:34:08:fb:
                    32:4f:ce:db:a5:4a:8b:e0:38:f1:bc:e2:c3:a5:2a:
                    f0:14:b6:2a:c0:82:bf:5a:0f:d0:3b:ec:93:9a:da:
                    f1:f7:62:ec:0f:58:06:e3:1c:98:5c:0c:6d:f0:51:
                    85:de:a0:48:ed:e6:40:cc:0f:e1:af:a0:99:68:59:
                    ad:8a:11:0e:d4:26:24:ca:62:10:25:6a:ec:3d:40:
                    42:b6:e7:9e:38:a5:82:78:1c:43:0f:5b:65:07:42:
                    91:df:36:08:f6:66:12:a7:59:39:25:a7:66:d0:00:
                    60:01:b5:51:ba:f5:68:73:9b:40:1f:3b:c5:be:ba:
                    ee:5b:dc:cf:77:ab:60:97:64:ec:72:2b:71:79:48:
                    e5:64:31:b3:15:63:9b:cf:53:f4:23:b5:f7:cf:57:
                    3d:c8:29:3d:a3:c0:ed:2b:72:13:88:90:a4:ee:29:
                    bd:ed:23:39:62:72:d4:65:52:78:6c:c4:8c:5c:39:
                    04:36:65:a8:dc:00:f6:04:af:41:7e:15:2a:23:3d:
                    b5:ad:ea:25:6e:0c:11:85:b6:74:44:9a:d1:23:16:
                    83:95:fa:e6:07:c0:85:2a:e9:88:ca:20:e6:36:62:
                    e9:25:6a:e4:45:2b:d7:ff:0c:7b:4c:29:07:45:c2:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:15:19:57:EF:84:2E:FA:2D:A0:17:DD:90:01:5A:0A:60:12:0F:52
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.245.0/24
                  181.214.70.0/24
                  181.214.155.0/24
                  181.214.196.0/24
                  181.214.226.0/24
                  181.215.169.0/24
                  181.215.172.0/24
                  181.215.195.0/24
                  191.101.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f4:41:fb:33:b4:df:55:91:ff:e5:5f:97:e7:f1:29:42:ce:
         9d:b1:98:2b:21:44:26:bc:94:cd:c3:ca:8b:a3:c9:c4:72:fa:
         4a:14:a0:1a:e8:86:a3:aa:23:82:ed:5a:f4:29:dc:c0:85:84:
         c5:2e:15:ff:aa:14:cc:88:71:7b:00:c2:32:bf:35:12:75:58:
         53:e3:29:b6:38:e1:62:41:82:73:86:6e:7d:4d:18:08:ac:e1:
         9a:b6:1a:28:ea:f9:cc:a3:a7:3d:6c:70:bb:c6:8d:87:91:3e:
         9d:b7:0a:94:42:61:1f:7a:44:6c:c1:0b:15:9d:11:9f:1d:ce:
         f2:2a:1d:30:60:3e:bf:ca:c5:a3:85:34:bf:4f:bb:36:14:77:
         ae:12:86:9a:37:bd:29:3b:6a:fa:23:13:95:16:b6:24:c2:91:
         a3:80:7a:b3:61:40:f4:11:c0:0b:87:90:6a:55:2e:8c:76:70:
         d1:09:56:3b:52:76:50:05:98:ea:e8:b4:f3:c4:0f:02:bf:8f:
         8e:fb:74:b9:ad:ef:bc:0e:45:0e:9b:b1:e4:58:ad:b1:07:53:
         b2:3c:a3:68:a2:9a:75:1c:3e:0a:6b:94:87:59:be:2e:ec:57:
         35:c4:d5:7f:7c:52:1a:af:19:64:2b:25:82:6e:5f:d9:00:64:
         0f:7b:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org