Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205544.roa
File:                     AS205544.roa (raw, json)
Hash identifier:          27w/hIbAoWSU9lu3jpUlFSNRwKZJDN6mt1G7vMniaJY=
Subject key identifier:   3F:59:06:8B:ED:1B:93:EC:A0:74:5E:71:E9:5C:9C:11:57:AA:12:E4
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       2727C9765B1DD33D38DFD0581E5ED1F904BF0F48
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205544.roa
Signing time:             Sat 27 Aug 2022 09:46:30 +0000
ROA not before:           Sat 27 Aug 2022 09:41:30 +0000
ROA not after:            Sat 26 Aug 2023 09:46:30 +0000
asID:                     205544
IP address blocks:        191.96.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:27:c9:76:5b:1d:d3:3d:38:df:d0:58:1e:5e:d1:f9:04:bf:0f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:41:30 2022 GMT
            Not After : Aug 26 09:46:30 2023 GMT
        Subject: CN=3F59068BED1B93ECA0745E71E95C9C1157AA12E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:9d:e8:ea:96:98:de:d8:a0:05:b4:cf:ab:
                    d1:8b:e4:38:09:15:5d:50:29:ab:43:ad:8d:be:7e:
                    85:24:1a:da:e9:9b:a0:2e:60:05:5f:7d:d3:8f:e2:
                    cd:3c:b8:34:af:9b:14:bc:0c:9a:2f:31:a1:db:5f:
                    33:ee:6e:d2:63:ac:8c:9a:39:ab:b3:e3:7f:26:13:
                    c0:b5:78:4e:0c:dc:9a:45:80:e6:7e:f5:36:4e:19:
                    f8:0f:c4:f3:ad:48:28:fb:5b:02:68:92:57:77:b5:
                    15:13:70:6e:5e:6e:c4:d9:1e:a7:60:7b:29:36:ca:
                    d5:ff:ff:2a:34:20:a1:11:6a:b6:ad:3f:37:4c:d4:
                    14:1f:75:d8:31:73:91:67:f2:8e:18:7d:ca:f3:21:
                    f4:5a:5f:02:72:5c:fb:6a:3c:6e:d0:e5:a3:f2:2d:
                    b8:e7:cc:a7:c4:03:3c:1d:a5:7d:03:f2:d2:19:b5:
                    dd:ff:03:5e:9e:9d:c6:92:3d:05:9b:f4:15:3c:f4:
                    99:f8:b4:a3:ab:85:88:a6:1a:85:aa:bf:bc:09:69:
                    7e:fe:a0:e1:61:13:5b:e6:78:5d:1b:c6:dd:ed:c9:
                    0d:0d:f7:02:99:87:77:8b:25:84:2c:20:49:f5:23:
                    e8:42:73:39:03:12:23:e1:c5:3e:dc:22:09:cf:f4:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:06:8B:ED:1B:93:EC:A0:74:5E:71:E9:5C:9C:11:57:AA:12:E4
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205544.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d5:72:33:ac:b9:ae:df:57:96:17:41:ce:54:2f:ef:ba:7c:
         be:13:9d:6b:41:bc:17:15:7d:66:1b:d1:25:74:18:f8:14:cc:
         19:dd:2d:db:40:fe:0e:19:ea:04:6a:19:0c:17:b2:ca:e9:86:
         6d:e1:10:65:2e:c8:e9:08:47:c1:ff:21:55:65:9a:cc:79:52:
         8a:5f:5d:3d:d0:8b:6d:75:8e:40:b2:81:b1:c9:78:72:60:1f:
         a4:16:6d:64:f2:ab:cd:da:65:95:b0:7b:b6:00:77:e4:01:f4:
         9f:a5:6e:0f:c6:6a:12:b6:59:f7:35:3e:a8:19:3e:cb:8d:e4:
         cb:e7:ab:3c:22:c4:eb:22:98:1e:e8:cd:90:47:ca:05:50:5c:
         f4:09:0d:d1:1d:5a:37:6e:2c:73:b2:d1:3d:47:0f:c3:2c:63:
         b9:d5:c5:9c:5e:db:25:5f:e0:47:2f:c6:1d:7a:e8:62:07:ba:
         3a:14:41:f5:7d:51:5c:e6:fa:9d:cb:06:cd:f9:4e:40:b4:3f:
         f6:cf:ef:76:14:1b:d7:a0:66:c7:71:cf:41:76:13:94:ad:f6:
         09:04:0a:39:63:fe:88:16:8d:0a:d3:a0:d1:89:23:a5:ba:90:
         66:e8:2e:90:b7:93:96:7c:6a:44:dd:21:df:70:52:93:82:3a:
         9a:d3:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org