Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          UT6RW18RTxn8V12HUpkv8DvV8IRqlLQHMXWpinn5+6Y=
Subject key identifier:   89:2B:29:1B:A5:BA:3F:09:10:B4:B1:F8:1E:6C:79:B4:09:EC:AF:87
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0600BF7A86ED6F65497043DDB0A02C2E45D1AD1B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209242.roa
Signing time:             Sat 27 Aug 2022 09:47:11 +0000
ROA not before:           Sat 27 Aug 2022 09:42:11 +0000
ROA not after:            Sat 26 Aug 2023 09:47:11 +0000
asID:                     209242
IP address blocks:        191.101.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:00:bf:7a:86:ed:6f:65:49:70:43:dd:b0:a0:2c:2e:45:d1:ad:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:42:11 2022 GMT
            Not After : Aug 26 09:47:11 2023 GMT
        Subject: CN=892B291BA5BA3F0910B4B1F81E6C79B409ECAF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:4f:0d:64:3a:48:e7:ec:25:85:3e:5e:8d:
                    04:21:ea:f7:2f:9e:d7:11:49:4e:27:24:fd:1d:4e:
                    03:30:ed:2b:6f:25:cc:d2:e5:b3:79:a1:11:36:5a:
                    50:5e:e7:01:18:fa:1a:e0:7d:d5:b4:5c:b9:7f:21:
                    20:fc:0c:d9:d7:8d:c6:a7:14:6f:47:76:aa:b0:d1:
                    59:74:e9:48:13:a4:61:81:e9:af:55:3c:53:d1:7d:
                    41:15:df:32:91:1b:62:fe:65:84:b1:a8:1c:4e:dc:
                    d5:4d:e7:d7:d4:82:4c:b7:35:f2:b8:25:78:68:6c:
                    b3:b5:ea:62:91:ed:10:c2:58:f0:57:57:79:b2:97:
                    a4:ff:27:57:47:f7:0d:5f:26:ea:50:49:1e:84:a2:
                    6f:81:15:8c:67:40:ea:b8:5d:0e:69:92:c9:fe:df:
                    9a:d7:d5:73:90:19:6c:1d:d5:1c:90:02:c3:30:71:
                    1b:76:58:12:b6:29:eb:b5:1a:12:dc:2e:8e:1b:93:
                    c1:9f:51:cd:8c:f5:26:25:d7:63:16:bb:84:e0:22:
                    9c:4a:06:96:60:f5:b3:24:90:4f:49:a1:9d:07:26:
                    92:83:98:71:04:68:da:49:c6:af:d7:9a:ff:5b:e6:
                    69:e6:44:21:88:ea:66:39:88:15:36:73:fe:be:46:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2B:29:1B:A5:BA:3F:09:10:B4:B1:F8:1E:6C:79:B4:09:EC:AF:87
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:df:48:00:85:7e:ee:05:b5:eb:22:da:7e:1d:4d:69:09:44:
         64:d9:13:cb:18:2f:e0:80:10:74:8a:37:6f:8b:29:85:19:bf:
         b7:19:17:6d:fc:e7:da:56:1b:35:d2:bf:c9:09:84:77:95:b5:
         11:78:54:21:55:88:9e:3e:3e:01:8c:96:eb:8f:90:2c:00:87:
         5d:2c:ce:e8:00:bb:9a:be:97:5a:65:4c:81:d9:0f:32:7b:a8:
         5b:53:a5:2f:e5:57:16:d2:2c:15:8f:a0:ac:a5:d8:d4:c7:ea:
         cb:32:0a:84:d0:fe:45:c4:e9:53:05:57:57:0a:f3:cc:bd:3b:
         8c:e6:d3:ac:ed:a0:a9:70:96:96:67:35:87:aa:7b:a4:f8:e2:
         f8:cd:ea:e1:77:81:11:eb:b3:06:ae:59:26:14:3b:1c:e3:84:
         97:8b:91:48:68:6d:ab:7c:c8:8f:2b:ef:2e:11:7c:cb:7f:71:
         2b:5f:a2:93:ce:9b:3b:e1:f6:22:9d:c2:0f:ec:f6:5d:26:6b:
         4e:5d:86:8a:45:38:a8:74:e6:70:03:55:a2:35:3f:19:6c:22:
         ae:76:ab:00:5d:3d:2a:af:8f:a7:c0:2e:0d:0c:68:2a:a5:95:
         e8:89:9e:f6:b6:b0:18:48:14:21:6b:67:9a:3b:c2:cd:90:24:
         d7:ab:41:87
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUBgC/eobtb2VJcEPdsKAsLkXRrRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQyMTFaFw0yMzA4MjYwOTQ3MTFaMDMxMTAvBgNV
BAMTKDg5MkIyOTFCQTVCQTNGMDkxMEI0QjFGODFFNkM3OUI0MDlFQ0FGODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe308NZDpI5+wlhT5ejQQh6vcv
ntcRSU4nJP0dTgMw7StvJczS5bN5oRE2WlBe5wEY+hrgfdW0XLl/ISD8DNnXjcan
FG9Hdqqw0Vl06UgTpGGB6a9VPFPRfUEV3zKRG2L+ZYSxqBxO3NVN59fUgky3NfK4
JXhobLO16mKR7RDCWPBXV3myl6T/J1dH9w1fJupQSR6Eom+BFYxnQOq4XQ5pksn+
35rX1XOQGWwd1RyQAsMwcRt2WBK2Keu1GhLcLo4bk8GfUc2M9SYl12MWu4TgIpxK
BpZg9bMkkE9JoZ0HJpKDmHEEaNpJxq/Xmv9b5mnmRCGI6mY5iBU2c/6+RmjrAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUiSspG6W6PwkQtLH4Hmx5tAnsr4cwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMDkyNDIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZfswDQYJKoZIhvcNAQELBQADggEBABPf
SACFfu4Ftesi2n4dTWkJRGTZE8sYL+CAEHSKN2+LKYUZv7cZF23859pWGzXSv8kJ
hHeVtRF4VCFViJ4+PgGMluuPkCwAh10szugAu5q+l1plTIHZDzJ7qFtTpS/lVxbS
LBWPoKyl2NTH6ssyCoTQ/kXE6VMFV1cK88y9O4zm06ztoKlwlpZnNYeqe6T44vjN
6uF3gRHrswauWSYUOxzjhJeLkUhobat8yI8r7y4RfMt/cStfopPOmzvh9iKdwg/s
9l0ma05dhopFOKh05nADVaI1PxlsIq52qwBdPSqvj6fALg0MaCqlleiJnva2sBhI
FCFrZ5o7ws2QJNerQYc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org