Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272073.roa
File:                     AS272073.roa (raw, json)
Hash identifier:          QOutTsSps0zfpMooXxcnWZCKHcOMdV7NnLZED9Jj3AI=
Subject key identifier:   E0:90:0B:6D:06:30:B3:F1:84:FF:86:65:94:B6:15:A8:07:A3:AB:06
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       20636427D17CC522DF19CE778C37D052095C3515
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272073.roa
Signing time:             Sat 15 Oct 2022 03:13:23 +0000
ROA not before:           Sat 15 Oct 2022 03:08:23 +0000
ROA not after:            Sat 14 Oct 2023 03:13:23 +0000
asID:                     272073
IP address blocks:        191.101.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:63:64:27:d1:7c:c5:22:df:19:ce:77:8c:37:d0:52:09:5c:35:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 15 03:08:23 2022 GMT
            Not After : Oct 14 03:13:23 2023 GMT
        Subject: CN=E0900B6D0630B3F184FF866594B615A807A3AB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:60:01:55:72:60:3c:a7:7f:8d:57:b4:10:
                    51:9c:ef:ea:65:17:0d:c6:68:c9:2c:a6:57:05:07:
                    98:9b:a9:d6:77:57:99:02:43:4b:e0:f1:f9:28:7d:
                    9d:90:85:77:b9:61:4e:6b:53:fa:35:a8:a8:46:05:
                    c4:34:b2:fb:a4:ba:74:1e:91:24:b3:14:16:0d:ce:
                    15:b0:4d:ea:94:14:36:5f:41:a6:11:25:2c:8b:7c:
                    3c:d5:33:9d:4b:8a:d9:41:97:9e:9d:ab:61:90:89:
                    c0:52:7e:12:ca:dd:74:84:36:94:bf:6f:59:16:07:
                    bd:da:f3:42:67:db:e3:b2:fb:c1:c8:99:e6:d2:90:
                    ec:7d:23:15:05:e5:be:13:a7:e2:f6:80:6d:67:bb:
                    44:4a:48:2f:15:d5:47:92:0e:d0:e0:53:f6:1e:f5:
                    b6:db:4b:74:28:54:b9:22:9c:04:9c:0f:44:bc:ef:
                    be:8a:41:53:24:96:09:3a:11:c6:c7:2d:95:1d:08:
                    05:15:79:a9:73:ef:f0:4f:d0:a4:19:a2:f4:62:e3:
                    6b:ed:03:7f:c1:32:0d:f0:2d:e6:69:03:f3:7e:3a:
                    29:2b:c0:b7:b7:ad:3e:35:7e:42:21:33:c0:70:04:
                    68:66:5c:f3:ff:ed:78:14:1b:68:08:c8:ef:7a:15:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:90:0B:6D:06:30:B3:F1:84:FF:86:65:94:B6:15:A8:07:A3:AB:06
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:38:1e:fb:3a:16:9c:6b:e2:c5:7a:90:b6:a5:f8:31:63:
         b9:54:e9:be:ee:26:6d:2f:1c:20:07:ac:0f:15:2d:0f:0b:62:
         16:38:82:f2:ba:3c:54:fd:77:c0:de:37:a6:dc:86:e9:9e:4d:
         bd:60:c8:78:20:6e:6c:98:60:a4:c3:1a:c1:82:8f:9a:ff:46:
         02:91:a7:d6:45:ea:b0:11:5d:fd:1f:47:1f:c0:57:72:9e:d9:
         00:85:40:67:db:a2:55:d7:92:31:21:1a:c3:a0:56:5f:32:a9:
         8e:4d:b6:7a:e2:85:99:6c:e3:1f:ef:34:9a:c2:06:00:a1:89:
         4b:f4:3b:cc:44:e1:12:f9:37:08:6f:65:9d:0e:5e:51:19:e8:
         a8:fd:69:9d:5f:0c:1a:d3:c0:66:94:54:3c:a5:c2:bd:e9:12:
         79:9a:c2:32:50:ec:52:35:c7:17:5a:5e:d8:46:2b:7a:91:ae:
         2f:bc:8f:cf:75:33:68:33:95:c6:2f:01:cc:af:68:b7:d5:8a:
         93:da:aa:79:ee:44:34:3a:b1:9e:a3:b9:6b:e8:04:07:1d:b9:
         52:ff:a5:aa:39:84:96:23:65:64:bf:f5:75:8d:07:9d:fc:4b:
         02:ba:b7:b9:f3:d9:e5:8c:3c:f7:f1:3c:33:ae:42:e0:12:10:
         e7:06:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org