Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          SivGxthDLYs+1q5qkFL2c130f3MvUquhW2WLv+NhN+U=
Subject key identifier:   7F:2C:54:8C:C4:B3:CE:DC:43:16:03:B4:21:2B:F8:A5:81:2B:6D:C4
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       2C26A377885696385C620ABE2C6C3649399386B3
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS0.roa
Signing time:             Fri 25 Nov 2022 16:22:09 +0000
ROA not before:           Fri 25 Nov 2022 16:17:09 +0000
ROA not after:            Fri 24 Nov 2023 16:22:09 +0000
asID:                     0
IP address blocks:        191.96.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:26:a3:77:88:56:96:38:5c:62:0a:be:2c:6c:36:49:39:93:86:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 16:17:09 2022 GMT
            Not After : Nov 24 16:22:09 2023 GMT
        Subject: CN=7F2C548CC4B3CEDC431603B4212BF8A5812B6DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:06:40:fc:a6:54:17:ba:c1:da:65:60:58:
                    52:18:37:00:86:3d:d4:d9:ab:c6:82:ae:7c:b0:e6:
                    54:b5:95:cf:4b:65:1d:7b:3b:a3:30:c4:69:87:24:
                    aa:04:b3:a4:57:fc:63:4b:88:5e:4c:43:93:cb:77:
                    4e:78:b7:34:0a:64:ff:62:8f:d1:33:90:d5:98:ae:
                    37:60:f1:27:3a:e8:47:80:cf:f5:79:10:b7:57:8b:
                    de:51:ba:fa:50:5c:e0:a9:bb:c7:de:e3:ef:90:8c:
                    1c:ac:f1:da:cd:9d:6e:c0:49:49:41:64:43:e3:1d:
                    58:46:ac:5c:49:e5:c9:49:cc:e7:d6:2a:c3:27:e7:
                    e1:a1:69:da:7d:31:2d:72:97:b9:d7:90:1d:ce:52:
                    06:30:92:db:5e:01:59:81:52:1a:8c:d8:bb:17:bf:
                    fb:51:d8:9c:63:ad:18:f1:65:f6:2e:2f:d7:64:33:
                    b0:3a:c3:a5:43:5c:2b:4a:d6:98:98:df:38:63:e0:
                    83:20:6a:f5:b9:a0:d3:72:4a:ad:f7:bc:df:4c:5a:
                    08:82:cb:18:a2:eb:a1:61:03:0b:2c:2b:d6:13:28:
                    e0:a0:6c:2a:9a:e0:09:58:3b:e3:05:64:c0:50:93:
                    6f:3d:48:3f:1d:39:a4:6a:de:da:1d:78:c4:b9:d7:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:54:8C:C4:B3:CE:DC:43:16:03:B4:21:2B:F8:A5:81:2B:6D:C4
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:a1:79:8e:17:01:85:1c:59:6c:67:9b:81:d8:35:d2:c4:64:
         5b:79:5b:3a:9a:fb:53:ff:30:ba:ba:cf:a9:e0:06:a1:9d:b8:
         f2:01:23:b5:df:25:b1:bd:4d:cf:e1:6d:21:d0:82:9e:24:52:
         d3:7c:85:a8:66:34:2b:f9:d3:ac:24:f3:b9:cf:40:bd:dd:73:
         48:cb:2a:9c:b0:6a:a6:a4:2a:f7:49:f2:15:22:2b:30:e8:a4:
         06:78:98:17:04:63:75:65:36:24:d9:3e:24:54:54:ba:a0:5f:
         4d:15:8d:41:92:79:b0:33:4f:8f:d8:11:82:0c:f2:f5:e5:d6:
         18:93:43:33:0d:03:42:bd:6e:cc:35:ef:5c:64:4a:11:aa:8a:
         02:07:16:dc:7a:61:4e:92:47:bd:06:ec:04:c4:2d:ac:c6:e7:
         5e:39:3f:fa:08:04:7c:36:31:47:f5:3f:79:3f:58:1b:70:c0:
         d1:f9:13:fe:75:32:bc:21:55:83:e4:be:a5:29:3d:66:fd:a9:
         4e:ac:33:37:65:09:5f:39:a9:e6:f4:47:0a:95:0c:90:09:e0:
         d8:87:1e:c2:c0:57:1c:8d:1b:24:78:6d:a2:a5:77:24:71:04:
         85:96:a1:cb:21:28:b3:3c:90:67:6f:dc:04:cb:11:97:2d:b4:
         73:f5:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org