Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271700.roa
File:                     AS271700.roa (raw, json)
Hash identifier:          1fjK5oBtV+XXXlk1agl9kwV+BtV4ydIVSvX04FPFkTw=
Subject key identifier:   EC:EF:A5:D2:6C:97:A6:BF:95:3E:1D:21:7F:79:2B:2B:3E:45:DD:3C
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4B924052C018B9A3423F8ABFD4BEEA62ACAAFDF0
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271700.roa
Signing time:             Sat 27 Aug 2022 09:46:24 +0000
ROA not before:           Sat 27 Aug 2022 09:41:24 +0000
ROA not after:            Sat 26 Aug 2023 09:46:24 +0000
asID:                     271700
IP address blocks:        181.214.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:92:40:52:c0:18:b9:a3:42:3f:8a:bf:d4:be:ea:62:ac:aa:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:41:24 2022 GMT
            Not After : Aug 26 09:46:24 2023 GMT
        Subject: CN=ECEFA5D26C97A6BF953E1D217F792B2B3E45DD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f2:c2:5d:f1:06:76:8b:9b:c0:25:2f:d4:2e:
                    55:eb:fa:5c:06:53:dd:d7:ca:37:d2:31:32:5e:16:
                    69:9c:fb:ab:77:75:43:cf:c9:08:83:59:af:8d:1a:
                    15:d3:69:82:bf:94:46:2b:bf:70:71:28:7f:ee:b1:
                    88:7d:29:85:cd:68:b2:17:07:ec:50:2f:2f:13:5d:
                    eb:54:3a:d4:8c:2f:a1:ba:d1:f1:94:20:26:e7:81:
                    a1:1d:a9:14:a1:53:87:1d:0f:e6:9f:82:4d:1e:24:
                    7f:09:b9:83:a1:e2:55:9d:4a:1f:4f:34:36:3d:2e:
                    ba:86:c6:03:04:01:4b:0d:f3:a6:3d:46:80:40:af:
                    b2:a4:05:ae:f9:25:12:cb:e5:99:35:cc:5f:54:40:
                    b2:0d:88:12:fa:e7:41:3c:1a:ee:a3:f9:64:ea:f1:
                    2c:59:06:35:8e:29:1f:71:9a:4d:d6:d3:ac:b7:55:
                    79:8e:fe:1c:d4:bf:fa:87:e2:d7:0d:a1:71:bf:8d:
                    07:25:f2:30:a9:01:8e:b0:ff:cf:f2:8e:3a:46:0d:
                    db:46:b8:d5:c7:a8:82:4f:63:29:fe:2a:1f:46:ad:
                    a4:b0:91:9a:e9:4f:34:47:b5:5f:9e:59:98:9f:ec:
                    8e:2e:57:af:a6:ae:2a:0f:e0:dc:34:68:58:b3:db:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EF:A5:D2:6C:97:A6:BF:95:3E:1D:21:7F:79:2B:2B:3E:45:DD:3C
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271700.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:99:43:1e:8e:c2:85:0f:21:ca:f7:25:04:2b:67:0b:6b:f9:
         a2:42:9a:10:2c:80:f6:7e:13:44:e3:44:05:7f:ba:f5:82:ea:
         58:da:92:d6:cd:89:51:f3:28:7c:da:3d:0d:15:c3:20:00:4a:
         df:04:1b:0e:59:99:61:54:87:5f:24:db:b7:e4:62:e2:ff:a6:
         b4:15:4c:ea:97:ee:a5:80:8f:01:35:f3:1a:47:eb:fd:e9:dd:
         18:7a:86:df:b1:c6:8c:af:e2:18:b4:3c:3b:9c:8e:c2:ec:12:
         eb:9d:8d:2e:15:25:cf:e0:53:8d:22:f9:2b:d0:9b:27:e0:1c:
         0c:e9:d8:3d:9f:1e:9d:5c:db:57:1c:8d:de:ea:75:2c:b8:fd:
         dd:72:26:43:28:b4:2b:4c:c4:a8:61:be:50:12:fa:10:e3:76:
         c0:1e:f0:2e:f7:16:cc:10:d3:0e:17:33:62:e2:60:e7:ed:88:
         3c:70:ee:b7:fa:6f:51:fc:de:e4:f0:3b:44:63:b7:12:ee:9b:
         1c:13:55:8b:3f:8f:7c:b5:21:9e:3c:b1:53:b7:1e:ba:07:b6:
         cf:38:07:f2:56:21:fe:50:93:0d:56:04:88:0a:e8:d1:57:27:
         17:e7:15:17:b0:97:a5:a7:58:02:be:05:87:b0:f5:f2:86:f2:
         94:78:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org