Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS45671.roa
File:                     AS45671.roa (raw, json)
Hash identifier:          70hTWKZ1mSLKwDUSoPhWLRY2LH+4yrZJtcUQkGPFKww=
Subject key identifier:   FD:F4:F7:5D:B0:48:A9:5E:F6:E4:5A:F8:A4:35:1A:01:E1:6B:5B:08
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       48673D5DE60ECDDC43F672ABD985CA5293217E43
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS45671.roa
Signing time:             Tue 05 Apr 2022 15:02:44 +0000
ROA not before:           Tue 05 Apr 2022 14:57:44 +0000
ROA not after:            Tue 04 Apr 2023 15:02:44 +0000
asID:                     45671
IP address blocks:        179.61.228.0/24 maxlen: 24
                          179.61.240.0/24 maxlen: 24
                          181.214.162.0/24 maxlen: 24
                          181.214.163.0/24 maxlen: 24
                          181.214.174.0/24 maxlen: 24
                          181.215.168.0/24 maxlen: 24
                          191.101.37.0/24 maxlen: 24
                          191.101.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:67:3d:5d:e6:0e:cd:dc:43:f6:72:ab:d9:85:ca:52:93:21:7e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr  5 14:57:44 2022 GMT
            Not After : Apr  4 15:02:44 2023 GMT
        Subject: CN=3082010A0282010100C817880F81C953F24F99AE6CF34E5AD34762D3CD27A0EE2FA36423773BFA63F750C9CADD587845B3616C9AD8FAA637B0E11EC9D10D860277637790FAB4BD72A29573E6BBE0688C7F3592A79351747941AD89A044FCDA1D7C2968EC9623DC6A1A833C2C54216968F67A36AEA2C00844449025F1FEAD35FC7D3F5E556A21DE9FE9AFC177A248ADB4CC9B072409AEFFA8FAB3C5FE3979C444168543C92D951C7038E231F3E5336D07B4565E795965320F818E070871C980494093A746997C27A6F9DB325FEC82A1CA53552D08A9528DF3EC8A5A0562ED77AB077FC55418E37AC2263156FDA7F5EA54795EA7E5867696F38AE5A585FF402D5F53713B149249C4569B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:88:0f:81:c9:53:f2:4f:99:ae:6c:f3:4e:
                    5a:d3:47:62:d3:cd:27:a0:ee:2f:a3:64:23:77:3b:
                    fa:63:f7:50:c9:ca:dd:58:78:45:b3:61:6c:9a:d8:
                    fa:a6:37:b0:e1:1e:c9:d1:0d:86:02:77:63:77:90:
                    fa:b4:bd:72:a2:95:73:e6:bb:e0:68:8c:7f:35:92:
                    a7:93:51:74:79:41:ad:89:a0:44:fc:da:1d:7c:29:
                    68:ec:96:23:dc:6a:1a:83:3c:2c:54:21:69:68:f6:
                    7a:36:ae:a2:c0:08:44:44:90:25:f1:fe:ad:35:fc:
                    7d:3f:5e:55:6a:21:de:9f:e9:af:c1:77:a2:48:ad:
                    b4:cc:9b:07:24:09:ae:ff:a8:fa:b3:c5:fe:39:79:
                    c4:44:16:85:43:c9:2d:95:1c:70:38:e2:31:f3:e5:
                    33:6d:07:b4:56:5e:79:59:65:32:0f:81:8e:07:08:
                    71:c9:80:49:40:93:a7:46:99:7c:27:a6:f9:db:32:
                    5f:ec:82:a1:ca:53:55:2d:08:a9:52:8d:f3:ec:8a:
                    5a:05:62:ed:77:ab:07:7f:c5:54:18:e3:7a:c2:26:
                    31:56:fd:a7:f5:ea:54:79:5e:a7:e5:86:76:96:f3:
                    8a:e5:a5:85:ff:40:2d:5f:53:71:3b:14:92:49:c4:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F4:F7:5D:B0:48:A9:5E:F6:E4:5A:F8:A4:35:1A:01:E1:6B:5B:08
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS45671.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.228.0/24
                  179.61.240.0/24
                  181.214.162.0/23
                  181.214.174.0/24
                  181.215.168.0/24
                  191.101.37.0/24
                  191.101.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:36:a4:2f:ce:32:fb:53:8d:85:6a:92:aa:1f:95:76:b8:eb:
         47:1f:ab:b5:8e:c3:37:6a:cf:ef:29:da:cc:ec:4f:f8:1f:00:
         af:26:97:90:e7:69:cb:2e:71:a4:8c:5d:a1:5d:99:b2:bc:bd:
         e5:e1:18:55:94:35:c5:82:06:c0:3a:1c:c2:16:3f:5c:b0:3c:
         0c:4e:ff:a9:28:f4:f1:5b:d8:2a:38:7a:56:ec:88:77:0a:c6:
         52:69:10:eb:ef:2b:e1:66:56:59:fb:88:18:fc:90:d9:c7:a6:
         74:dc:36:55:aa:75:88:a8:51:a7:79:2d:3f:75:18:ea:27:2d:
         91:c1:e8:fe:be:23:9f:d6:76:a7:38:57:94:a5:81:e0:21:27:
         be:93:92:65:56:db:08:34:21:0a:94:be:13:62:08:e0:ba:58:
         16:4b:ba:71:51:35:c8:93:c0:bc:66:a6:4d:48:9c:b3:a8:70:
         2c:63:39:75:35:9c:3c:5b:22:fd:b0:ff:c2:1f:38:a3:a2:7b:
         b4:5e:d6:e1:61:bd:3c:2e:8b:3e:41:a0:f7:03:a8:35:b6:30:
         a0:d1:e6:c5:35:12:0c:67:f9:cc:cd:f7:09:5e:e2:37:90:37:
         c0:45:dc:d9:fa:bf:54:21:74:2a:bf:f9:e5:94:a6:1c:7b:2b:
         2e:39:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org