Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          OIK4STmZOS9p7wZJb/d/rWuATM5VbiM5qDKlbhxwDxo=
Subject key identifier:   F8:46:19:1B:AC:2F:8F:41:10:08:F9:EC:C1:E8:04:D5:5F:E8:46:15
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5D3F5E386898F3B90C77222A9DC01A1C9F6A17EC
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS62240.roa
Signing time:             Wed 09 Mar 2022 13:37:45 +0000
ROA not before:           Wed 09 Mar 2022 13:32:45 +0000
ROA not after:            Wed 08 Mar 2023 13:37:45 +0000
asID:                     62240
IP address blocks:        45.89.242.0/24 maxlen: 24
                          191.96.90.0/24 maxlen: 24
                          191.96.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3f:5e:38:68:98:f3:b9:0c:77:22:2a:9d:c0:1a:1c:9f:6a:17:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:45 2022 GMT
            Not After : Mar  8 13:37:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:f5:ca:fb:ef:23:8a:9d:af:0b:aa:6d:5a:
                    ca:34:04:53:0e:d8:3e:67:67:e4:0f:db:1b:d5:8b:
                    05:60:d2:bf:0a:62:d8:f5:9e:12:e7:80:47:32:b9:
                    53:af:3e:26:ad:61:22:96:b2:e7:74:7d:72:bd:14:
                    a9:40:fa:31:50:47:b5:3d:41:d7:95:55:a2:40:61:
                    0c:2d:b3:e2:f2:3b:d9:d0:0b:29:4c:bb:0c:21:44:
                    54:b3:f5:95:8d:f4:c9:ee:9c:f0:cf:b4:50:b8:5e:
                    82:91:54:03:92:15:75:f0:36:6c:8f:da:89:52:f0:
                    b0:dd:a1:f0:0f:58:14:03:d7:50:bd:2a:32:48:7e:
                    a0:53:93:02:cc:cc:fc:2e:b4:cf:b6:5e:a0:f6:fe:
                    2f:32:db:75:6a:c1:c6:71:b2:22:4e:ec:8b:67:f7:
                    39:7b:b0:c1:dc:a4:c6:47:f2:3f:da:50:05:5b:06:
                    83:85:90:82:5f:77:41:93:41:f5:df:72:6a:90:23:
                    fc:96:c7:59:aa:9a:87:fa:a3:77:8d:ce:c0:29:91:
                    8f:de:9a:16:1c:1a:36:77:e1:74:92:cb:35:ef:7e:
                    11:6f:c3:e3:71:6e:36:79:19:a0:6b:a7:bc:9c:22:
                    58:8c:4e:66:0f:f7:de:3d:be:14:fd:8b:b4:c0:95:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:46:19:1B:AC:2F:8F:41:10:08:F9:EC:C1:E8:04:D5:5F:E8:46:15
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.242.0/24
                  191.96.90.0/24
                  191.96.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ce:df:c6:09:67:e6:4e:4a:b5:fa:ae:ff:1b:49:f9:2b:9e:
         bd:d1:33:3d:19:42:0d:25:b4:28:3b:3f:a3:8a:9d:09:3f:9e:
         e9:37:fd:14:d4:6f:c7:79:bc:d9:bc:39:eb:dd:ce:a7:51:5b:
         79:61:01:de:23:df:f1:a6:f9:f1:c3:21:9d:32:7b:6c:97:75:
         7b:c7:34:bf:53:aa:ee:bc:b2:01:ff:5d:ed:af:03:84:2f:33:
         d1:1a:85:31:c6:c2:14:14:d9:1f:a7:f5:5a:4b:71:22:15:7f:
         8c:ba:e1:a6:3c:ce:e9:d1:11:ff:c1:ad:c1:98:12:8b:ac:49:
         64:6a:e2:e6:a8:7c:7c:f0:a5:88:73:86:13:17:86:c4:0c:84:
         9f:2a:12:e8:80:e3:62:32:b3:bb:91:d9:7f:05:97:d3:5a:65:
         20:39:39:ce:31:89:97:b7:f5:d0:5e:9d:b9:a2:6a:a5:68:67:
         97:4f:39:b5:9b:e8:d0:21:f0:48:b9:2f:69:71:21:f1:36:84:
         56:f9:d9:11:42:87:66:4b:0a:0b:7e:95:c9:a1:3e:64:65:f5:
         28:e5:ab:83:a8:80:a1:45:6d:87:2e:b5:c6:61:fd:a3:f9:48:
         33:46:87:8e:d1:b3:68:a6:a3:a8:7c:54:72:6e:ab:f0:1c:84:
         0a:90:d7:84
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUXT9eOGiY87kMdyIqncAaHJ9qF+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMDkxMzMyNDVaFw0yMzAzMDgxMzM3NDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU2REY1Q0FGQkVGMjM4QTlE
QUYwQkFBNkQ1QUNBMzQwNDUzMEVEODNFNjc2N0U0MEZEQjFCRDU4QjA1NjBEMkJG
MEE2MkQ4RjU5RTEyRTc4MDQ3MzJCOTUzQUYzRTI2QUQ2MTIyOTZCMkU3NzQ3RDcy
QkQxNEE5NDBGQTMxNTA0N0I1M0Q0MUQ3OTU1NUEyNDA2MTBDMkRCM0UyRjIzQkQ5
RDAwQjI5NENCQjBDMjE0NDU0QjNGNTk1OERGNEM5RUU5Q0YwQ0ZCNDUwQjg1RTgy
OTE1NDAzOTIxNTc1RjAzNjZDOEZEQTg5NTJGMEIwRERBMUYwMEY1ODE0MDNENzUw
QkQyQTMyNDg3RUEwNTM5MzAyQ0NDQ0ZDMkVCNENGQjY1RUEwRjZGRTJGMzJEQjc1
NkFDMUM2NzFCMjIyNEVFQzhCNjdGNzM5N0JCMEMxRENBNEM2NDdGMjNGREE1MDA1
NUIwNjgzODU5MDgyNUY3NzQxOTM0MUY1REY3MjZBOTAyM0ZDOTZDNzU5QUE5QTg3
RkFBMzc3OERDRUMwMjk5MThGREU5QTE2MUMxQTM2NzdFMTc0OTJDQjM1RUY3RTEx
NkZDM0UzNzE2RTM2NzkxOUEwNkJBN0JDOUMyMjU4OEM0RTY2MEZGN0RFM0RCRTE0
RkQ4QkI0QzA5NUI3MTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvm31yvvvI4qdrwuqbVrKNARTDtg+Z2fkD9sb1YsFYNK/CmLY9Z4S
54BHMrlTrz4mrWEilrLndH1yvRSpQPoxUEe1PUHXlVWiQGEMLbPi8jvZ0AspTLsM
IURUs/WVjfTJ7pzwz7RQuF6CkVQDkhV18DZsj9qJUvCw3aHwD1gUA9dQvSoySH6g
U5MCzMz8LrTPtl6g9v4vMtt1asHGcbIiTuyLZ/c5e7DB3KTGR/I/2lAFWwaDhZCC
X3dBk0H133JqkCP8lsdZqpqH+qN3jc7AKZGP3poWHBo2d+F0kss1734Rb8PjcW42
eRmga6e8nCJYjE5mD/fePb4U/Yu0wJW3GQIDAQABo4ICMTCCAi0wHQYDVR0OBBYE
FPhGGRusL49BEAj57MHoBNVf6EYVMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVM2MjI0MC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw
EgMEAC1Z8gMEAL9gWgMEAL9ggDANBgkqhkiG9w0BAQsFAAOCAQEAZM7fxgln5k5K
tfqu/xtJ+SuevdEzPRlCDSW0KDs/o4qdCT+e6Tf9FNRvx3m82bw5693Op1FbeWEB
3iPf8ab58cMhnTJ7bJd1e8c0v1Oq7ryyAf9d7a8DhC8z0RqFMcbCFBTZH6f1Wktx
IhV/jLrhpjzO6dER/8GtwZgSi6xJZGri5qh8fPCliHOGExeGxAyEnyoS6IDjYjKz
u5HZfwWX01plIDk5zjGJl7f10F6duaJqpWhnl085tZvo0CHwSLkvaXEh8TaEVvnZ
EUKHZksKC36VyaE+ZGX1KOWrg6iAoUVthy61xmH9o/lIM0aHjtGzaKajqHxUcm6r
8ByECpDXhA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org