Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271979.roa
File:                     AS271979.roa (raw, json)
Hash identifier:          D0dSdQf6rrfz0VxOjlwX3y9HoR7ay2W6nVQDb70WhcA=
Subject key identifier:   34:FA:BA:0D:21:83:07:D1:B5:1C:21:C7:AE:50:53:C7:37:30:E9:E8
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       45BD6072F4FF836534D387766C38E8C8B021A0B6
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271979.roa
Signing time:             Sat 27 Aug 2022 09:41:52 +0000
ROA not before:           Sat 27 Aug 2022 09:36:52 +0000
ROA not after:            Sat 26 Aug 2023 09:41:52 +0000
asID:                     271979
IP address blocks:        181.214.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bd:60:72:f4:ff:83:65:34:d3:87:76:6c:38:e8:c8:b0:21:a0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:36:52 2022 GMT
            Not After : Aug 26 09:41:52 2023 GMT
        Subject: CN=34FABA0D218307D1B51C21C7AE5053C73730E9E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:e3:1e:d2:71:6d:05:3d:80:51:49:0b:29:
                    50:99:c9:c3:1f:75:73:83:41:c4:33:66:25:37:4d:
                    89:5d:22:a0:d7:fe:12:4a:a6:f0:bb:8b:f0:76:f3:
                    6b:75:e0:92:3e:8e:58:c1:da:c8:e8:d8:b5:5c:32:
                    09:d0:e9:02:fd:69:ed:80:14:68:f0:7b:75:b0:f2:
                    c0:75:b4:91:8f:44:88:1d:69:3f:e8:0c:a2:67:2b:
                    b6:dd:d3:31:bf:83:18:9f:c3:1e:95:4b:15:b4:5d:
                    58:c1:31:8f:8c:79:04:7c:80:58:31:db:13:50:d4:
                    fd:f3:f6:d4:e0:fe:af:dc:81:20:b5:c9:6e:0e:76:
                    ed:b0:9a:5c:05:10:46:11:fa:49:0c:1a:ff:17:e8:
                    67:16:d1:b8:04:c4:04:bb:c3:8a:10:dd:c8:91:0b:
                    1e:42:74:44:fb:6a:78:60:a5:95:b9:67:ea:31:b0:
                    f7:02:e4:85:a0:1f:0c:bb:4f:3e:37:03:bb:9a:6e:
                    5e:b7:0c:8f:78:94:de:6a:a8:d4:e2:a2:e0:d0:af:
                    6c:33:77:70:6a:60:5d:df:b5:b4:15:ff:be:3d:79:
                    97:33:e3:90:75:76:42:b9:e8:0b:a3:52:c4:ac:f7:
                    99:24:66:93:28:2b:0e:1e:78:0d:6e:37:b0:3a:0c:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:BA:0D:21:83:07:D1:B5:1C:21:C7:AE:50:53:C7:37:30:E9:E8
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271979.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:4d:6f:25:90:31:61:5f:b0:4d:b5:9e:64:09:2a:17:37:
         1a:ee:f0:0f:ba:22:6b:68:b7:9a:9d:58:a9:87:6a:85:de:8a:
         f0:d7:93:10:5b:80:42:e4:99:84:17:cb:aa:90:a9:47:8a:f9:
         e7:f9:80:52:86:1f:8a:e4:19:14:5a:56:a4:24:fb:3b:01:12:
         8b:ab:3d:06:53:48:5a:7a:60:86:75:d3:4c:9d:4d:8d:4e:72:
         2b:f6:d2:67:bd:1c:88:22:80:11:f6:15:f8:f8:b4:a4:a3:9a:
         61:0a:c4:8b:2c:f3:d3:7f:58:c7:a1:77:43:04:c3:56:94:2b:
         40:91:08:a9:71:30:3b:bc:0b:91:04:1c:fe:80:b4:7b:ee:fb:
         65:fd:97:ad:93:64:37:a3:29:e1:1a:ad:94:4b:f2:1f:e7:9b:
         40:58:11:23:55:e0:40:43:b9:b2:65:30:60:e0:ac:6e:d2:ef:
         60:b9:be:84:05:da:4a:74:29:e0:5c:1d:91:50:15:a7:38:6f:
         2f:b5:2b:6c:ad:e0:55:b7:07:cb:94:f2:2b:36:4b:08:33:b3:
         0b:2b:d0:92:44:bf:a3:f4:e6:10:94:3e:80:32:93:0e:f2:81:
         2f:04:1a:33:02:28:e2:5f:1f:a5:c3:7b:fc:6d:cc:2b:14:ce:
         d8:57:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org