Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271988.roa
File:                     AS271988.roa (raw, json)
Hash identifier:          qobx6uB2JbYfWyP5iSX3OF7AVuDAQQUmMbkB701356k=
Subject key identifier:   60:38:05:D3:A8:B1:0E:B2:8F:D8:00:B3:22:64:A4:EC:99:8E:58:55
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       6B784D64D5670428A8536A2C055DE2FE28C08E8E
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271988.roa
Signing time:             Tue 14 Jun 2022 06:40:39 +0000
ROA not before:           Tue 14 Jun 2022 06:35:39 +0000
ROA not after:            Tue 13 Jun 2023 06:40:39 +0000
asID:                     271988
IP address blocks:        191.96.164.0/24 maxlen: 24
                          191.101.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:4d:64:d5:67:04:28:a8:53:6a:2c:05:5d:e2:fe:28:c0:8e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Jun 14 06:35:39 2022 GMT
            Not After : Jun 13 06:40:39 2023 GMT
        Subject: CN=603805D3A8B10EB28FD800B32264A4EC998E5855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:01:82:aa:13:6f:2c:be:0f:f0:1c:da:b6:
                    8b:98:b9:8e:42:9e:f8:1e:df:b7:a5:18:3c:fa:97:
                    28:3a:e8:40:3a:e5:5d:3f:4b:ac:d2:6d:16:6f:79:
                    f2:cd:7a:ba:5a:58:ca:a5:0d:1c:83:0f:26:b8:be:
                    7f:e4:e3:8f:e5:c4:b6:3e:ef:05:1c:17:69:f9:fb:
                    a7:20:2e:cd:2d:c2:1b:2f:4e:81:6f:41:96:bd:6d:
                    d9:8e:3e:d9:68:df:3b:e8:6a:38:7b:fa:e2:ae:e0:
                    9b:56:98:d3:8e:56:3d:75:50:d7:3a:1d:0b:1f:4c:
                    0b:4c:60:b5:9c:96:71:97:cb:86:23:86:d5:7f:8b:
                    59:cc:15:c6:fc:f1:af:94:c4:b0:52:73:f1:fe:2f:
                    a3:95:b1:04:d0:98:0f:da:d0:40:14:a2:b5:33:ec:
                    01:2f:97:77:a7:ac:4e:22:57:ec:d0:78:10:24:34:
                    da:d7:18:ad:f3:4b:b8:c2:18:30:33:88:48:68:33:
                    3b:de:45:34:bd:04:0f:b5:d2:02:e0:a5:ad:c1:5e:
                    26:11:fc:04:9e:a3:33:60:01:97:02:ed:f8:a0:c7:
                    2e:55:2e:69:8f:0c:ce:73:a9:e8:bb:37:25:63:6f:
                    83:29:15:e6:8d:01:45:61:a6:91:39:8e:b8:af:d7:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:05:D3:A8:B1:0E:B2:8F:D8:00:B3:22:64:A4:EC:99:8E:58:55
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS271988.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.164.0/24
                  191.101.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ee:3c:75:ec:92:8f:8d:30:a2:15:b6:e9:3f:5b:75:a1:63:
         e5:d0:e0:32:b1:be:0e:d1:6a:dd:88:27:9e:84:17:89:e5:0f:
         aa:0a:50:69:ee:f1:03:9a:e9:f9:32:35:ee:64:50:b7:68:c5:
         fc:4b:99:4a:2d:c6:13:10:23:45:be:64:cf:6e:9b:70:b2:b5:
         84:58:6e:52:a0:cc:79:0e:33:22:e1:1a:93:38:cf:13:66:23:
         fa:9c:21:35:44:87:ae:36:81:53:b1:c6:64:db:c0:39:61:44:
         64:d1:50:d2:c4:f7:1d:21:b9:ae:4a:25:39:2e:a7:cf:81:f8:
         19:ef:ae:d5:fa:db:ab:fc:0f:a3:12:9a:a2:57:17:3d:da:c4:
         98:12:0d:06:6b:00:75:11:56:3c:b4:54:5c:66:78:59:03:e0:
         b7:4b:57:eb:fc:7c:ee:fd:54:00:17:56:6c:08:cd:e8:67:b0:
         6e:1c:10:d9:be:54:b3:17:04:47:ee:bc:af:d8:b7:0a:76:28:
         3b:66:fa:70:29:e8:45:9b:c2:59:70:c7:4f:01:c9:29:71:1c:
         06:03:9b:00:71:00:09:ea:f4:eb:8e:00:68:e3:66:a8:75:02:
         2d:bd:55:49:42:d6:43:68:61:4e:e9:03:4f:16:1e:4d:f1:d7:
         bc:98:3e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org