Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          U194BtG1iIsRDKK8AIY59HsT4m72OxDgcl6eEwdY6bU=
Subject key identifier:   94:23:25:0B:0D:8D:FC:00:E3:0A:1A:3D:F8:97:88:B3:D3:B1:CD:4C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       0B580ED16F5195F5E944E02AF5537D0808FB159A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS397423.roa
Signing time:             Wed 01 Jun 2022 14:50:29 +0000
ROA not before:           Wed 01 Jun 2022 14:45:29 +0000
ROA not after:            Wed 31 May 2023 14:50:29 +0000
asID:                     397423
IP address blocks:        179.61.194.0/24 maxlen: 24
                          181.214.133.0/24 maxlen: 24
                          181.214.152.0/24 maxlen: 24
                          181.215.47.0/24 maxlen: 24
                          181.215.49.0/24 maxlen: 24
                          181.215.242.0/24 maxlen: 24
                          181.215.243.0/24 maxlen: 24
                          181.215.244.0/24 maxlen: 24
                          185.170.57.0/24 maxlen: 24
                          191.96.101.0/24 maxlen: 24
                          191.96.155.0/24 maxlen: 24
                          191.96.166.0/24 maxlen: 24
                          191.96.186.0/24 maxlen: 24
                          191.101.30.0/24 maxlen: 24
                          191.101.166.0/24 maxlen: 24
                          191.101.172.0/24 maxlen: 24
                          193.227.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:58:0e:d1:6f:51:95:f5:e9:44:e0:2a:f5:53:7d:08:08:fb:15:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  1 14:45:29 2022 GMT
            Not After : May 31 14:50:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:ca:d5:33:9d:32:cd:b0:26:6b:b4:e5:8e:
                    b6:9f:3d:2f:1d:8b:f0:9d:4b:96:af:50:c1:35:fd:
                    02:41:56:26:96:9c:66:2c:ba:7d:f6:ff:26:88:0c:
                    5e:ef:16:12:10:58:b3:c3:c6:e0:8f:a2:06:8a:cc:
                    2d:f6:4d:05:e5:f3:f6:4b:83:59:46:a2:b1:1c:ca:
                    5c:02:8f:f4:74:2b:16:c1:01:24:2d:f5:27:cb:de:
                    3a:0b:34:98:fe:b1:01:d5:3f:0c:e8:13:bd:9d:94:
                    08:e6:28:8f:c4:83:29:de:34:da:5e:54:93:ca:d5:
                    84:dc:01:e1:ef:9c:7f:f1:b1:1f:d4:13:de:2f:4c:
                    63:18:c0:ce:e0:89:ba:cb:7e:ce:2a:e7:96:e6:f7:
                    49:bf:4c:0a:bd:5a:35:da:8d:a5:cd:a0:5d:79:cf:
                    87:b9:91:d9:e4:da:fe:52:f8:aa:f2:c1:68:e9:fc:
                    a3:96:59:8b:ee:a2:61:73:69:fa:df:69:7c:24:a7:
                    08:ba:fd:de:96:42:4e:13:39:f2:1c:1e:9c:ca:46:
                    b4:bb:22:d7:b5:4d:88:64:27:41:66:70:6c:ce:0e:
                    a5:c1:00:3d:4d:df:55:0f:fa:55:0c:87:65:e6:08:
                    44:95:8e:9b:e5:53:e6:88:ac:3e:68:b1:07:2a:eb:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:23:25:0B:0D:8D:FC:00:E3:0A:1A:3D:F8:97:88:B3:D3:B1:CD:4C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.194.0/24
                  181.214.133.0/24
                  181.214.152.0/24
                  181.215.47.0/24
                  181.215.49.0/24
                  181.215.242.0-181.215.244.255
                  185.170.57.0/24
                  191.96.101.0/24
                  191.96.155.0/24
                  191.96.166.0/24
                  191.96.186.0/24
                  191.101.30.0/24
                  191.101.166.0/24
                  191.101.172.0/24
                  193.227.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:98:15:b9:4d:4e:89:db:db:cd:ea:1a:38:99:e0:f6:4e:
         af:1b:12:b8:da:0b:c0:5b:1f:fe:a6:3c:5a:1e:89:46:c4:a3:
         ef:de:23:d0:50:ca:eb:73:95:d0:da:d1:d7:c1:01:b7:05:0a:
         36:11:33:ed:fc:9e:fe:31:1f:f8:e9:63:3d:9b:cf:5a:61:75:
         b2:1a:21:fa:4d:94:80:df:f7:4f:47:b6:17:55:0c:38:48:fd:
         c4:15:ce:81:b4:9c:93:f3:73:1e:26:07:9d:2c:f4:bf:5e:79:
         b1:b3:87:07:c2:a0:00:0d:e8:4c:98:9f:4b:82:fe:bb:07:0d:
         9b:bf:84:22:2d:d1:11:9f:a0:09:fe:63:8e:94:7e:dc:61:fe:
         95:cb:b9:1c:f9:5b:2c:83:f2:fc:aa:fd:78:f3:a3:a3:30:60:
         42:c1:a1:4f:d2:f2:35:8e:6e:58:b6:10:7d:1a:13:6c:67:12:
         a4:b1:2f:48:1c:80:d6:fd:6c:44:3e:1d:f7:68:56:67:66:75:
         16:c4:05:34:49:06:7c:98:f6:5c:b5:11:24:bf:6e:22:f1:7c:
         38:77:c4:1b:64:f3:12:88:aa:09:f4:b3:9a:97:ac:4c:fd:5b:
         4c:58:b9:58:83:76:a2:f9:62:d8:bb:50:ae:f7:79:38:85:1a:
         9d:05:fb:56
-----BEGIN CERTIFICATE-----
MIIHdDCCBlygAwIBAgIUC1gO0W9RlfXpROAq9VN9CAj7FZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjA2MDExNDQ1MjlaFw0yMzA1MzExNDUwMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q4RkNBRDUzMzlEMzJDREIw
MjY2QkI0RTU4RUI2OUYzRDJGMUQ4QkYwOUQ0Qjk2QUY1MEMxMzVGRDAyNDE1NjI2
OTY5QzY2MkNCQTdERjZGRjI2ODgwQzVFRUYxNjEyMTA1OEIzQzNDNkUwOEZBMjA2
OEFDQzJERjY0RDA1RTVGM0Y2NEI4MzU5NDZBMkIxMUNDQTVDMDI4RkY0NzQyQjE2
QzEwMTI0MkRGNTI3Q0JERTNBMEIzNDk4RkVCMTAxRDUzRjBDRTgxM0JEOUQ5NDA4
RTYyODhGQzQ4MzI5REUzNERBNUU1NDkzQ0FENTg0REMwMUUxRUY5QzdGRjFCMTFG
RDQxM0RFMkY0QzYzMThDMENFRTA4OUJBQ0I3RUNFMkFFNzk2RTZGNzQ5QkY0QzBB
QkQ1QTM1REE4REE1Q0RBMDVENzlDRjg3Qjk5MUQ5RTREQUZFNTJGOEFBRjJDMTY4
RTlGQ0EzOTY1OThCRUVBMjYxNzM2OUZBREY2OTdDMjRBNzA4QkFGRERFOTY0MjRF
MTMzOUYyMUMxRTlDQ0E0NkI0QkIyMkQ3QjU0RDg4NjQyNzQxNjY3MDZDQ0UwRUE1
QzEwMDNENERERjU1MEZGQTU1MEM4NzY1RTYwODQ0OTU4RTlCRTU1M0U2ODhBQzNF
NjhCMTA3MkFFQkI1RTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzY/K1TOdMs2wJmu05Y62nz0vHYvwnUuWr1DBNf0CQVYmlpxmLLp9
9v8miAxe7xYSEFizw8bgj6IGiswt9k0F5fP2S4NZRqKxHMpcAo/0dCsWwQEkLfUn
y946CzSY/rEB1T8M6BO9nZQI5iiPxIMp3jTaXlSTytWE3AHh75x/8bEf1BPeL0xj
GMDO4Im6y37OKueW5vdJv0wKvVo12o2lzaBdec+HuZHZ5Nr+Uviq8sFo6fyjllmL
7qJhc2n632l8JKcIuv3elkJOEznyHB6cyka0uyLXtU2IZCdBZnBszg6lwQA9Td9V
D/pVDIdl5ghElY6b5VPmiKw+aLEHKuu14wIDAQABo4ICgjCCAn4wHQYDVR0OBBYE
FJQjJQsNjfwA4woaPfiXiLPTsc1MMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMzOTc0MjMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwewYIKwYBBQUHAQcBAf8EbDBqMGgEAgAB
MGIDBACzPcIDBAC11oUDBAC11pgDBAC11y8DBAC11zEwDAMEAbXX8gMEALXX9AME
ALmqOQMEAL9gZQMEAL9gmwMEAL9gpgMEAL9gugMEAL9lHgMEAL9lpgMEAL9lrAME
AMHjgTANBgkqhkiG9w0BAQsFAAOCAQEAq5aYFblNTonb283qGjiZ4PZOrxsSuNoL
wFsf/qY8Wh6JRsSj794j0FDK63OV0NrR18EBtwUKNhEz7fye/jEf+OljPZvPWmF1
shoh+k2UgN/3T0e2F1UMOEj9xBXOgbSck/NzHiYHnSz0v155sbOHB8KgAA3oTJif
S4L+uwcNm7+EIi3REZ+gCf5jjpR+3GH+lcu5HPlbLIPy/Kr9ePOjozBgQsGhT9Ly
NY5uWLYQfRoTbGcSpLEvSByA1v1sRD4d92hWZ2Z1FsQFNEkGfJj2XLURJL9uIvF8
OHfEG2TzEoiqCfSzmpesTP1bTFi5WIN2ovli2LtQrvd5OIUanQX7Vg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org