Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271935.roa
File:                     AS271935.roa (raw, json)
Hash identifier:          29LN60zd/RvUUSderSm8FZWm7fFdpf9va9apj2GD/Xo=
Subject key identifier:   9D:CE:BD:11:46:A2:3E:18:E6:9B:E3:41:E9:40:54:78:07:27:AC:7C
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       378E147659F36C40FECDA08EC94182739A958352
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271935.roa
Signing time:             Sat 10 Sep 2022 00:20:13 +0000
ROA not before:           Sat 10 Sep 2022 00:15:13 +0000
ROA not after:            Sat 09 Sep 2023 00:20:13 +0000
asID:                     271935
IP address blocks:        191.96.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:14:76:59:f3:6c:40:fe:cd:a0:8e:c9:41:82:73:9a:95:83:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Sep 10 00:15:13 2022 GMT
            Not After : Sep  9 00:20:13 2023 GMT
        Subject: CN=9DCEBD1146A23E18E69BE341E94054780727AC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:3a:d1:78:33:9b:27:d8:4d:d2:ce:c8:fd:
                    82:51:1f:e4:fe:5d:50:60:ac:8f:fe:f3:85:b9:6d:
                    de:eb:37:b5:bf:d4:b8:c3:93:14:c3:50:0a:0e:f2:
                    20:ef:bb:61:13:88:ca:be:d9:6c:e5:71:62:f5:4c:
                    3e:df:6e:b3:f8:78:a5:c9:73:84:bf:ef:09:91:ff:
                    e4:b7:a4:79:07:d0:29:c4:14:f6:27:67:01:19:1e:
                    42:25:17:25:3a:a0:39:ae:43:27:94:c2:25:ce:2b:
                    ec:54:64:c2:a0:2c:f4:18:d1:0f:0d:6a:5f:3c:ec:
                    f7:3d:ee:39:e3:a3:57:d6:27:11:7e:47:ee:5a:0e:
                    d1:e5:a0:6e:c4:bc:30:6c:af:9f:d5:8b:c7:fb:d4:
                    b5:45:bb:d4:91:1b:70:a5:60:03:ad:4e:f2:c2:e9:
                    6d:67:33:9c:59:23:5e:8a:8c:11:2e:72:8f:1e:06:
                    cb:20:a4:7d:b1:05:20:e5:a0:94:43:77:9a:34:93:
                    1f:9d:3c:ca:0f:71:4d:d9:9d:44:d8:e6:72:21:93:
                    45:21:01:f0:6e:4f:ad:0a:2d:a9:40:52:30:d4:e5:
                    00:91:40:9e:3d:e6:02:6e:5c:a0:7c:b9:ef:d7:07:
                    ca:a1:45:49:98:40:d6:c0:32:45:b5:b9:2b:a4:76:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:BD:11:46:A2:3E:18:E6:9B:E3:41:E9:40:54:78:07:27:AC:7C
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:8c:d9:ad:ee:47:ba:00:e0:c4:ba:2e:16:05:e7:fe:ae:15:
         60:0e:47:4a:44:d8:ce:0e:93:46:ca:4e:e7:21:4c:51:5a:db:
         94:e3:a5:7b:21:8e:09:9a:2e:7f:50:a2:0f:54:ab:d2:05:a6:
         d2:5d:ff:5a:08:22:f8:5c:b4:25:da:61:8f:d7:0a:b3:c8:8f:
         e1:2a:67:f0:38:c4:33:b4:6d:55:4c:01:fb:01:14:8e:25:a9:
         51:77:bd:cf:0e:b0:ff:42:e4:19:6c:19:41:86:d3:b1:19:f2:
         7c:57:76:85:a5:93:1f:ec:e5:44:81:56:4c:21:d3:11:60:e2:
         05:9a:be:73:54:7f:5d:a9:24:27:11:b2:53:18:ae:17:89:14:
         43:97:5e:6e:f3:55:18:7a:fc:29:60:8e:34:6a:77:90:13:a0:
         48:06:14:1c:f1:6a:19:27:71:8e:51:57:fa:61:0e:b8:cb:ac:
         10:6d:58:70:45:cd:21:80:22:35:2d:a4:a8:93:cd:3b:a3:4b:
         c7:0f:52:41:30:09:aa:d1:f0:b0:89:05:82:b7:ba:49:91:bc:
         89:19:cb:ae:16:35:b8:3b:65:a6:6c:91:3f:da:a9:d8:58:96:
         fc:ee:82:e5:48:95:4f:43:94:d8:d1:14:03:19:6b:15:f3:b6:
         91:46:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org