Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272882.roa
File:                     AS272882.roa (raw, json)
Hash identifier:          9lGF0C+n1aAOX01N54M04QaFYC+0tWgMW1CjdorraXQ=
Subject key identifier:   A1:BC:09:03:7D:60:DE:9A:33:FA:72:5D:BA:D7:4E:72:A3:C9:41:1A
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       3C02FAA5BC4A33FE429236BFD2B1F6978ABB4353
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272882.roa
Signing time:             Mon 24 Oct 2022 18:41:44 +0000
ROA not before:           Mon 24 Oct 2022 18:36:44 +0000
ROA not after:            Mon 23 Oct 2023 18:41:44 +0000
asID:                     272882
IP address blocks:        191.96.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:02:fa:a5:bc:4a:33:fe:42:92:36:bf:d2:b1:f6:97:8a:bb:43:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 24 18:36:44 2022 GMT
            Not After : Oct 23 18:41:44 2023 GMT
        Subject: CN=A1BC09037D60DE9A33FA725DBAD74E72A3C9411A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:fd:5a:84:7f:2f:7c:27:63:a9:47:0c:58:
                    58:3c:46:b9:c2:d6:2d:57:4a:f5:ba:59:8c:10:60:
                    2b:10:4c:22:65:73:29:5c:da:1e:47:75:a3:58:9b:
                    b0:cc:59:7b:4c:4e:3a:38:3c:c5:61:38:3c:c8:a5:
                    b3:35:12:b4:9c:5f:8f:47:ba:a2:75:24:8f:27:aa:
                    cc:36:c8:74:d1:23:3a:f3:37:d5:b1:0e:7d:9b:f3:
                    8a:d5:77:20:6d:4e:dc:14:38:1d:02:2e:81:da:ef:
                    da:6f:5a:7a:b2:b8:0b:6f:e6:b8:75:6d:dc:3a:fe:
                    34:d5:12:6b:41:d0:fc:38:06:85:96:31:e7:33:ed:
                    36:94:7f:3a:61:ff:29:8b:07:c9:97:3f:25:87:fb:
                    5d:5c:bd:33:c7:cb:83:0d:20:58:6d:07:63:ef:86:
                    cf:41:e9:47:2d:d1:78:41:b3:4e:e9:9b:98:ef:ea:
                    b8:e1:aa:2f:ea:de:3f:3a:4e:97:9b:ff:60:18:3b:
                    cb:0f:b3:c5:8a:3a:2e:4e:e0:36:d0:bd:12:1c:ae:
                    f2:5b:ef:27:21:b6:80:68:c4:d8:85:24:eb:97:c9:
                    81:3a:c5:58:62:f3:aa:0f:1b:3f:4b:d1:09:48:3d:
                    ed:a5:14:eb:96:43:63:9e:7c:4e:4b:4b:20:16:1b:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:09:03:7D:60:DE:9A:33:FA:72:5D:BA:D7:4E:72:A3:C9:41:1A
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272882.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d2:d3:f4:b2:dc:29:fc:8e:c4:3e:09:5c:fb:d7:cf:b3:a4:
         3f:48:9b:26:95:dd:e5:ce:a7:02:06:5a:32:8c:ea:15:85:cd:
         a9:1d:42:b6:4f:53:92:ca:07:92:05:74:dd:93:f3:ad:00:dc:
         96:3c:58:99:67:3d:36:2c:06:0f:d4:93:df:39:76:a3:5b:8e:
         8c:77:fb:b2:71:34:c4:d6:9b:ef:39:aa:88:e8:7c:6c:29:8b:
         e2:f3:b7:06:c3:f8:b9:41:27:6c:2c:5a:6c:5d:c9:1c:a5:55:
         55:5e:bf:38:8b:c7:8c:18:25:40:e1:a2:dc:78:30:8f:b7:96:
         a2:c2:c8:6c:39:25:f5:f9:31:96:97:11:fc:b2:67:35:6e:30:
         f4:2a:36:ba:96:b9:a9:1e:5d:26:33:64:f1:cf:9b:f7:1c:75:
         de:81:ae:e5:84:8b:d6:fa:cd:8e:c2:c5:f5:e9:76:bc:32:e5:
         90:90:15:a2:d1:43:03:fe:f0:8a:07:f5:59:07:eb:6d:93:2e:
         3b:bf:22:27:05:63:78:f5:ad:8c:8e:84:cc:52:ae:5a:3e:a4:
         ad:4b:a2:77:9d:3c:ab:a5:43:8f:4d:4c:08:31:e6:62:3c:07:
         e1:db:73:65:89:b5:48:c8:3e:3f:48:9e:60:d0:df:be:71:85:
         4c:50:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org