Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210535.roa
File:                     AS210535.roa (raw, json)
Hash identifier:          QH3DS1w4OF2b+sfE90KJjA87p10PIoyY90WkuoZ/oLo=
Subject key identifier:   37:CA:A2:FD:65:09:2F:70:77:BE:E5:65:61:AD:20:DC:4E:0A:2E:43
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       579CDD4A9EDCB34682020B41FAFC5CF183848F00
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210535.roa
Signing time:             Fri 21 Oct 2022 22:44:17 +0000
ROA not before:           Fri 21 Oct 2022 22:39:17 +0000
ROA not after:            Fri 20 Oct 2023 22:44:17 +0000
asID:                     210535
IP address blocks:        191.101.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:dd:4a:9e:dc:b3:46:82:02:0b:41:fa:fc:5c:f1:83:84:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 21 22:39:17 2022 GMT
            Not After : Oct 20 22:44:17 2023 GMT
        Subject: CN=37CAA2FD65092F7077BEE56561AD20DC4E0A2E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:9c:9f:32:95:8f:5d:2e:00:5b:93:07:49:
                    95:6b:96:1e:97:a3:7a:07:bf:af:89:c1:7c:50:0e:
                    7d:b3:dc:b0:a1:ff:ab:36:33:e7:04:6e:8f:41:97:
                    22:da:6c:d6:3c:6f:bf:f8:bd:f6:1f:4e:e9:48:a4:
                    1d:6a:59:0c:87:8f:56:e3:b3:0d:13:5c:e3:5e:83:
                    97:5f:51:1c:62:1c:bc:58:a7:e3:a8:94:5b:95:e9:
                    6b:3b:1f:cb:07:ed:52:b8:dd:e1:96:c7:15:c6:ae:
                    9c:c1:b2:0d:06:29:67:4c:b7:7d:ea:62:14:03:b9:
                    1c:16:1b:b9:29:72:90:d7:26:ca:38:a7:a7:56:9a:
                    8e:fa:e4:b2:24:35:25:d9:72:19:d9:9b:8a:59:dc:
                    28:24:c1:ff:75:88:73:22:83:97:68:f9:0f:6f:23:
                    02:6c:49:0c:5c:66:df:10:0d:96:55:51:d1:d9:b8:
                    5f:85:ae:1f:72:fb:c1:e7:29:ac:5a:6a:7c:2b:48:
                    25:a8:9d:5c:a1:b5:a1:a1:28:a6:fe:ba:f3:af:be:
                    b5:ab:2e:6a:bf:08:ab:fb:95:2b:82:f7:df:9b:5a:
                    63:07:14:48:36:13:47:0f:fc:a9:3d:d7:6b:ce:e0:
                    af:e7:99:75:0d:ad:a9:11:4d:cd:70:55:9f:bd:ee:
                    a8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:A2:FD:65:09:2F:70:77:BE:E5:65:61:AD:20:DC:4E:0A:2E:43
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:24:21:f6:fe:47:1c:45:cd:94:b6:2e:5f:43:03:e1:73:0e:
         c9:66:0e:fd:81:4d:41:e1:cc:e3:fd:f2:4d:e1:23:eb:7a:28:
         7d:97:d0:34:3a:b3:a5:c8:38:fc:0d:49:5b:74:05:c4:b4:9c:
         3d:2c:47:c3:4d:61:88:2f:46:03:e1:1a:d8:d0:d8:45:55:91:
         24:43:fa:24:06:3f:33:77:2d:65:0c:b8:e5:bb:ee:f7:8f:b3:
         aa:be:2d:dc:d6:cc:51:26:9d:2b:a2:fa:04:1d:03:96:81:ef:
         df:67:1f:42:14:e7:c4:56:f2:7a:41:e6:df:8d:14:eb:d8:8b:
         00:f6:95:76:10:e2:ee:f1:c5:c9:c6:a8:30:21:a2:3a:4a:e5:
         b2:d9:bc:bc:6e:a4:ae:40:22:36:75:66:02:27:e4:aa:66:cf:
         e6:16:15:ef:31:bf:17:8b:5f:84:d9:f7:b5:dd:c1:ba:0e:47:
         91:5b:bb:30:ba:09:ae:81:a3:34:68:4d:05:89:75:3f:3a:6b:
         69:7f:71:d4:7b:46:84:14:1c:50:ed:cc:b7:14:2c:b3:23:2f:
         69:5d:a5:65:85:20:0f:b9:6c:ee:b6:48:ab:27:9b:8b:eb:64:
         c0:c5:4c:c4:07:cc:2e:4b:55:56:5d:a7:2b:e2:86:82:f2:1c:
         b9:df:e4:a0
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUV5zdSp7cs0aCAgtB+vxc8YOEjwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMjEyMjM5MTdaFw0yMzEwMjAyMjQ0MTdaMDMxMTAvBgNV
BAMTKDM3Q0FBMkZENjUwOTJGNzA3N0JFRTU2NTYxQUQyMERDNEUwQTJFNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tpyfMpWPXS4AW5MHSZVrlh6X
o3oHv6+JwXxQDn2z3LCh/6s2M+cEbo9BlyLabNY8b7/4vfYfTulIpB1qWQyHj1bj
sw0TXONeg5dfURxiHLxYp+OolFuV6Ws7H8sH7VK43eGWxxXGrpzBsg0GKWdMt33q
YhQDuRwWG7kpcpDXJso4p6dWmo765LIkNSXZchnZm4pZ3Cgkwf91iHMig5do+Q9v
IwJsSQxcZt8QDZZVUdHZuF+Frh9y+8HnKaxaanwrSCWonVyhtaGhKKb+uvOvvrWr
Lmq/CKv7lSuC99+bWmMHFEg2E0cP/Kk912vO4K/nmXUNrakRTc1wVZ+97qjfAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUN8qi/WUJL3B3vuVlYa0g3E4KLkMwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMTA1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZeEwDQYJKoZIhvcNAQELBQADggEBAKwk
Ifb+RxxFzZS2Ll9DA+FzDslmDv2BTUHhzOP98k3hI+t6KH2X0DQ6s6XIOPwNSVt0
BcS0nD0sR8NNYYgvRgPhGtjQ2EVVkSRD+iQGPzN3LWUMuOW77vePs6q+LdzWzFEm
nSui+gQdA5aB799nH0IU58RW8npB5t+NFOvYiwD2lXYQ4u7xxcnGqDAhojpK5bLZ
vLxupK5AIjZ1ZgIn5Kpmz+YWFe8xvxeLX4TZ97XdwboOR5FbuzC6Ca6BozRoTQWJ
dT86a2l/cdR7RoQUHFDtzLcULLMjL2ldpWWFIA+5bO62SKsnm4vrZMDFTMQHzC5L
VVZdpyvihoLyHLnf5KA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org