Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272696.roa
File:                     AS272696.roa (raw, json)
Hash identifier:          MihSz4jpZ1Q8YiRgQiBC8ZfOD4y97vOlXtR3/59wD0E=
Subject key identifier:   B6:A8:E1:54:92:72:AF:F5:BA:00:55:E7:12:33:B1:6E:E5:4A:AA:E3
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0113E1A653811BD0D2F2F5A0043D491F61E2AEF7
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272696.roa
Signing time:             Sun 06 Nov 2022 20:45:35 +0000
ROA not before:           Sun 06 Nov 2022 20:40:35 +0000
ROA not after:            Sun 05 Nov 2023 20:45:35 +0000
asID:                     272696
IP address blocks:        191.96.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:13:e1:a6:53:81:1b:d0:d2:f2:f5:a0:04:3d:49:1f:61:e2:ae:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  6 20:40:35 2022 GMT
            Not After : Nov  5 20:45:35 2023 GMT
        Subject: CN=B6A8E1549272AFF5BA0055E71233B16EE54AAAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:ab:c0:93:7c:19:4f:4e:34:c4:eb:02:64:
                    1f:b1:38:14:84:44:c9:93:f6:c2:b3:a5:b6:85:8e:
                    1c:3f:e4:1f:a6:34:66:53:32:50:0d:9d:8d:d2:07:
                    de:11:a3:83:4a:b0:09:6a:c4:d5:3a:8d:d2:8a:92:
                    bb:0a:24:dc:ee:5a:8f:f3:3a:46:3a:7b:d4:0a:19:
                    32:68:a0:5a:72:f2:74:39:78:71:e7:43:3b:8c:d7:
                    6a:87:ff:2b:ae:eb:b0:36:19:72:6f:51:63:89:67:
                    19:40:19:32:57:0d:77:db:90:a0:5b:90:08:09:c0:
                    56:f5:8e:e7:ac:b2:dd:43:41:85:94:0b:17:98:c0:
                    a3:70:3e:4f:60:ab:6f:7c:49:13:a1:e9:63:5c:98:
                    32:0b:e3:5b:05:51:64:3e:3c:d5:2e:0e:16:ec:df:
                    98:a1:ba:e9:88:d5:36:14:e4:27:cc:ff:9a:c1:b7:
                    d6:e9:26:8c:e3:07:9d:d7:8f:4d:ef:d5:c4:46:70:
                    f4:07:cf:10:f8:aa:14:20:b2:00:be:16:98:8b:31:
                    ad:f0:d7:53:b7:a8:17:26:c2:60:0d:9f:48:e9:33:
                    e3:0b:53:88:aa:d7:1f:35:11:41:72:0a:45:c3:77:
                    b4:2b:e9:b8:95:56:ff:63:c4:b8:d7:6a:f9:43:2b:
                    4e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:E1:54:92:72:AF:F5:BA:00:55:E7:12:33:B1:6E:E5:4A:AA:E3
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:57:c4:11:42:5a:5b:2c:b2:96:6f:1b:a6:53:33:e6:1e:8c:
         5c:2a:da:ba:4e:9a:b0:93:fd:58:00:4e:7f:b9:44:25:b0:f5:
         a6:a2:58:aa:3e:54:ad:f0:68:55:97:d5:97:29:13:29:16:24:
         91:cf:ae:a4:1f:da:52:3b:c5:22:ac:ba:10:62:03:3c:e1:5a:
         3e:da:9f:05:c0:14:48:19:7e:6b:d1:ce:66:a4:b5:32:6e:0c:
         f3:79:90:3c:9a:0c:f7:7c:a6:5f:e6:3d:7e:96:ff:9e:f2:f6:
         8c:cb:af:42:c2:5a:85:5d:d2:2d:64:a8:10:1f:90:b0:9b:9f:
         c5:ab:f9:17:d5:08:e1:0b:1a:01:d9:43:74:a5:c0:cf:f2:ce:
         95:27:e7:8f:01:79:01:31:19:03:9a:89:d3:85:23:99:f6:a9:
         96:42:07:79:35:9a:7b:15:fc:9f:e1:50:3d:60:89:18:45:b0:
         74:19:8d:20:43:93:4f:fb:68:66:b4:21:ce:9a:87:fd:89:0b:
         74:4f:3b:51:39:69:9b:a6:05:11:64:55:c2:a2:da:a3:ee:e0:
         a6:54:f8:8b:8e:8d:35:d5:a1:15:2d:70:2b:9f:79:eb:4c:06:
         83:0c:17:96:75:12:dd:85:44:27:fa:14:06:69:d9:7a:a3:31:
         38:61:18:26
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUARPhplOBG9DS8vWgBD1JH2HirvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjExMDYyMDQwMzVaFw0yMzExMDUyMDQ1MzVaMDMxMTAvBgNV
BAMTKEI2QThFMTU0OTI3MkFGRjVCQTAwNTVFNzEyMzNCMTZFRTU0QUFBRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbravAk3wZT040xOsCZB+xOBSE
RMmT9sKzpbaFjhw/5B+mNGZTMlANnY3SB94Ro4NKsAlqxNU6jdKKkrsKJNzuWo/z
OkY6e9QKGTJooFpy8nQ5eHHnQzuM12qH/yuu67A2GXJvUWOJZxlAGTJXDXfbkKBb
kAgJwFb1juesst1DQYWUCxeYwKNwPk9gq298SROh6WNcmDIL41sFUWQ+PNUuDhbs
35ihuumI1TYU5CfM/5rBt9bpJozjB53Xj03v1cRGcPQHzxD4qhQgsgC+FpiLMa3w
11O3qBcmwmANn0jpM+MLU4iq1x81EUFyCkXDd7Qr6biVVv9jxLjXavlDK05/AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUtqjhVJJyr/W6AFXnEjOxbuVKquMwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyNzI2OTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YJwwDQYJKoZIhvcNAQELBQADggEBALdX
xBFCWlssspZvG6ZTM+YejFwq2rpOmrCT/VgATn+5RCWw9aaiWKo+VK3waFWX1Zcp
EykWJJHPrqQf2lI7xSKsuhBiAzzhWj7anwXAFEgZfmvRzmaktTJuDPN5kDyaDPd8
pl/mPX6W/57y9ozLr0LCWoVd0i1kqBAfkLCbn8Wr+RfVCOELGgHZQ3SlwM/yzpUn
548BeQExGQOaidOFI5n2qZZCB3k1mnsV/J/hUD1giRhFsHQZjSBDk0/7aGa0Ic6a
h/2JC3RPO1E5aZumBRFkVcKi2qPu4KZU+IuOjTXVoRUtcCufeetMBoMMF5Z1Et2F
RCf6FAZp2XqjMThhGCY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org