Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272045.roa
File:                     AS272045.roa (raw, json)
Hash identifier:          dQ1fGRaroi9AUGwu/dgFehK8GnDEhJ35gAi/tnROxXk=
Subject key identifier:   6F:22:6B:6B:86:10:59:A6:F2:B5:89:04:6C:AA:3E:45:49:B6:12:66
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       3E7D6B149D7DFB83B8160CD8E2A80A411801E104
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272045.roa
Signing time:             Sat 27 Aug 2022 09:40:41 +0000
ROA not before:           Sat 27 Aug 2022 09:35:41 +0000
ROA not after:            Sat 26 Aug 2023 09:40:41 +0000
asID:                     272045
IP address blocks:        191.96.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7d:6b:14:9d:7d:fb:83:b8:16:0c:d8:e2:a8:0a:41:18:01:e1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:35:41 2022 GMT
            Not After : Aug 26 09:40:41 2023 GMT
        Subject: CN=6F226B6B861059A6F2B589046CAA3E4549B61266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:1e:b1:cd:ed:f0:ed:f4:73:2c:87:a3:db:
                    20:c2:fa:7a:82:83:2a:a7:5c:f2:ed:14:2c:dc:83:
                    f8:65:ea:08:6e:d9:5a:38:e0:1c:c6:6f:06:85:50:
                    48:99:a9:ca:0f:bd:61:58:e6:d8:23:9f:90:7f:a1:
                    d7:e1:5d:42:b4:98:14:11:9f:59:7b:4b:33:9a:4e:
                    12:de:f4:8c:a0:88:26:53:dc:41:80:93:a6:84:12:
                    b9:c9:a7:c9:01:ce:b1:e4:c3:ac:03:23:13:ad:ab:
                    1f:84:d7:bd:8c:f0:da:61:dc:03:8f:b2:83:91:42:
                    af:b3:63:13:31:72:7a:ea:eb:5e:70:bd:19:08:95:
                    0a:d4:7e:67:1e:0b:14:82:34:7d:b6:75:eb:16:b2:
                    92:66:11:2a:ef:1e:28:76:f8:e6:04:53:10:b6:bd:
                    2b:66:d3:f9:1c:86:1e:7e:39:e4:23:87:95:51:69:
                    bc:d4:ac:e4:8a:e8:ba:1e:eb:ff:71:02:58:7f:7a:
                    0c:cb:8a:1e:88:4c:a6:eb:9d:8c:70:dc:76:88:aa:
                    36:ee:df:27:e5:78:7a:12:56:02:f0:46:9a:c1:1a:
                    c1:c9:df:24:8c:f5:c1:bf:92:08:1b:2e:48:4c:20:
                    27:d5:d5:e1:c4:01:84:b0:b4:42:77:c3:0a:03:ff:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:22:6B:6B:86:10:59:A6:F2:B5:89:04:6C:AA:3E:45:49:B6:12:66
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:4c:49:1f:1b:b9:dc:ad:73:78:45:a4:7e:74:24:3d:95:b7:
         70:20:16:d7:2f:d1:15:4a:80:0d:dc:84:92:19:fa:51:af:3d:
         85:b9:ac:8c:5d:9e:71:4d:a2:35:cd:f8:53:2e:e6:a3:9e:e9:
         66:a4:0d:59:74:4a:f4:a4:0c:9d:21:55:47:31:ae:03:68:7a:
         02:7c:11:28:ce:0a:02:42:d6:21:fe:ef:9f:9c:5d:da:f5:34:
         a2:b6:42:11:d8:44:29:1d:6c:43:76:f1:76:0d:45:54:da:f0:
         7d:6e:e8:41:fd:9c:0c:06:97:ae:79:cc:84:ca:54:ed:fa:02:
         7c:be:e9:a9:02:32:9b:73:e1:be:2a:90:7f:6c:e1:bf:5f:06:
         6b:7b:1e:25:26:cc:cd:9b:7d:67:2b:ed:96:34:16:1a:98:b2:
         dc:38:fb:59:95:6e:1e:70:11:d4:fc:c5:db:d2:b8:bd:55:67:
         fa:77:b4:94:fd:5f:ad:bd:f7:4b:e6:a4:f2:1c:23:1d:b4:7d:
         4d:93:da:52:2a:59:d4:8a:07:a9:54:df:f5:70:dc:15:d9:de:
         02:2e:01:9e:de:59:e0:03:6b:2d:05:6f:2b:80:08:ae:aa:f8:
         66:19:75:1d:cb:33:88:cf:9b:7e:ed:85:f5:ac:2a:1e:9a:34:
         1d:85:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org