Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210977.roa
File:                     AS210977.roa (raw, json)
Hash identifier:          S63QPxrU9MvvuKWw0MeKYsXlLHlkTa6I43TbjgbxRh4=
Subject key identifier:   F3:44:AC:2A:A0:4C:22:C6:0D:2B:7B:2F:09:80:57:39:DB:AA:76:8A
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       65BE021F75D877DC6F65B41487388A236B909A18
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210977.roa
Signing time:             Sat 27 Aug 2022 09:42:51 +0000
ROA not before:           Sat 27 Aug 2022 09:37:51 +0000
ROA not after:            Sat 26 Aug 2023 09:42:51 +0000
asID:                     210977
IP address blocks:        5.181.134.0/24 maxlen: 24
                          191.96.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:02:1f:75:d8:77:dc:6f:65:b4:14:87:38:8a:23:6b:90:9a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:51 2022 GMT
            Not After : Aug 26 09:42:51 2023 GMT
        Subject: CN=F344AC2AA04C22C60D2B7B2F09805739DBAA768A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:28:81:b8:53:3b:73:99:c1:c0:2a:70:8d:
                    6c:ab:bf:39:c4:39:b9:15:d5:4e:db:de:d4:ad:b8:
                    9b:89:92:c4:ee:dc:fa:ba:08:d7:7f:62:31:1c:f1:
                    66:5c:99:39:ee:53:2c:26:1f:5b:9d:78:a8:25:14:
                    30:77:09:1a:9b:35:e6:17:6c:7a:74:2b:76:88:2c:
                    89:15:1b:da:cc:7d:23:59:a7:d2:0f:31:36:4a:b0:
                    7f:2e:c4:e4:01:25:c2:d6:a1:25:1b:63:9d:42:3b:
                    52:3c:54:6f:4d:3b:75:c1:d2:8c:88:56:ed:cb:c1:
                    07:65:49:60:43:a3:ce:36:af:46:a5:f7:33:12:3f:
                    b7:b6:ca:56:1d:bd:16:07:ab:e0:f9:dc:42:3e:ee:
                    0d:7f:9a:78:1c:13:48:de:2f:c7:ed:b8:23:f9:01:
                    2e:09:f8:7b:14:7a:95:23:b0:ae:50:10:d8:6e:d4:
                    80:f1:97:e6:8e:3f:2c:45:73:11:5f:9a:b9:ff:9c:
                    77:44:c4:49:8b:07:7d:2b:38:d4:38:f1:4b:01:c0:
                    a8:dc:4a:48:59:21:83:8f:e1:c3:22:0a:fd:c5:fe:
                    af:91:b6:87:9d:47:37:33:60:64:ae:d6:93:ca:12:
                    80:7a:1c:68:56:93:3a:3f:ba:af:9e:2f:c3:f3:c3:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:44:AC:2A:A0:4C:22:C6:0D:2B:7B:2F:09:80:57:39:DB:AA:76:8A
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210977.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24
                  191.96.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:f4:81:88:d9:7e:5c:74:dd:9f:8e:14:43:80:d5:21:b5:
         d2:0f:eb:3b:9f:bd:ac:d8:40:76:7a:e1:9a:98:5d:53:75:05:
         bd:8b:c6:11:88:d5:c4:1e:a9:e1:4e:49:11:5d:c5:2f:49:7a:
         ee:a4:98:8d:eb:d8:3f:9c:fb:13:8b:f0:eb:66:ab:df:32:b0:
         14:4c:18:b0:15:5f:6f:7d:ac:75:14:92:63:f4:9a:63:82:72:
         1c:c7:87:7f:fd:76:69:4f:8a:5b:2b:f3:8f:c2:91:a4:75:fa:
         f8:1d:ff:3e:88:81:5c:99:76:d5:8f:a3:7f:2f:2f:43:ce:1b:
         2d:43:8d:26:d7:cc:5e:4c:53:ca:8f:5a:ca:70:34:be:f6:7c:
         d7:cd:93:2e:4d:c3:8f:4d:7a:dc:ad:ec:e1:e2:20:57:4c:13:
         a7:19:d9:f4:8d:52:56:cb:88:2d:1f:57:d4:6c:ad:d4:31:34:
         55:17:b4:c5:c4:aa:9f:b4:c0:88:80:73:21:63:64:b4:63:eb:
         77:de:f1:24:e8:c2:7b:53:5b:77:00:98:ee:1a:17:bb:01:76:
         8f:c8:75:4a:8c:11:0d:95:a7:fc:c5:bb:dd:67:12:8a:af:5a:
         e3:cf:01:12:f2:90:6b:96:00:91:d4:d9:42:8f:57:ba:e7:1f:
         e2:cf:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org