Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS267809.roa
File:                     AS267809.roa (raw, json)
Hash identifier:          JRbf50YyJLw7K41PK6r6O9DHE3QjASpJAmS38AR1Z98=
Subject key identifier:   3E:88:02:1A:4C:FA:70:6C:44:F4:08:06:2A:2E:09:17:31:AE:7A:41
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       17A6EFC817173615A738DE712E4014495455A531
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS267809.roa
Signing time:             Sat 27 Aug 2022 09:45:25 +0000
ROA not before:           Sat 27 Aug 2022 09:40:25 +0000
ROA not after:            Sat 26 Aug 2023 09:45:25 +0000
asID:                     267809
IP address blocks:        191.96.231.0/24 maxlen: 24
                          191.101.25.0/24 maxlen: 24
                          191.101.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a6:ef:c8:17:17:36:15:a7:38:de:71:2e:40:14:49:54:55:a5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:40:25 2022 GMT
            Not After : Aug 26 09:45:25 2023 GMT
        Subject: CN=3E88021A4CFA706C44F408062A2E091731AE7A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:00:7a:6a:fc:82:c8:2c:19:71:5e:e7:73:
                    c6:fb:b1:86:c4:23:eb:2c:1d:59:01:92:2a:f1:2d:
                    29:26:6b:5d:8b:b9:18:47:d5:b1:93:fb:28:9d:61:
                    eb:d5:19:fb:7a:60:a3:9f:c4:6b:67:a3:fc:ed:a5:
                    2a:d0:39:96:fd:72:ef:55:6c:ce:80:92:c3:af:1d:
                    4a:bb:73:d5:cc:97:a2:2b:22:a8:15:79:7f:43:2f:
                    62:14:08:08:38:9d:63:e9:d3:b6:39:29:1d:09:83:
                    64:ec:b9:8c:95:84:8a:40:f6:a4:b5:0b:4b:b3:8b:
                    d5:73:82:92:2a:af:68:77:37:01:12:6f:27:7d:bc:
                    90:be:59:2a:37:61:69:5a:2c:91:ae:be:6d:8d:6d:
                    cd:b6:83:f3:c3:8a:73:40:b2:bc:d9:90:21:05:10:
                    90:61:2e:e4:4b:3a:20:e2:34:5b:cb:db:74:71:7d:
                    8d:5c:71:78:e6:de:87:4e:9f:c6:e8:b5:06:4a:6c:
                    8f:ee:4a:1e:68:09:03:a3:5e:9b:02:83:3a:8c:3c:
                    58:eb:f8:da:8e:ad:77:37:4c:0a:af:69:3e:e0:9d:
                    37:dd:13:75:30:29:bf:a2:46:e2:da:f1:2f:c1:de:
                    a4:a1:b5:ae:a0:8c:21:90:dd:6b:f1:e5:93:4a:ca:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:02:1A:4C:FA:70:6C:44:F4:08:06:2A:2E:09:17:31:AE:7A:41
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS267809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.231.0/24
                  191.101.25.0/24
                  191.101.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:64:f4:25:e9:e8:7c:8f:58:d6:dd:57:a3:bc:be:be:0a:dd:
         e3:87:54:8b:66:7a:89:a3:e3:83:a9:1a:84:b5:a9:f0:5b:47:
         f1:40:a9:1a:94:8a:5c:7a:14:23:93:37:4f:df:df:55:15:4a:
         e3:95:ab:f6:44:89:76:5b:cc:80:2e:45:f8:22:4f:38:10:66:
         94:05:ed:f9:7d:d8:09:81:59:59:ff:cf:1b:11:7f:e7:6a:6d:
         d9:e5:7f:13:86:43:ca:5d:68:1f:e9:44:b7:2f:8d:36:ad:85:
         93:3c:60:1d:8e:88:c8:25:d5:8a:4f:cb:8d:32:9f:91:1a:9d:
         f3:d5:04:a4:1c:2e:f0:84:0d:2b:9a:e4:8f:9c:a8:0c:a9:82:
         35:06:44:94:df:cc:16:fd:22:c3:35:bb:2c:76:48:93:ea:a3:
         f1:db:cf:7e:5b:60:92:24:1d:e5:97:67:5e:ee:f4:78:2d:39:
         d7:fc:38:4b:47:2b:62:9e:a6:49:32:6f:8f:8d:4e:ab:e3:d2:
         0b:a6:6e:88:94:4f:84:f9:17:a9:28:04:4a:05:62:f8:d0:a6:
         13:cb:b2:1b:f5:5f:06:95:39:01:59:bc:9c:03:16:0b:b5:cc:
         bb:da:0d:1d:13:ec:cc:29:30:c2:72:f0:bd:47:18:bd:c9:2c:
         6b:85:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org