Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          7D73offxWZBWbwXba8s39oqDXaQyrtF3PJdMn9IT8cM=
Subject key identifier:   AA:7D:9F:77:AC:92:0A:A7:6F:28:28:69:26:71:E2:C9:E3:59:DB:09
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       025F985ADE5B52DF0074C88D184C80373555BF27
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS16276.roa
Signing time:             Tue 15 Nov 2022 17:00:27 +0000
ROA not before:           Tue 15 Nov 2022 16:55:27 +0000
ROA not after:            Tue 14 Nov 2023 17:00:27 +0000
asID:                     16276
IP address blocks:        194.110.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:98:5a:de:5b:52:df:00:74:c8:8d:18:4c:80:37:35:55:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 15 16:55:27 2022 GMT
            Not After : Nov 14 17:00:27 2023 GMT
        Subject: CN=AA7D9F77AC920AA76F2828692671E2C9E359DB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:d5:58:c3:72:2e:d1:90:f9:e5:8f:1b:75:
                    72:67:f7:9f:11:82:a0:58:1c:21:9a:d7:72:c9:87:
                    8c:81:2c:e8:84:ed:08:9d:07:88:00:aa:cd:26:5f:
                    01:cf:1a:51:57:d8:20:e4:d3:bc:08:de:ca:18:c3:
                    68:83:c9:16:97:bd:7d:71:4d:27:3b:81:7d:b3:a2:
                    4d:b5:8e:68:e8:31:db:06:71:5a:3c:b4:c6:af:8a:
                    63:10:8c:74:a4:b8:d1:6a:79:3a:d3:9c:82:62:64:
                    8d:68:e6:58:10:60:54:28:96:0e:fd:9d:3e:f2:a8:
                    79:e0:3c:f3:65:86:63:57:33:4c:dd:e7:67:8e:f9:
                    72:b5:07:df:a8:8b:6b:66:09:e9:e3:b6:f1:6f:3d:
                    bb:5e:af:71:c0:f5:15:00:3a:01:82:4e:5c:e7:7b:
                    2d:ae:3e:e3:6b:9c:9f:d8:1a:46:d2:4a:a7:b7:57:
                    f9:27:8b:06:7c:8b:83:e7:f9:07:99:28:49:6c:33:
                    ea:b1:78:ca:a5:44:01:7e:59:80:60:1b:60:ec:53:
                    a3:01:b4:a1:f0:38:24:d8:49:aa:00:3c:98:15:a7:
                    0e:3c:4d:c8:b8:38:27:b6:c4:96:35:46:de:98:1f:
                    a5:11:c1:1b:b2:ee:9b:41:ca:df:48:00:1a:d6:ac:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7D:9F:77:AC:92:0A:A7:6F:28:28:69:26:71:E2:C9:E3:59:DB:09
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:b3:c7:a6:98:32:a2:8f:37:88:20:f3:9f:56:d9:34:60:
         4e:fc:06:20:95:7f:04:05:b3:e9:26:2d:88:a6:66:6f:66:19:
         ec:f2:63:11:35:90:e4:b0:9c:43:0f:c4:60:58:b1:5c:14:14:
         a6:cf:b6:5f:a0:71:dc:f1:84:f3:36:64:88:22:17:d9:4b:68:
         4a:25:98:3a:08:8d:40:57:97:67:81:f6:c9:b4:7b:7b:de:6e:
         f4:5a:53:5b:04:78:d4:c0:71:3a:f8:53:3f:3d:45:02:ab:6a:
         54:a1:ca:26:1d:9e:36:b4:75:b8:0e:38:0d:5d:5e:ff:4b:28:
         35:5c:14:b8:4b:1d:60:03:2c:0a:6d:c8:ef:24:42:b8:45:99:
         a5:c3:6d:c4:9c:a3:9e:a7:56:e5:17:15:55:48:25:05:f0:a1:
         67:02:8f:af:76:1a:d8:a8:5b:bc:5f:75:5c:c1:dc:e7:11:2f:
         0d:7e:2e:2e:4e:81:b8:76:89:fa:51:f0:7f:51:a9:f6:fe:3c:
         10:69:6e:05:a8:d3:a0:99:49:ab:f1:51:29:a4:38:a2:2e:17:
         86:77:7b:78:b3:93:9e:87:0a:8f:64:0b:52:dc:a7:19:97:4f:
         c5:9b:3a:1c:83:c6:f9:72:b2:a7:74:3e:8a:4d:9f:5b:c6:6a:
         f4:27:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org