Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS137571.roa
File:                     AS137571.roa (raw, json)
Hash identifier:          vC/GgtB+/KEnlOjubnkpyFNtR+X/YeCjQAIBBkvUiIw=
Subject key identifier:   14:B4:34:23:5A:0F:E6:C1:DD:48:C1:04:78:9C:1C:D0:F2:6E:25:3C
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       7B558A4AA42E7FB3170E849EB0DB384DE971251C
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS137571.roa
Signing time:             Sat 27 Aug 2022 09:49:48 +0000
ROA not before:           Sat 27 Aug 2022 09:44:48 +0000
ROA not after:            Sat 26 Aug 2023 09:49:48 +0000
asID:                     137571
IP address blocks:        191.101.44.0/22 maxlen: 24
                          191.101.45.0/24 maxlen: 24
                          191.101.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:55:8a:4a:a4:2e:7f:b3:17:0e:84:9e:b0:db:38:4d:e9:71:25:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:44:48 2022 GMT
            Not After : Aug 26 09:49:48 2023 GMT
        Subject: CN=14B434235A0FE6C1DD48C104789C1CD0F26E253C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:7b:2f:8f:e3:af:6b:d5:12:a4:59:6b:65:
                    43:92:17:c5:7f:bf:33:2b:ba:3f:13:97:98:a0:86:
                    a8:e0:6b:cb:dc:12:ef:15:24:56:b3:53:1f:ad:bb:
                    12:e1:71:3a:9a:1c:80:84:af:aa:2d:ba:64:53:7c:
                    29:bf:a7:53:0c:76:a3:49:ba:bb:49:95:fa:b9:b0:
                    94:37:65:a6:21:48:c5:c6:ae:46:42:5b:73:b6:ff:
                    0e:79:fa:96:20:05:ff:68:2b:65:8e:6d:04:4b:b5:
                    30:e0:35:4d:35:25:1c:31:0a:e2:2f:ac:56:a8:e2:
                    7a:86:08:e6:66:e3:55:5f:bf:45:76:ec:47:1d:34:
                    34:80:db:9e:3c:12:79:43:20:b6:b2:ad:f0:67:85:
                    00:66:03:cc:40:4d:18:83:64:7f:36:92:50:14:32:
                    de:5e:ce:cb:19:aa:76:2d:2c:55:be:64:d0:02:6a:
                    f4:35:9a:e2:10:56:6c:19:93:26:61:a4:4f:9f:e0:
                    aa:7c:9f:d9:19:64:ef:f5:21:eb:04:62:34:d6:82:
                    8a:b3:30:e4:1f:04:a3:8c:46:95:fb:5e:a0:97:8a:
                    30:81:87:b5:93:a5:3e:c7:cc:a5:7f:d2:78:db:25:
                    d5:5d:1d:ce:65:d5:20:9a:47:bf:c9:02:fe:7b:87:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B4:34:23:5A:0F:E6:C1:DD:48:C1:04:78:9C:1C:D0:F2:6E:25:3C
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS137571.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:3d:26:b2:96:13:4a:ea:a1:ec:6f:b4:b1:02:77:b5:d0:
         69:cd:91:fb:aa:f9:ea:8c:44:7f:45:3f:ac:31:7f:3a:ec:2a:
         45:63:31:5e:97:f6:95:d6:f4:92:f7:2a:ff:01:67:eb:bb:86:
         56:02:a9:64:99:eb:be:94:f7:31:62:b1:7b:e9:3c:37:04:9b:
         58:05:41:dd:3a:56:71:5b:57:79:4b:c3:b0:ca:64:31:12:ef:
         7a:f2:e7:99:9e:fd:1d:91:97:4a:bc:1b:13:cf:87:76:3e:25:
         5a:19:3d:19:4e:cd:01:d9:79:7e:46:c5:a6:e5:d5:db:6e:68:
         5c:27:77:55:25:8d:9e:71:0c:c2:f7:03:b7:d4:3c:d1:7b:ff:
         ac:d1:b0:c2:33:92:fa:bb:8b:86:23:5b:13:bd:e9:45:5e:8d:
         5c:4c:5c:38:6d:da:c9:cf:9f:35:a3:fb:eb:8a:2a:dc:b4:33:
         b0:56:60:9c:f6:b2:0a:00:ed:33:12:cb:47:d8:a7:aa:f1:79:
         35:15:96:51:d1:f3:62:e4:5f:eb:90:e0:09:1d:12:d8:bf:d1:
         01:fe:ac:87:47:bf:1f:8b:f1:2d:b4:82:26:74:7c:ec:c4:d7:
         41:69:5b:4c:a4:6b:e5:f0:20:82:3d:7f:56:ac:c2:98:85:bf:
         4d:60:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org