Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272011.roa
File:                     AS272011.roa (raw, json)
Hash identifier:          Io2pyrBHza54t4fE7zM26yids3pup2rXn4urD+zKwjg=
Subject key identifier:   3B:9C:70:51:95:04:77:B1:BC:88:69:DD:3D:DE:FC:2C:D4:88:20:1A
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       3024C8E0D91F3C2920ECBB81BD40B617A01C1F60
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272011.roa
Signing time:             Tue 14 Jun 2022 06:39:19 +0000
ROA not before:           Tue 14 Jun 2022 06:34:19 +0000
ROA not after:            Tue 13 Jun 2023 06:39:19 +0000
asID:                     272011
IP address blocks:        181.214.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:24:c8:e0:d9:1f:3c:29:20:ec:bb:81:bd:40:b6:17:a0:1c:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Jun 14 06:34:19 2022 GMT
            Not After : Jun 13 06:39:19 2023 GMT
        Subject: CN=3B9C7051950477B1BC8869DD3DDEFC2CD488201A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:d3:31:db:d4:ba:43:6e:95:13:26:c6:cf:
                    1a:b9:ad:69:77:b4:5f:70:09:95:f7:3a:49:e6:17:
                    5c:9b:f7:a4:40:e0:60:60:33:a9:98:4f:a9:57:ee:
                    54:72:42:86:77:f6:ad:6a:62:cf:be:8d:cf:db:f6:
                    e3:0f:05:f8:91:b8:11:56:5e:81:71:ee:86:8e:95:
                    47:2a:94:cf:a0:c6:e2:0a:fe:cf:21:e5:03:0f:e9:
                    0e:3e:9b:df:2d:d3:91:18:d0:65:3e:0f:bb:17:4c:
                    85:f1:fe:87:53:93:a6:d4:25:74:c5:3b:df:ff:47:
                    55:9a:67:33:0f:90:14:83:55:c6:62:f9:d1:cf:d6:
                    36:ed:56:cf:a1:3b:09:35:7f:c9:9c:4c:7d:e0:df:
                    22:45:ba:4f:c2:90:3b:98:f8:49:fa:7b:d0:3d:0e:
                    2a:48:b2:b1:97:2d:e1:e2:a8:86:45:e1:48:c9:94:
                    d7:c9:1d:52:fb:45:27:aa:00:cc:80:97:2e:5a:c9:
                    0e:8f:a6:6a:ee:09:56:f2:bf:99:04:91:ff:2a:49:
                    87:1b:2e:de:b1:d5:bb:92:a8:3c:b5:a4:31:0d:79:
                    e0:b9:43:a4:06:f6:ba:24:7f:f3:bf:5d:b1:64:99:
                    cf:12:92:a4:3e:18:36:9d:4e:a9:71:88:b4:e9:06:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9C:70:51:95:04:77:B1:BC:88:69:DD:3D:DE:FC:2C:D4:88:20:1A
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272011.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:7c:75:e5:75:38:c6:54:f5:38:76:fc:29:a8:0b:6b:64:
         f4:a7:54:e1:31:cb:b9:1c:9e:24:6e:da:7d:db:71:33:9b:ff:
         71:86:48:75:58:87:00:f9:da:6b:24:ed:cc:6a:3b:06:4e:1b:
         b7:bf:8b:cb:e4:fd:27:22:fd:da:bd:66:a1:27:5f:88:51:db:
         28:0d:16:7a:8a:18:fe:72:b4:04:80:ca:af:37:05:58:b8:7d:
         6a:d2:cc:a7:05:7b:0a:43:7d:ec:04:1c:7a:c4:a7:d5:5a:c2:
         81:d0:76:3f:cd:02:0f:c4:d8:44:43:9c:bd:9d:64:8f:fd:88:
         0b:ce:46:5e:0f:11:48:e9:1b:89:f4:dd:c8:dc:f7:1d:b8:34:
         3e:ee:b9:f5:9e:9d:fd:56:91:72:73:a3:41:5f:ad:01:ee:47:
         c5:b4:e8:56:1c:19:cd:4f:19:3c:69:61:48:e4:21:6e:c0:4b:
         21:b5:d5:8f:e6:0a:69:20:7e:c7:39:b7:33:64:97:64:6e:06:
         59:c3:8d:dc:8d:46:b6:c0:9d:7b:2b:ba:ff:73:ee:5d:e9:ab:
         39:b6:ea:47:ec:ca:57:ff:4c:9a:55:d7:da:6b:01:e2:7a:07:
         ac:4e:51:fe:3a:6a:69:b3:0b:49:3f:b3:9e:71:03:ca:d0:89:
         f3:82:b3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org