Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210356.roa
File:                     AS210356.roa (raw, json)
Hash identifier:          Lk9t1AE+w1ErZ6lpnqqfTvN/0OKaqbCGJ1XIpkVKb3k=
Subject key identifier:   CB:56:64:53:4D:31:D5:44:B5:3A:C2:EB:41:FC:D1:F5:B0:B3:D1:91
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       614C9E2D83D3CA12663FB52320E4DA5FBDEB3929
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210356.roa
Signing time:             Sat 27 Aug 2022 09:51:07 +0000
ROA not before:           Sat 27 Aug 2022 09:46:07 +0000
ROA not after:            Sat 26 Aug 2023 09:51:07 +0000
asID:                     210356
IP address blocks:        181.214.48.0/24 maxlen: 24
                          181.214.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4c:9e:2d:83:d3:ca:12:66:3f:b5:23:20:e4:da:5f:bd:eb:39:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:46:07 2022 GMT
            Not After : Aug 26 09:51:07 2023 GMT
        Subject: CN=CB5664534D31D544B53AC2EB41FCD1F5B0B3D191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:f7:a8:96:9e:f4:2d:00:37:3a:66:a1:99:
                    a1:45:f1:36:2f:66:49:fa:39:d7:8f:5a:d1:a6:3c:
                    53:88:26:cd:8d:f3:62:cc:76:2e:55:2a:ac:50:bb:
                    c7:41:46:26:03:96:a8:6b:de:58:ee:46:01:c1:83:
                    18:d3:13:8b:37:92:14:8d:4f:56:2f:01:98:e0:e4:
                    8c:58:51:2f:d3:61:80:a4:c4:01:10:81:1d:15:81:
                    99:5d:e0:b4:51:75:3a:da:72:52:1a:40:c3:e1:9f:
                    f8:08:36:c0:88:e5:d0:4f:fb:1e:15:ce:6e:b7:be:
                    92:57:26:40:a8:50:c6:fb:4d:56:c8:05:22:b0:a0:
                    28:46:e6:55:91:9f:ba:a3:7d:70:4f:b2:84:a9:20:
                    bb:af:5e:89:e7:6d:25:1d:24:37:be:f0:10:12:7f:
                    71:f7:c7:5b:90:6c:b5:57:51:47:d6:b2:2a:ed:93:
                    a0:69:03:20:b0:85:ae:df:b9:4e:4b:0e:7a:3c:e3:
                    c7:96:b0:e5:50:a3:be:4a:fb:35:d7:55:07:2c:6e:
                    33:a7:13:c3:0e:77:c9:e9:87:0b:ec:b6:89:87:d0:
                    5d:1d:5f:d7:3c:69:18:0f:b2:bc:8d:45:ac:20:4c:
                    a4:0c:f3:18:5b:64:94:70:72:3b:eb:49:df:ed:39:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:56:64:53:4D:31:D5:44:B5:3A:C2:EB:41:FC:D1:F5:B0:B3:D1:91
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.48.0/24
                  181.214.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:4e:87:28:47:78:82:87:76:ee:85:bd:9b:f8:bc:5d:cf:0d:
         96:17:51:3f:f1:a9:d8:1c:89:dc:4b:0b:07:d2:2d:52:c0:89:
         75:e3:75:2c:66:b6:b7:72:03:da:4b:98:4f:1b:2c:fb:41:8c:
         70:36:9a:42:eb:c5:d5:f4:e4:7b:f3:38:86:fc:87:d6:31:8f:
         4d:80:dc:3f:9b:57:92:5c:3b:ee:b3:31:cd:00:75:92:6a:7e:
         9b:c0:82:29:12:51:47:f3:71:5e:53:28:38:e8:ac:12:0d:27:
         e2:0a:98:2c:ff:a7:2c:30:5f:73:79:9e:29:73:f3:72:4f:b7:
         24:4e:8d:ee:29:ad:e0:62:17:c6:c3:a0:71:00:ce:fe:4a:10:
         8c:ea:4b:e2:8d:24:23:35:88:16:98:8c:46:eb:a5:08:81:a0:
         f8:ba:d6:e0:b8:d2:28:a9:65:01:1d:35:1e:8c:48:6c:88:08:
         2d:a5:5c:49:f2:bc:20:35:00:80:cb:52:3a:b6:4a:8d:53:da:
         aa:40:be:35:58:18:2c:84:3b:db:b5:53:95:f2:63:5a:12:75:
         59:8d:ba:70:e7:26:f2:b8:f0:6b:d4:cb:1a:f9:fd:b1:03:0b:
         5b:73:ca:6d:54:74:16:c4:e7:7b:4a:14:3b:6a:30:f8:53:f6:
         d5:e6:d3:d6
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIUYUyeLYPTyhJmP7UjIOTaX73rOSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQ2MDdaFw0yMzA4MjYwOTUxMDdaMDMxMTAvBgNV
BAMTKENCNTY2NDUzNEQzMUQ1NDRCNTNBQzJFQjQxRkNEMUY1QjBCM0QxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfc/eolp70LQA3OmahmaFF8TYv
Zkn6OdePWtGmPFOIJs2N82LMdi5VKqxQu8dBRiYDlqhr3ljuRgHBgxjTE4s3khSN
T1YvAZjg5IxYUS/TYYCkxAEQgR0VgZld4LRRdTraclIaQMPhn/gINsCI5dBP+x4V
zm63vpJXJkCoUMb7TVbIBSKwoChG5lWRn7qjfXBPsoSpILuvXonnbSUdJDe+8BAS
f3H3x1uQbLVXUUfWsirtk6BpAyCwha7fuU5LDno848eWsOVQo75K+zXXVQcsbjOn
E8MOd8nphwvstomH0F0dX9c8aRgPsryNRawgTKQM8xhbZJRwcjvrSd/tOc4DAgMB
AAGjggH6MIIB9jAdBgNVHQ4EFgQUy1ZkU00x1US1OsLrQfzR9bCz0ZEwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMTAzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYB
BQUHAQcBAf8EFjAUMBIEAgABMAwDBAC11jADBAC11t0wDQYJKoZIhvcNAQELBQAD
ggEBALtOhyhHeIKHdu6FvZv4vF3PDZYXUT/xqdgcidxLCwfSLVLAiXXjdSxmtrdy
A9pLmE8bLPtBjHA2mkLrxdX05HvzOIb8h9Yxj02A3D+bV5JcO+6zMc0AdZJqfpvA
gikSUUfzcV5TKDjorBINJ+IKmCz/pywwX3N5nilz83JPtyROje4preBiF8bDoHEA
zv5KEIzqS+KNJCM1iBaYjEbrpQiBoPi61uC40iipZQEdNR6MSGyICC2lXEnyvCA1
AIDLUjq2So1T2qpAvjVYGCyEO9u1U5XyY1oSdVmNunDnJvK48GvUyxr5/bEDC1tz
ym1UdBbE53tKFDtqMPhT9tXm09Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org