Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS55720.roa
File:                     AS55720.roa (raw, json)
Hash identifier:          fViHUvs5tj9v1hZaI6yEH3JRupPg5kdM8f+ciK1mSC0=
Subject key identifier:   F8:32:E5:D7:98:C7:FB:DA:79:81:7E:66:F0:EA:97:8A:2E:E0:39:B4
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       22C784881AD74CB30D1C4FF0D43A9A8ED6AA40A3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS55720.roa
Signing time:             Wed 09 Mar 2022 13:37:42 +0000
ROA not before:           Wed 09 Mar 2022 13:32:42 +0000
ROA not after:            Wed 08 Mar 2023 13:37:42 +0000
asID:                     55720
IP address blocks:        5.181.132.0/24 maxlen: 24
                          181.215.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:84:88:1a:d7:4c:b3:0d:1c:4f:f0:d4:3a:9a:8e:d6:aa:40:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:42 2022 GMT
            Not After : Mar  8 13:37:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:04:74:57:d8:e8:cb:23:8e:98:80:08:dd:
                    34:18:48:49:05:f9:cb:8f:ca:47:10:20:c6:44:f6:
                    2f:fc:e5:fb:3a:a9:4b:91:fb:d5:f8:63:94:db:c7:
                    31:42:27:ab:a6:ab:7a:cf:4d:f2:24:40:b9:61:f1:
                    52:7e:20:66:1f:c6:e7:0e:3b:63:d0:53:0d:44:66:
                    05:b7:31:0c:eb:74:e4:bb:b1:39:7d:b9:33:f2:6f:
                    75:6f:15:c0:ab:83:92:e7:14:11:05:a9:d8:b4:22:
                    dc:2a:00:fd:fd:f3:5f:c3:f3:1d:ae:d3:1d:06:5f:
                    30:5d:1b:aa:38:2e:67:4b:40:39:94:18:87:03:b3:
                    91:cb:fd:bb:2e:47:f3:bb:ea:9f:d8:a8:ea:c6:1d:
                    2d:19:00:4f:4c:2d:23:24:52:ec:5c:09:55:6a:67:
                    21:6f:80:a8:81:b2:90:b4:0f:28:97:28:4a:14:fb:
                    ec:01:ea:33:62:60:86:5c:a3:b7:6a:e8:33:da:93:
                    fd:27:94:4f:07:c9:ed:ab:d9:1f:6e:d0:42:d9:5c:
                    ca:37:85:42:cb:8c:ab:af:ad:70:7f:33:a9:b1:38:
                    59:76:be:22:97:ab:4f:17:0c:0f:a0:0d:1e:4d:5a:
                    08:20:a5:44:49:14:81:d2:ab:ef:58:f2:70:29:f7:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:32:E5:D7:98:C7:FB:DA:79:81:7E:66:F0:EA:97:8A:2E:E0:39:B4
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS55720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.132.0/24
                  181.215.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:ff:2f:8d:98:58:90:35:60:c8:e8:da:99:af:b8:e6:50:
         13:c5:30:b7:7f:73:bd:9f:e7:94:91:c3:6e:a9:ba:aa:a3:87:
         45:9b:3d:63:89:b4:1d:2a:06:fa:47:92:ef:8b:d3:e0:a0:4d:
         60:bb:05:c4:22:2d:38:65:6d:de:0e:03:f7:14:84:3d:61:51:
         f5:dd:c2:9a:4b:bc:38:b6:a4:c3:5e:44:09:2a:3b:c7:2c:b4:
         be:fd:2f:e8:27:0e:df:36:bc:ff:7a:00:cd:18:98:69:9e:14:
         64:b7:1b:af:83:c0:58:c3:e8:d8:cd:74:e8:68:2e:14:31:7b:
         1a:80:b7:0e:cd:a6:44:60:ee:12:db:d1:1d:21:0c:1b:ee:d4:
         a1:37:02:06:d6:f6:d5:5c:e1:13:35:fc:ec:a1:8c:e8:24:04:
         8f:09:c2:2a:31:45:aa:16:72:b5:7f:9d:63:ef:07:5a:8f:62:
         cd:80:7b:7f:75:7b:d8:35:15:41:f8:d8:ea:f6:18:c2:6d:b6:
         4d:12:69:ca:85:aa:0d:7a:12:84:9b:47:31:46:d4:43:e2:06:
         52:ba:d2:f1:24:7b:c6:34:09:62:4a:44:70:cb:6d:06:24:04:
         e1:7b:2d:1e:3e:da:2f:2b:45:55:32:92:60:7f:99:0e:86:4c:
         4a:84:aa:ea
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUIseEiBrXTLMNHE/w1DqajtaqQKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMDkxMzMyNDJaFw0yMzAzMDgxMzM3NDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDFBOTA0NzQ1N0Q4RThDQjIz
OEU5ODgwMDhERDM0MTg0ODQ5MDVGOUNCOEZDQTQ3MTAyMEM2NDRGNjJGRkNFNUZC
M0FBOTRCOTFGQkQ1Rjg2Mzk0REJDNzMxNDIyN0FCQTZBQjdBQ0Y0REYyMjQ0MEI5
NjFGMTUyN0UyMDY2MUZDNkU3MEUzQjYzRDA1MzBENDQ2NjA1QjczMTBDRUI3NEU0
QkJCMTM5N0RCOTMzRjI2Rjc1NkYxNUMwQUI4MzkyRTcxNDExMDVBOUQ4QjQyMkRD
MkEwMEZERkRGMzVGQzNGMzFEQUVEMzFEMDY1RjMwNUQxQkFBMzgyRTY3NEI0MDM5
OTQxODg3MDNCMzkxQ0JGREJCMkU0N0YzQkJFQTlGRDhBOEVBQzYxRDJEMTkwMDRG
NEMyRDIzMjQ1MkVDNUMwOTU1NkE2NzIxNkY4MEE4ODFCMjkwQjQwRjI4OTcyODRB
MTRGQkVDMDFFQTMzNjI2MDg2NUNBM0I3NkFFODMzREE5M0ZEMjc5NDRGMDdDOUVE
QUJEOTFGNkVEMDQyRDk1Q0NBMzc4NTQyQ0I4Q0FCQUZBRDcwN0YzM0E5QjEzODU5
NzZCRTIyOTdBQjRGMTcwQzBGQTAwRDFFNEQ1QTA4MjBBNTQ0NDkxNDgxRDJBQkVG
NThGMjcwMjlGN0Y5RkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0akEdFfY6MsjjpiACN00GEhJBfnLj8pHECDGRPYv/OX7OqlLkfvV
+GOU28cxQierpqt6z03yJEC5YfFSfiBmH8bnDjtj0FMNRGYFtzEM63Tku7E5fbkz
8m91bxXAq4OS5xQRBanYtCLcKgD9/fNfw/MdrtMdBl8wXRuqOC5nS0A5lBiHA7OR
y/27Lkfzu+qf2Kjqxh0tGQBPTC0jJFLsXAlVamchb4CogbKQtA8olyhKFPvsAeoz
YmCGXKO3augz2pP9J5RPB8ntq9kfbtBC2VzKN4VCy4yrr61wfzOpsThZdr4il6tP
FwwPoA0eTVoIIKVESRSB0qvvWPJwKff5/wIDAQABo4ICKzCCAicwHQYDVR0OBBYE
FPgy5deYx/vaeYF+ZvDql4ou4Dm0MB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVM1NTcyMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw
DAMEAAW1hAMEALXX9jANBgkqhkiG9w0BAQsFAAOCAQEAhl//L42YWJA1YMjo2pmv
uOZQE8Uwt39zvZ/nlJHDbqm6qqOHRZs9Y4m0HSoG+keS74vT4KBNYLsFxCItOGVt
3g4D9xSEPWFR9d3Cmku8OLakw15ECSo7xyy0vv0v6CcO3za8/3oAzRiYaZ4UZLcb
r4PAWMPo2M106GguFDF7GoC3Ds2mRGDuEtvRHSEMG+7UoTcCBtb21VzhEzX87KGM
6CQEjwnCKjFFqhZytX+dY+8HWo9izYB7f3V72DUVQfjY6vYYwm22TRJpyoWqDXoS
hJtHMUbUQ+IGUrrS8SR7xjQJYkpEcMttBiQE4XstHj7aLytFVTKSYH+ZDoZMSoSq
6g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org