Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207588.roa
File:                     AS207588.roa (raw, json)
Hash identifier:          9e71M9rhOKr0kW/10Z3kIC/wBL0mzuLr7z8OgHhcPqs=
Subject key identifier:   22:50:A8:A6:2C:63:73:8D:96:6E:BC:7F:81:44:3D:69:F3:85:66:13
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       6859FC276F457826182B46E4DE011D6978A6260B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207588.roa
Signing time:             Sat 27 Aug 2022 09:39:48 +0000
ROA not before:           Sat 27 Aug 2022 09:34:48 +0000
ROA not after:            Sat 26 Aug 2023 09:39:48 +0000
asID:                     207588
IP address blocks:        191.101.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:59:fc:27:6f:45:78:26:18:2b:46:e4:de:01:1d:69:78:a6:26:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:34:48 2022 GMT
            Not After : Aug 26 09:39:48 2023 GMT
        Subject: CN=2250A8A62C63738D966EBC7F81443D69F3856613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:da:b4:b1:2d:92:a1:af:1b:15:4f:8e:de:
                    89:f0:23:64:88:7d:de:c9:17:ba:dc:64:1c:b0:14:
                    a1:cb:a7:3c:8e:8d:1d:0e:b9:9b:e6:71:90:50:41:
                    ef:65:4b:12:6d:08:2a:1d:9a:5b:2d:6f:0b:3e:4b:
                    1a:e9:ba:4a:30:d2:40:a6:c5:bf:1b:b0:ab:77:eb:
                    4a:cc:e6:9f:ca:2c:4e:e4:ab:cb:da:17:1b:0b:9e:
                    6b:90:19:b5:b7:12:fc:af:3b:8b:ce:25:51:1f:3d:
                    3b:06:3c:f7:70:62:55:cb:b3:74:4f:db:f5:db:51:
                    e1:21:07:00:48:58:58:5c:a9:77:e2:05:9a:00:cf:
                    a8:1b:69:fe:50:0a:ae:c0:58:bf:51:e1:9e:c2:b4:
                    c2:a0:81:e9:ba:0b:9a:f5:a8:1f:70:0a:6b:e6:88:
                    59:85:63:5b:3e:dd:35:71:09:bf:9e:b5:7a:44:91:
                    b8:6e:ae:db:0f:69:a5:27:ca:91:a0:af:14:62:60:
                    68:18:6e:c8:ca:4e:e2:b1:32:af:c6:70:2e:d5:3f:
                    b2:56:c2:39:eb:38:e2:e2:e0:8e:6a:70:77:30:1b:
                    3a:a5:49:dd:af:1c:7f:96:9b:28:a9:bc:b7:6c:ea:
                    d5:4d:78:25:3d:2f:e0:63:03:d4:3e:2f:1f:f5:4f:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:A8:A6:2C:63:73:8D:96:6E:BC:7F:81:44:3D:69:F3:85:66:13
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207588.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:45:3a:d0:f4:c6:40:32:3b:70:78:18:c3:51:13:68:6f:
         a4:0b:b4:71:ba:c2:d9:02:ce:11:cf:21:d1:8b:23:4f:af:22:
         cd:83:3b:76:bb:c9:c1:88:5a:4e:96:be:db:79:f0:5d:f1:e0:
         a3:87:b2:8a:70:08:9c:c7:28:e9:37:80:56:dc:34:5a:3a:da:
         77:5c:73:14:f8:ad:6f:a0:71:94:da:e3:76:de:3a:fd:e3:cb:
         56:5d:9f:4d:68:1d:50:ab:29:b6:02:57:8a:7d:09:dc:02:87:
         2c:6e:59:14:f1:62:06:2e:aa:15:2d:8e:3a:cb:62:65:f4:9f:
         a8:c8:e9:fc:78:44:e2:e9:a8:49:44:6a:ea:56:48:cb:22:18:
         58:91:c0:60:f6:e1:07:9f:47:b8:a2:ac:f9:0d:f4:f9:3b:a4:
         48:4d:f7:c9:88:ca:54:48:db:80:f7:13:c1:bd:21:69:24:71:
         b8:76:b9:c4:0d:a8:19:32:16:7b:32:16:0f:c2:46:d1:b4:e8:
         29:58:02:83:75:f6:cc:61:5c:8f:a3:c1:9a:d7:c9:2c:c8:71:
         84:e7:43:48:2f:e0:33:25:cc:fd:15:64:19:ae:b5:70:50:48:
         47:4b:51:2c:0f:b2:d9:35:2b:28:60:97:26:3a:48:1e:ae:a5:
         6c:0c:6e:7d
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUaFn8J29FeCYYK0bk3gEdaXimJgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTM0NDhaFw0yMzA4MjYwOTM5NDhaMDMxMTAvBgNV
BAMTKDIyNTBBOEE2MkM2MzczOEQ5NjZFQkM3RjgxNDQzRDY5RjM4NTY2MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY9q0sS2Soa8bFU+O3onwI2SI
fd7JF7rcZBywFKHLpzyOjR0OuZvmcZBQQe9lSxJtCCodmlstbws+Sxrpukow0kCm
xb8bsKt360rM5p/KLE7kq8vaFxsLnmuQGbW3EvyvO4vOJVEfPTsGPPdwYlXLs3RP
2/XbUeEhBwBIWFhcqXfiBZoAz6gbaf5QCq7AWL9R4Z7CtMKggem6C5r1qB9wCmvm
iFmFY1s+3TVxCb+etXpEkbhurtsPaaUnypGgrxRiYGgYbsjKTuKxMq/GcC7VP7JW
wjnrOOLi4I5qcHcwGzqlSd2vHH+WmyipvLds6tVNeCU9L+BjA9Q+Lx/1Tw7TAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUIlCopixjc42Wbrx/gUQ9afOFZhMwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMDc1ODgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZWUwDQYJKoZIhvcNAQELBQADggEBAIJL
RTrQ9MZAMjtweBjDURNob6QLtHG6wtkCzhHPIdGLI0+vIs2DO3a7ycGIWk6Wvtt5
8F3x4KOHsopwCJzHKOk3gFbcNFo62ndccxT4rW+gcZTa43beOv3jy1Zdn01oHVCr
KbYCV4p9CdwChyxuWRTxYgYuqhUtjjrLYmX0n6jI6fx4ROLpqElEaupWSMsiGFiR
wGD24QefR7iirPkN9Pk7pEhN98mIylRI24D3E8G9IWkkcbh2ucQNqBkyFnsyFg/C
RtG06ClYAoN19sxhXI+jwZrXySzIcYTnQ0gv4DMlzP0VZBmutXBQSEdLUSwPstk1
KyhglyY6SB6upWwMbn0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org