Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272470.roa
File:                     AS272470.roa (raw, json)
Hash identifier:          KDo9ZFjwbiY+w+2TWNs25Yl21HBaRh+07SJxtrKfRw8=
Subject key identifier:   BE:16:19:CA:A4:AC:03:0C:53:16:23:EB:7A:7C:92:A2:9C:7C:82:16
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       30D42DE2A665A20131599436B0F847F2948FA4AB
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272470.roa
Signing time:             Mon 10 Oct 2022 16:02:54 +0000
ROA not before:           Mon 10 Oct 2022 15:57:54 +0000
ROA not after:            Mon 09 Oct 2023 16:02:54 +0000
asID:                     272470
IP address blocks:        191.101.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d4:2d:e2:a6:65:a2:01:31:59:94:36:b0:f8:47:f2:94:8f:a4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 10 15:57:54 2022 GMT
            Not After : Oct  9 16:02:54 2023 GMT
        Subject: CN=BE1619CAA4AC030C531623EB7A7C92A29C7C8216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:50:ab:7e:e6:1c:fe:66:2c:ab:dc:46:98:
                    88:a9:fa:4d:fd:c6:bf:9e:e5:d9:3a:f2:8c:01:44:
                    a2:77:a0:11:31:eb:97:6f:2f:c4:06:08:e6:44:c5:
                    1d:cf:9d:5e:10:53:da:77:5e:69:f5:3c:12:e3:ed:
                    3e:32:ea:ed:1f:d4:ef:d5:86:ee:35:34:bf:e9:7b:
                    ec:34:d2:a1:62:e7:47:37:92:69:03:3c:b6:dd:d0:
                    dc:54:6b:e6:95:8d:03:df:c7:9a:12:93:5e:fa:b8:
                    0d:73:d9:72:57:25:f0:11:78:c6:7c:c8:25:52:7a:
                    bc:6d:06:b4:b2:36:3f:b7:20:1d:61:4a:f6:26:cc:
                    fb:5b:23:ad:88:0d:52:26:e4:05:c1:a1:0e:3f:a2:
                    ee:1d:09:02:c7:0b:38:0b:b7:2b:3f:47:46:c9:0a:
                    47:27:aa:56:cc:1e:77:bb:2e:5f:b7:ed:b2:df:7e:
                    39:1d:8f:10:6f:09:8a:89:0c:4e:dc:3d:de:84:05:
                    90:3a:d3:73:6d:ad:52:c5:a6:3c:17:cf:26:b6:db:
                    53:1a:2a:98:a3:cd:1a:d2:13:d8:96:47:f7:1b:e1:
                    24:4d:6e:81:10:3a:f1:42:82:57:e3:fe:e2:ae:7b:
                    bb:06:60:10:d4:26:e3:20:65:d4:51:0b:1c:15:d1:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:19:CA:A4:AC:03:0C:53:16:23:EB:7A:7C:92:A2:9C:7C:82:16
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:77:d8:fe:0b:aa:8c:cb:86:36:5a:2a:08:85:8c:cc:61:
         ee:f4:cd:8c:22:c1:e7:2a:d1:72:1b:00:88:08:9a:de:92:bb:
         64:a2:38:9b:92:99:db:a2:3f:e8:fb:1c:37:09:3b:ee:05:9e:
         75:b1:1f:9f:fe:03:97:1a:ab:a5:d0:1c:83:71:90:73:00:ec:
         0e:a0:14:80:4f:78:92:1f:5b:f2:0f:52:ea:43:98:55:75:d5:
         17:ff:b6:98:47:67:b9:d3:d9:13:07:b3:67:4c:91:74:4b:31:
         79:b3:c4:99:13:10:78:a5:63:1e:0b:c1:a8:e5:20:a3:de:12:
         e8:06:98:a9:1a:e5:17:79:b3:df:78:1b:46:81:ff:a2:c7:e2:
         51:98:6d:b2:74:93:69:be:a2:19:fa:cb:d3:ad:b9:70:f9:df:
         69:42:a8:dd:21:2c:e4:1c:cd:26:2b:4f:d2:50:f3:dc:6f:0e:
         9c:e2:dd:9b:fc:f4:ac:60:03:6b:8b:c1:dc:69:c7:65:54:b4:
         62:7e:bf:25:43:b3:dc:bd:5b:e7:a6:73:25:ef:85:53:a2:44:
         22:75:c8:9e:78:eb:d1:4d:12:dc:4e:c9:6f:c2:3d:53:55:8c:
         87:54:5a:5f:7f:9b:5e:9f:06:08:09:6c:51:20:bb:18:5d:e8:
         04:e8:9c:15
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUMNQt4qZlogExWZQ2sPhH8pSPpKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMTAxNTU3NTRaFw0yMzEwMDkxNjAyNTRaMDMxMTAvBgNV
BAMTKEJFMTYxOUNBQTRBQzAzMEM1MzE2MjNFQjdBN0M5MkEyOUM3QzgyMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlFCrfuYc/mYsq9xGmIip+k39
xr+e5dk68owBRKJ3oBEx65dvL8QGCOZExR3PnV4QU9p3Xmn1PBLj7T4y6u0f1O/V
hu41NL/pe+w00qFi50c3kmkDPLbd0NxUa+aVjQPfx5oSk176uA1z2XJXJfAReMZ8
yCVSerxtBrSyNj+3IB1hSvYmzPtbI62IDVIm5AXBoQ4/ou4dCQLHCzgLtys/R0bJ
CkcnqlbMHne7Ll+37bLffjkdjxBvCYqJDE7cPd6EBZA603NtrVLFpjwXzya221Ma
KpijzRrSE9iWR/cb4SRNboEQOvFCglfj/uKue7sGYBDUJuMgZdRRCxwV0UrXAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUvhYZyqSsAwxTFiPrenySopx8ghYwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyNzI0NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZYcwDQYJKoZIhvcNAQELBQADggEBAKW2
d9j+C6qMy4Y2WioIhYzMYe70zYwiwecq0XIbAIgImt6Su2SiOJuSmduiP+j7HDcJ
O+4FnnWxH5/+A5caq6XQHINxkHMA7A6gFIBPeJIfW/IPUupDmFV11Rf/tphHZ7nT
2RMHs2dMkXRLMXmzxJkTEHilYx4LwajlIKPeEugGmKka5Rd5s994G0aB/6LH4lGY
bbJ0k2m+ohn6y9OtuXD532lCqN0hLOQczSYrT9JQ89xvDpzi3Zv89KxgA2uLwdxp
x2VUtGJ+vyVDs9y9W+emcyXvhVOiRCJ1yJ5469FNEtxOyW/CPVNVjIdUWl9/m16f
BggJbFEguxhd6ATonBU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org