Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          LZ1k3QsP+TBynKXEqyBbQgILsl/GicEfVXj4mExMDgA=
Subject key identifier:   65:DB:C2:AD:C5:DB:1C:3C:B0:04:AD:EB:35:9E:29:34:75:1E:BC:C8
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       21CF12B59150BD6DE1EF54FC223CE891E727EBE7
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS64267.roa
Signing time:             Fri 10 Jun 2022 20:51:58 +0000
ROA not before:           Fri 10 Jun 2022 20:46:58 +0000
ROA not after:            Fri 09 Jun 2023 20:51:58 +0000
asID:                     64267
IP address blocks:        179.61.225.0/24 maxlen: 24
                          181.214.229.0/24 maxlen: 24
                          185.158.105.0/24 maxlen: 24
                          185.158.107.0/24 maxlen: 24
                          185.158.132.0/24 maxlen: 24
                          185.158.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cf:12:b5:91:50:bd:6d:e1:ef:54:fc:22:3c:e8:91:e7:27:eb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 10 20:46:58 2022 GMT
            Not After : Jun  9 20:51:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:48:94:42:d6:41:79:38:f4:40:7d:ee:10:
                    75:9b:0b:96:89:a0:0e:d3:a2:de:07:29:06:54:01:
                    0d:fd:df:be:89:08:42:ca:41:93:0d:ad:01:47:57:
                    99:ff:ad:e7:d0:36:26:cf:1f:9d:cf:e8:af:9c:60:
                    63:a1:20:8d:ef:0f:94:db:47:93:5d:a5:f1:1c:62:
                    4a:6b:d0:a6:39:64:67:f1:a7:0c:2f:f1:4d:48:2e:
                    93:77:94:5a:25:70:5b:e2:4b:95:c8:d0:1f:3c:40:
                    23:0b:15:b5:e1:92:88:a7:26:ca:cb:9f:b2:49:bc:
                    a0:96:45:02:66:a4:05:88:ca:0b:86:77:a2:f7:1c:
                    d7:d8:dc:ee:d0:11:2e:6c:2b:8f:ef:b0:83:ea:5a:
                    e0:2a:70:21:59:b5:e2:4a:16:23:27:2b:10:e3:19:
                    16:1e:7b:f0:5e:05:19:c1:9d:91:ca:6e:60:71:7a:
                    ff:67:02:e1:06:f7:13:e4:84:cf:b3:bb:fc:13:5b:
                    76:8f:60:c0:c3:94:39:c8:79:7e:1d:ba:26:0b:bd:
                    45:cc:95:fa:d0:76:b0:96:a0:31:35:5e:7e:5e:e6:
                    eb:2a:45:8e:c6:9a:2c:aa:79:7c:83:60:bd:48:1c:
                    31:0c:7e:c9:88:a1:cd:97:b3:3a:e1:20:03:c8:d9:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:C2:AD:C5:DB:1C:3C:B0:04:AD:EB:35:9E:29:34:75:1E:BC:C8
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.225.0/24
                  181.214.229.0/24
                  185.158.105.0/24
                  185.158.107.0/24
                  185.158.132.0/24
                  185.158.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:51:8e:77:a8:b3:d8:a0:fd:2b:cd:df:f3:17:b5:70:8c:d4:
         91:23:b0:77:ac:04:45:5e:79:7d:b8:26:6f:f5:94:f0:4c:a4:
         b4:7b:d8:ba:68:b0:5b:89:3a:5c:5c:e7:b5:bc:96:d3:04:84:
         6d:75:81:03:09:d6:9f:bd:f3:1c:8d:3e:7b:5c:54:ab:7f:d8:
         51:30:0e:68:4f:f1:20:e0:97:54:ff:c9:2c:ef:ff:9d:37:66:
         78:63:54:34:7d:c2:a4:5f:45:10:bd:ba:7e:bb:c2:8a:95:44:
         48:79:a4:98:77:95:df:c6:cc:a0:04:51:b7:75:2d:15:86:9e:
         8c:f4:6b:66:f3:ad:22:62:89:0a:1e:57:00:64:fc:12:9f:4e:
         f2:34:03:78:32:aa:4b:bb:7d:57:b6:7e:2c:8b:b9:3f:72:a7:
         92:0f:d0:14:86:2b:a6:61:64:81:14:45:ae:92:91:09:e4:64:
         e2:2e:6e:98:03:3d:d1:0d:61:a3:32:be:5b:19:b1:c3:b9:e5:
         dc:be:99:e0:a5:a6:4c:ac:c4:13:1d:76:40:8b:c8:3e:73:df:
         ba:5a:58:2a:ce:a9:4b:25:cf:a3:03:8a:41:c3:71:c8:61:80:
         15:90:ea:3c:f8:71:c4:77:5f:c7:01:60:ab:d2:35:ba:d2:fd:
         f3:c2:82:80
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIUIc8StZFQvW3h71T8Ijzokecn6+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjA2MTAyMDQ2NThaFw0yMzA2MDkyMDUxNThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFFMzQ4OTQ0MkQ2NDE3OTM4
RjQ0MDdERUUxMDc1OUIwQjk2ODlBMDBFRDNBMkRFMDcyOTA2NTQwMTBERkRERkJF
ODkwODQyQ0E0MTkzMERBRDAxNDc1Nzk5RkZBREU3RDAzNjI2Q0YxRjlEQ0ZFOEFG
OUM2MDYzQTEyMDhERUYwRjk0REI0NzkzNURBNUYxMUM2MjRBNkJEMEE2Mzk2NDY3
RjFBNzBDMkZGMTRENDgyRTkzNzc5NDVBMjU3MDVCRTI0Qjk1QzhEMDFGM0M0MDIz
MEIxNUI1RTE5Mjg4QTcyNkNBQ0I5RkIyNDlCQ0EwOTY0NTAyNjZBNDA1ODhDQTBC
ODY3N0EyRjcxQ0Q3RDhEQ0VFRDAxMTJFNkMyQjhGRUZCMDgzRUE1QUUwMkE3MDIx
NTlCNUUyNEExNjIzMjcyQjEwRTMxOTE2MUU3QkYwNUUwNTE5QzE5RDkxQ0E2RTYw
NzE3QUZGNjcwMkUxMDZGNzEzRTQ4NENGQjNCQkZDMTM1Qjc2OEY2MEMwQzM5NDM5
Qzg3OTdFMURCQTI2MEJCRDQ1Q0M5NUZBRDA3NkIwOTZBMDMxMzU1RTdFNUVFNkVC
MkE0NThFQzY5QTJDQUE3OTdDODM2MEJENDgxQzMxMEM3RUM5ODhBMUNEOTdCMzNB
RTEyMDAzQzhEOUM0N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuuNIlELWQXk49EB97hB1mwuWiaAO06LeBykGVAEN/d++iQhCykGT
Da0BR1eZ/63n0DYmzx+dz+ivnGBjoSCN7w+U20eTXaXxHGJKa9CmOWRn8acML/FN
SC6Td5RaJXBb4kuVyNAfPEAjCxW14ZKIpybKy5+ySbyglkUCZqQFiMoLhnei9xzX
2Nzu0BEubCuP77CD6lrgKnAhWbXiShYjJysQ4xkWHnvwXgUZwZ2Rym5gcXr/ZwLh
BvcT5ITPs7v8E1t2j2DAw5Q5yHl+HbomC71FzJX60HawlqAxNV5+XubrKkWOxpos
qnl8g2C9SBwxDH7JiKHNl7M64SADyNnEfQIDAQABo4ICQzCCAj8wHQYDVR0OBBYE
FGXbwq3F2xw8sASt6zWeKTR1HrzIMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVM2NDI2Ny5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEw
JAMEALM94QMEALXW5QMEALmeaQMEALmeawMEALmehAMEALmelzANBgkqhkiG9w0B
AQsFAAOCAQEArVGOd6iz2KD9K83f8xe1cIzUkSOwd6wERV55fbgmb/WU8EyktHvY
umiwW4k6XFzntbyW0wSEbXWBAwnWn73zHI0+e1xUq3/YUTAOaE/xIOCXVP/JLO//
nTdmeGNUNH3CpF9FEL26frvCipVESHmkmHeV38bMoARRt3UtFYaejPRrZvOtImKJ
Ch5XAGT8Ep9O8jQDeDKqS7t9V7Z+LIu5P3Knkg/QFIYrpmFkgRRFrpKRCeRk4i5u
mAM90Q1hozK+Wxmxw7nl3L6Z4KWmTKzEEx12QIvIPnPfulpYKs6pSyXPowOKQcNx
yGGAFZDqPPhxxHdfxwFgq9I1utL988KCgA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org