Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207279.roa
File:                     AS207279.roa (raw, json)
Hash identifier:          urx5vH9SYksDYvC33ULgLSlMOjG44IzFF+6TheM3R0o=
Subject key identifier:   37:5C:8B:44:F5:BB:CA:CA:CA:D1:60:FE:07:1A:9C:50:30:86:D2:00
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       057696CBD53E1D87F129371FF4DE3404BDA31CBA
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207279.roa
Signing time:             Fri 25 Nov 2022 00:17:25 +0000
ROA not before:           Fri 25 Nov 2022 00:12:25 +0000
ROA not after:            Fri 24 Nov 2023 00:17:25 +0000
asID:                     207279
IP address blocks:        181.215.33.0/24 maxlen: 24
                          191.96.98.0/24 maxlen: 24
                          191.101.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:76:96:cb:d5:3e:1d:87:f1:29:37:1f:f4:de:34:04:bd:a3:1c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 00:12:25 2022 GMT
            Not After : Nov 24 00:17:25 2023 GMT
        Subject: CN=375C8B44F5BBCACACAD160FE071A9C503086D200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:ea:e1:3d:90:b1:40:c9:f4:a0:3c:60:bb:
                    e8:f1:fd:6a:c5:b4:0c:8e:7c:2f:9d:04:d4:6e:4b:
                    cb:da:b4:3c:13:df:66:de:cc:b4:c8:21:6a:84:3f:
                    c2:93:df:e4:91:9b:73:79:dc:5e:f8:58:09:58:0b:
                    f0:dd:a0:c7:38:6e:d4:7a:d2:1d:e8:a6:c5:84:50:
                    49:e0:a9:46:a6:56:22:eb:94:27:4e:3c:ea:36:81:
                    a1:6a:ee:dd:c7:ae:27:1d:dd:58:86:77:d8:7c:18:
                    ab:3c:cc:c7:44:e6:99:a0:62:50:61:25:50:e7:43:
                    a1:3e:26:a7:5e:ed:86:0c:17:5e:97:72:af:09:cb:
                    2c:2a:52:2c:70:52:e0:fd:3d:4b:9e:4f:8e:ef:99:
                    8a:fb:fb:bb:ed:30:0b:01:58:3b:1c:80:21:75:fe:
                    2a:cf:0a:3d:ec:3b:ca:3b:75:66:b9:20:8e:f6:3a:
                    21:07:dc:d6:51:df:53:4a:fe:22:b6:7a:ed:48:7f:
                    55:fc:59:5a:48:41:79:8d:8d:be:7c:3e:2f:c4:fa:
                    fe:90:6b:f1:3b:34:76:37:02:11:a6:19:71:b8:09:
                    90:ef:cb:4d:d5:ae:0a:8a:2a:c5:b2:b4:b9:50:7c:
                    b0:fd:df:56:0e:02:26:2d:26:8a:1a:e5:8e:64:7a:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5C:8B:44:F5:BB:CA:CA:CA:D1:60:FE:07:1A:9C:50:30:86:D2:00
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207279.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.33.0/24
                  191.96.98.0/24
                  191.101.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:83:06:a8:25:53:4e:23:ae:0e:c3:08:c5:ad:6b:df:8e:34:
         22:83:7c:cc:f0:48:19:e2:7b:7e:72:f2:75:47:b8:8a:31:d4:
         79:3e:f3:82:f8:63:7a:b0:1b:88:f9:dd:d6:6a:9e:0e:6d:f7:
         03:de:32:f0:03:74:83:d0:f0:f5:b4:5f:af:71:2c:82:53:b6:
         c2:44:3c:90:6d:4a:01:98:e9:6e:8b:2b:e6:a9:28:52:d9:6e:
         d5:0f:72:26:fa:eb:96:5e:9f:10:14:35:73:b9:89:d8:f3:34:
         ca:e9:41:9f:fc:2d:90:07:f3:71:5d:f9:71:73:4c:90:1c:5b:
         46:e0:34:62:fd:c6:d6:a5:56:96:91:fa:ca:21:36:27:9e:b6:
         93:a1:fc:cc:38:1b:9e:65:6b:63:7f:86:f3:7c:53:b0:1a:80:
         a9:06:47:c9:98:38:56:e3:71:8f:6d:8d:ff:32:b1:64:72:c3:
         f5:37:6a:42:41:ca:8d:e4:92:86:ba:fa:4a:b2:82:27:66:c7:
         bd:c1:ae:fe:2c:fc:3a:83:4d:92:33:cd:1b:6b:bd:35:11:98:
         1c:bd:c8:65:c0:41:5f:a9:5a:dc:4c:a9:ca:70:cf:7f:af:70:
         92:9c:25:49:2f:b1:9f:34:f8:6d:d8:d9:e8:3b:32:f9:5f:c8:
         6b:9d:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org