Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS270353.roa
File:                     AS270353.roa (raw, json)
Hash identifier:          yC9DTTN4NLr+744IX7N24qAXn2Wfxzmikrd+1MKyB8E=
Subject key identifier:   6D:74:8D:45:D2:33:49:FD:65:B6:DF:34:57:D8:EA:ED:90:FF:90:D0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       09344A503008EE6AB1FB08C098BFE5868F4EC14F
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS270353.roa
Signing time:             Sat 27 Aug 2022 09:50:10 +0000
ROA not before:           Sat 27 Aug 2022 09:45:10 +0000
ROA not after:            Sat 26 Aug 2023 09:50:10 +0000
asID:                     270353
IP address blocks:        191.96.78.0/23 maxlen: 23
                          191.96.78.0/24 maxlen: 24
                          191.96.78.79/32 maxlen: 32
                          191.96.78.253/32 maxlen: 32
                          191.96.79.232/32 maxlen: 32
                          191.96.224.0/23 maxlen: 23
                          191.96.224.122/32 maxlen: 32
                          191.96.224.177/32 maxlen: 32
                          191.96.224.234/32 maxlen: 32
                          191.96.225.160/32 maxlen: 32
                          191.101.131.0/24 maxlen: 24
                          191.101.131.233/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:34:4a:50:30:08:ee:6a:b1:fb:08:c0:98:bf:e5:86:8f:4e:c1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:45:10 2022 GMT
            Not After : Aug 26 09:50:10 2023 GMT
        Subject: CN=6D748D45D23349FD65B6DF3457D8EAED90FF90D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:dd:7e:43:09:37:e1:ec:c8:d1:a9:f6:03:
                    09:c9:ca:7d:70:36:cb:fd:b5:c4:4a:1d:84:07:b7:
                    90:c7:05:d5:56:ed:f2:77:03:f6:ce:2b:a9:56:f3:
                    31:20:60:9e:3f:94:fd:79:db:49:35:0e:1a:94:8d:
                    02:e8:5f:46:d6:8b:d5:be:ec:a2:0a:ae:db:64:30:
                    b3:c8:c8:8c:37:aa:d6:a6:f3:67:be:da:b0:9a:f4:
                    c1:04:00:0a:8c:2e:dc:c9:9f:45:1a:7f:ff:1a:aa:
                    92:db:1d:76:f2:c8:d1:10:94:85:63:c6:7f:dd:b0:
                    55:55:fb:20:a5:cb:9b:73:b7:59:ff:76:2c:4d:3f:
                    37:63:2f:45:5d:03:6a:d3:ed:a7:e2:fa:5b:75:63:
                    cb:f1:7a:9f:93:61:ae:ef:3a:0f:c5:a4:e1:2c:37:
                    43:03:42:e1:b7:a0:30:67:52:e5:94:cd:ec:89:19:
                    bf:d1:be:03:62:a7:fa:34:35:2e:7e:b6:4a:a7:bd:
                    c7:be:5c:a1:5a:61:2a:36:4d:c6:f2:46:9e:d9:49:
                    ff:c0:6f:2d:d3:a2:67:b6:17:dc:92:a0:67:f6:45:
                    e5:a6:fe:38:e4:94:02:2b:50:4a:af:5c:2e:c3:91:
                    98:fd:82:3b:c9:fa:30:89:3a:aa:2a:ac:9d:2e:5d:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:74:8D:45:D2:33:49:FD:65:B6:DF:34:57:D8:EA:ED:90:FF:90:D0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS270353.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.78.0/23
                  191.96.224.0/23
                  191.101.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:ce:60:df:85:c8:3b:dc:2b:4f:38:e7:cf:7b:4e:99:fa:
         48:84:85:1d:4b:72:a9:00:c6:06:29:72:e1:ac:d5:1e:4a:aa:
         98:2f:bd:94:4f:42:c5:cb:cd:20:55:3b:46:eb:26:7a:95:17:
         2c:f8:90:60:9d:94:a7:8e:a8:4d:f5:35:8f:f1:9a:84:68:ec:
         7e:d1:46:7f:b1:b1:5a:bd:b6:2d:d8:72:b6:3a:95:06:8a:c7:
         70:92:7c:1d:2d:4d:c9:19:64:60:50:ee:c0:66:56:de:fb:55:
         db:33:af:db:1e:75:a4:1b:bc:7e:b9:96:bc:70:bb:7a:16:e5:
         bf:20:25:a3:91:9d:8e:28:4c:5c:c8:25:e6:1a:03:f7:89:e9:
         17:9a:2b:8e:2f:71:6a:11:00:9f:2f:8b:94:93:2d:1d:e5:71:
         b4:80:e2:02:f7:4a:f0:85:e7:06:55:cd:20:d6:14:6c:ec:29:
         75:c6:40:c0:bf:18:0b:46:53:46:51:90:4f:96:6a:9c:64:9a:
         28:26:af:bb:3a:48:d0:52:0a:c6:84:30:16:97:fb:08:fa:c2:
         24:12:e8:4a:79:56:8b:e2:1e:55:6f:cf:20:8c:42:f4:da:2a:
         ed:30:3f:4f:05:be:36:9f:c1:82:e1:c7:c1:b8:90:ee:3e:d9:
         26:ed:f9:96
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIUCTRKUDAI7mqx+wjAmL/lho9OwU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQ1MTBaFw0yMzA4MjYwOTUwMTBaMDMxMTAvBgNV
BAMTKDZENzQ4RDQ1RDIzMzQ5RkQ2NUI2REYzNDU3RDhFQUVEOTBGRjkwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQ91+Qwk34ezI0an2AwnJyn1w
Nsv9tcRKHYQHt5DHBdVW7fJ3A/bOK6lW8zEgYJ4/lP1520k1DhqUjQLoX0bWi9W+
7KIKrttkMLPIyIw3qtam82e+2rCa9MEEAAqMLtzJn0Uaf/8aqpLbHXbyyNEQlIVj
xn/dsFVV+yCly5tzt1n/dixNPzdjL0VdA2rT7afi+lt1Y8vxep+TYa7vOg/FpOEs
N0MDQuG3oDBnUuWUzeyJGb/RvgNip/o0NS5+tkqnvce+XKFaYSo2TcbyRp7ZSf/A
by3Tome2F9ySoGf2ReWm/jjklAIrUEqvXC7DkZj9gjvJ+jCJOqoqrJ0uXaaVAgMB
AAGjggIAMIIB/DAdBgNVHQ4EFgQUbXSNRdIzSf1ltt80V9jq7ZD/kNAwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyNzAzNTMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYB
BQUHAQcBAf8EHDAaMBgEAgABMBIDBAG/YE4DBAG/YOADBAC/ZYMwDQYJKoZIhvcN
AQELBQADggEBAD7hzmDfhcg73CtPOOfPe06Z+kiEhR1LcqkAxgYpcuGs1R5Kqpgv
vZRPQsXLzSBVO0brJnqVFyz4kGCdlKeOqE31NY/xmoRo7H7RRn+xsVq9ti3YcrY6
lQaKx3CSfB0tTckZZGBQ7sBmVt77Vdszr9sedaQbvH65lrxwu3oW5b8gJaORnY4o
TFzIJeYaA/eJ6ReaK44vcWoRAJ8vi5STLR3lcbSA4gL3SvCF5wZVzSDWFGzsKXXG
QMC/GAtGU0ZRkE+Wapxkmigmr7s6SNBSCsaEMBaX+wj6wiQS6Ep5VoviHlVvzyCM
QvTaKu0wP08FvjafwYLhx8G4kO4+2Sbt+ZY=
-----END CERTIFICATE-----