Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS270014.roa
File:                     AS270014.roa (raw, json)
Hash identifier:          BvTx+ka8PQ8lVvzf0OOueYzt1mC15/1mjRRBQEgw+gM=
Subject key identifier:   45:60:C3:13:CB:35:AD:FB:42:1D:BA:C1:1C:DD:E1:CA:20:B5:20:8F
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       5A505853519E8088B658D38C638F79E83312D7EE
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS270014.roa
Signing time:             Sat 27 Aug 2022 09:49:12 +0000
ROA not before:           Sat 27 Aug 2022 09:44:12 +0000
ROA not after:            Sat 26 Aug 2023 09:49:12 +0000
asID:                     270014
IP address blocks:        191.96.184.0/24 maxlen: 24
                          191.101.192.0/24 maxlen: 24
                          191.101.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:50:58:53:51:9e:80:88:b6:58:d3:8c:63:8f:79:e8:33:12:d7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:44:12 2022 GMT
            Not After : Aug 26 09:49:12 2023 GMT
        Subject: CN=4560C313CB35ADFB421DBAC11CDDE1CA20B5208F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:31:2e:64:0c:9e:a7:84:92:63:72:c7:a1:61:
                    0c:52:c9:2f:bc:9a:1c:bf:d4:81:58:72:7c:4b:6c:
                    38:fd:e5:31:e8:ca:0f:43:90:81:03:a6:3d:36:d9:
                    39:1a:bb:14:07:d3:bb:b6:53:b2:0e:5b:1e:f8:f3:
                    e1:12:28:94:0b:aa:7f:1c:8f:4f:42:2f:fa:7b:b7:
                    bb:88:8f:52:d4:21:68:3d:3f:b7:64:52:e0:61:95:
                    2a:11:cf:c7:03:98:b4:2f:35:d8:2c:1c:c8:8d:b4:
                    75:2c:4a:41:aa:ce:1d:bd:09:2b:84:fd:1e:f4:44:
                    8b:77:cb:dc:ec:3d:22:52:d0:2f:2d:86:73:27:64:
                    8b:40:7f:99:a8:92:8d:8a:03:72:40:17:23:f5:b0:
                    ed:02:1b:d2:69:fd:cd:37:f6:5d:3a:86:12:b4:54:
                    37:22:ce:5e:eb:d3:dd:0e:6f:53:d7:fe:27:b0:2e:
                    fa:fb:03:cd:db:98:ce:d0:07:9f:db:1c:c6:3c:d6:
                    de:b2:82:f4:30:a2:2d:a9:9b:49:9f:e5:61:0e:81:
                    e2:36:ed:7d:6a:06:d6:5f:d6:6f:e2:1b:c0:a0:61:
                    b9:38:b3:26:b5:5b:28:68:0f:d5:19:fd:1d:40:d7:
                    c5:2e:fa:98:62:34:f4:36:2b:4c:ad:f6:22:86:cb:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:60:C3:13:CB:35:AD:FB:42:1D:BA:C1:1C:DD:E1:CA:20:B5:20:8F
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS270014.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.184.0/24
                  191.101.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:4f:6d:62:ff:9d:21:36:e4:00:47:c2:cd:28:a7:17:4b:8c:
         60:7c:74:b0:2c:56:84:0a:da:d6:e7:56:fc:8b:83:ef:e3:59:
         22:20:d7:7a:4b:5b:ab:4e:81:52:a5:68:06:4c:4f:37:01:9b:
         4b:51:83:2e:a1:49:38:3c:cc:2a:0f:9f:2c:54:38:86:9e:e9:
         61:5b:67:28:89:fa:b1:b7:1d:b2:8d:09:d4:93:52:c5:42:bf:
         51:cc:3d:51:ff:56:f9:7f:21:63:bc:77:70:9f:35:47:f6:76:
         7d:98:0f:97:ba:df:14:d0:26:aa:32:1a:64:0f:23:45:f6:1f:
         c4:7e:d5:94:39:9e:74:43:5f:72:29:fb:0a:d2:2c:29:82:24:
         26:c7:fc:d8:a2:19:05:75:6a:32:9b:1c:78:93:d0:5a:23:fb:
         ec:02:e9:c0:c4:a2:c5:ee:96:cc:14:5f:7a:38:08:05:f9:63:
         e1:3a:9b:2a:da:ca:89:c3:58:cc:96:13:17:d7:c5:1f:e3:4a:
         3a:db:f1:67:24:e0:52:c2:55:03:9d:7f:3b:68:a1:99:ba:08:
         2b:73:70:1e:1e:bb:59:dd:d4:f7:75:fb:15:e5:61:93:91:07:
         3e:c7:89:4e:81:a5:a5:ed:17:a3:0e:68:4a:65:e8:71:66:29:
         8d:7d:b8:82
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIUWlBYU1GegIi2WNOMY4956DMS1+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQ0MTJaFw0yMzA4MjYwOTQ5MTJaMDMxMTAvBgNV
BAMTKDQ1NjBDMzEzQ0IzNUFERkI0MjFEQkFDMTFDRERFMUNBMjBCNTIwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0MS5kDJ6nhJJjcsehYQxSyS+8
mhy/1IFYcnxLbDj95THoyg9DkIEDpj022TkauxQH07u2U7IOWx748+ESKJQLqn8c
j09CL/p7t7uIj1LUIWg9P7dkUuBhlSoRz8cDmLQvNdgsHMiNtHUsSkGqzh29CSuE
/R70RIt3y9zsPSJS0C8thnMnZItAf5moko2KA3JAFyP1sO0CG9Jp/c039l06hhK0
VDcizl7r090Ob1PX/iewLvr7A83bmM7QB5/bHMY81t6ygvQwoi2pm0mf5WEOgeI2
7X1qBtZf1m/iG8CgYbk4sya1WyhoD9UZ/R1A18Uu+phiNPQ2K0yt9iKGyzwjAgMB
AAGjggH6MIIB9jAdBgNVHQ4EFgQURWDDE8s1rftCHbrBHN3hyiC1II8wHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyNzAwMTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYB
BQUHAQcBAf8EFjAUMBIEAgABMAwDBAC/YLgDBAG/ZcAwDQYJKoZIhvcNAQELBQAD
ggEBAJ1PbWL/nSE25ABHws0opxdLjGB8dLAsVoQK2tbnVvyLg+/jWSIg13pLW6tO
gVKlaAZMTzcBm0tRgy6hSTg8zCoPnyxUOIae6WFbZyiJ+rG3HbKNCdSTUsVCv1HM
PVH/Vvl/IWO8d3CfNUf2dn2YD5e63xTQJqoyGmQPI0X2H8R+1ZQ5nnRDX3Ip+wrS
LCmCJCbH/NiiGQV1ajKbHHiT0Foj++wC6cDEosXulswUX3o4CAX5Y+E6myrayonD
WMyWExfXxR/jSjrb8Wck4FLCVQOdfztooZm6CCtzcB4eu1nd1Pd1+xXlYZORBz7H
iU6BpaXtF6MOaEpl6HFmKY19uII=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org