Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271965.roa
File:                     AS271965.roa (raw, json)
Hash identifier:          94zLBWPbBrKdr7BY+Be3HFCV2/aUG7xhhu4q0h3VkPA=
Subject key identifier:   2A:99:89:29:54:F8:82:ED:B0:6C:FF:3F:0C:48:E5:84:2D:67:6C:DA
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       366A4B49E038EA813883D904684DF29092D82246
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271965.roa
Signing time:             Sun 04 Sep 2022 06:43:20 +0000
ROA not before:           Sun 04 Sep 2022 06:38:20 +0000
ROA not after:            Sun 03 Sep 2023 06:43:20 +0000
asID:                     271965
IP address blocks:        191.101.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6a:4b:49:e0:38:ea:81:38:83:d9:04:68:4d:f2:90:92:d8:22:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Sep  4 06:38:20 2022 GMT
            Not After : Sep  3 06:43:20 2023 GMT
        Subject: CN=2A99892954F882EDB06CFF3F0C48E5842D676CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:23:ff:7f:9b:7d:d2:4d:33:88:25:dd:00:
                    53:22:b2:a5:57:48:56:d8:61:94:7a:40:fa:93:77:
                    86:d4:a8:7e:2a:16:1e:a0:c8:c5:d9:17:39:b7:68:
                    93:5f:5e:fa:8e:0c:ed:de:3e:85:81:c5:f4:e4:22:
                    36:2a:b9:76:5f:11:33:9c:3e:b6:11:af:0f:5b:4e:
                    46:da:2b:09:b2:36:df:ce:45:9a:f9:f7:9c:63:2b:
                    c0:e6:b4:7c:67:61:e9:19:9d:82:68:04:fc:f9:5a:
                    f4:74:4a:79:1f:9f:eb:89:d8:3a:9c:a2:f0:d4:76:
                    9a:c3:c3:80:58:45:48:21:15:56:0d:53:da:00:d6:
                    1d:1a:e2:f0:15:07:41:63:fc:42:20:56:52:af:d0:
                    1b:3f:cd:35:16:24:d3:d5:9b:cb:b2:f3:fd:a9:25:
                    8c:e0:c0:6b:25:72:5c:08:2b:0e:a1:0f:7e:84:eb:
                    76:1f:8e:ae:93:82:f1:cf:01:6e:65:9c:08:bc:1f:
                    96:e6:b0:98:db:25:e6:0f:8b:e3:cb:f1:91:7a:de:
                    94:85:5f:a6:b0:c6:4d:c3:08:e6:74:6f:f3:70:17:
                    a2:d4:d9:58:a5:75:b8:a8:3e:fe:6e:68:27:35:a8:
                    aa:5e:2b:92:15:85:ee:0f:1d:a5:21:e8:f7:64:95:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:89:29:54:F8:82:ED:B0:6C:FF:3F:0C:48:E5:84:2D:67:6C:DA
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271965.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:ea:f0:43:e6:a6:f2:9f:c7:71:bf:9e:8f:55:0e:e1:51:
         2f:d5:3f:74:81:96:da:9d:51:8b:1b:fe:d7:b0:8b:8a:c9:c5:
         a6:b5:98:d3:f8:f4:96:d2:bf:d0:da:53:66:27:84:f6:d4:0b:
         c6:25:29:b3:74:b1:90:86:3e:d0:26:53:5c:03:bd:43:2e:39:
         11:99:e1:d8:7d:e0:1c:8b:7a:1c:a9:c5:81:04:00:74:fc:ad:
         3e:a7:d3:e1:44:aa:da:53:b6:af:ce:63:e1:6a:dd:17:29:69:
         81:85:ae:bc:cf:31:de:34:cd:a8:2e:61:52:a9:68:15:60:e4:
         ea:00:6c:75:6a:cf:c5:f0:a9:21:55:26:2f:0c:52:11:01:cf:
         05:39:48:1d:8c:d2:fc:78:08:53:33:63:4e:c5:a0:24:ad:8f:
         e7:83:c0:73:ca:b4:df:20:ef:a2:71:e4:f0:25:f6:fc:cd:d8:
         1a:10:a3:f2:da:1a:14:a3:59:69:55:0d:9e:6d:cb:4c:75:e6:
         da:c4:66:9f:64:d2:31:b4:f6:d0:8e:ba:bd:95:5e:67:2e:62:
         67:47:6e:97:32:19:b0:c1:f4:49:ad:86:85:70:15:f7:3f:00:
         fd:72:f9:d6:9a:13:e0:13:0a:7f:d3:aa:7a:34:24:c4:8f:86:
         cd:70:dd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org