Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210636.roa
File:                     AS210636.roa (raw, json)
Hash identifier:          WlVKxbYFrqTBJuA/QsG1VCv+R+Ot0vbee/mA5YVKdyI=
Subject key identifier:   A0:F7:53:B7:1B:3F:C4:FB:57:30:BD:9D:75:3B:36:D8:86:22:DE:08
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       6DD9D8C8D08BBA3175F4599944092F6E3D13AF90
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210636.roa
Signing time:             Sat 27 Aug 2022 09:47:04 +0000
ROA not before:           Sat 27 Aug 2022 09:42:04 +0000
ROA not after:            Sat 26 Aug 2023 09:47:04 +0000
asID:                     210636
IP address blocks:        191.96.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d9:d8:c8:d0:8b:ba:31:75:f4:59:99:44:09:2f:6e:3d:13:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:42:04 2022 GMT
            Not After : Aug 26 09:47:04 2023 GMT
        Subject: CN=A0F753B71B3FC4FB5730BD9D753B36D88622DE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:66:f4:c8:95:4a:8b:ee:0e:d0:46:7e:2c:
                    73:64:99:27:22:03:ee:fb:67:f5:bb:12:29:20:dd:
                    9d:99:b4:f8:93:0f:b5:1b:c5:cf:2a:ba:90:89:1c:
                    77:82:17:6e:e4:e8:7f:2a:82:5b:2a:fe:3e:65:2d:
                    df:6c:98:f9:57:d3:eb:50:9b:a5:a0:12:63:fe:c5:
                    0e:58:64:9b:dd:54:dd:49:04:fc:3a:74:fc:a8:b2:
                    a4:2e:a4:06:16:61:42:18:fe:95:03:3e:4a:19:c8:
                    35:e4:39:33:6e:3d:3b:ce:9f:72:9c:de:45:21:0d:
                    a2:8a:09:e5:75:ac:db:c6:36:d9:46:ca:61:a8:6e:
                    21:a7:a7:aa:87:5b:6a:a2:12:a7:40:63:51:04:b3:
                    d8:72:13:eb:1a:8e:40:e3:90:6f:51:5f:dc:06:a9:
                    b0:a6:78:55:85:38:42:71:57:e6:fe:fa:0c:a4:c3:
                    37:92:99:37:f9:8f:53:12:6d:31:58:96:44:01:58:
                    ba:9f:22:38:4b:ee:40:64:2b:cc:5a:77:2c:a4:9d:
                    a7:69:a1:20:d4:fe:1b:66:a0:53:78:2c:3c:c8:0e:
                    9e:24:70:a8:a4:a3:29:a0:a8:79:a4:06:95:de:54:
                    f6:4f:26:9e:96:14:cf:51:dd:28:81:17:cf:fc:fc:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F7:53:B7:1B:3F:C4:FB:57:30:BD:9D:75:3B:36:D8:86:22:DE:08
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b6:53:20:7d:d2:b8:74:a2:4f:1f:8d:41:66:63:fe:89:98:
         9a:cf:5b:a7:79:e2:08:2d:f3:22:f7:73:b7:6c:ab:09:3a:9a:
         2e:9d:e0:a2:a2:ec:6e:2c:c2:26:04:79:79:98:8f:c3:cf:b5:
         29:54:14:bf:f2:af:2f:f9:7b:4e:85:a5:66:de:f5:c4:09:07:
         6b:b6:f4:f0:a1:24:1d:7f:02:d6:31:ff:7f:63:2d:ba:85:70:
         22:4a:00:d7:58:ee:49:21:1d:3b:9b:11:73:00:f0:3c:8c:60:
         8f:35:1b:33:48:13:3e:58:5e:a7:99:ff:35:44:b6:9b:eb:0c:
         e8:54:df:72:c4:dc:af:a7:55:d5:1f:78:3c:51:d3:33:2f:c9:
         28:21:11:57:62:df:84:c2:6c:ae:68:ec:29:d6:21:a3:1c:3e:
         19:49:8e:ab:9b:8c:f7:8d:5d:62:44:09:8a:c8:2e:0e:fc:77:
         ed:b3:78:d1:37:13:99:65:fb:6f:ab:04:63:be:99:f0:c8:b8:
         11:0a:f3:6a:e5:dc:e5:67:29:6d:c3:1f:f9:df:99:a1:ae:33:
         78:7d:8c:df:f1:67:30:40:a8:83:cd:6b:ea:ee:e1:db:da:f3:
         48:93:22:80:2b:1d:14:68:a0:e1:33:e5:18:da:d1:df:aa:93:
         4a:24:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org