Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29854.roa
File:                     AS29854.roa (raw, json)
Hash identifier:          JvOgJ9pq0NgVdpA3olBCqmR99kUAspDR6cCYxH8Qklo=
Subject key identifier:   EF:9D:5E:14:69:F1:BF:48:05:95:4A:15:45:8E:97:BF:0C:26:84:E6
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       79E591A100B56AED9DE74D198ABE675E9B14FA60
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29854.roa
Signing time:             Sat 27 Aug 2022 09:45:44 +0000
ROA not before:           Sat 27 Aug 2022 09:40:44 +0000
ROA not after:            Sat 26 Aug 2023 09:45:44 +0000
asID:                     29854
IP address blocks:        191.96.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e5:91:a1:00:b5:6a:ed:9d:e7:4d:19:8a:be:67:5e:9b:14:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:40:44 2022 GMT
            Not After : Aug 26 09:45:44 2023 GMT
        Subject: CN=EF9D5E1469F1BF4805954A15458E97BF0C2684E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:10:66:19:18:fb:a8:7e:f4:74:00:24:cb:
                    1f:33:64:48:0d:07:c1:ea:f3:38:8b:35:d6:76:57:
                    ed:1b:41:35:1c:79:59:ea:87:90:a0:a5:aa:61:9d:
                    28:5d:5c:92:7b:34:93:97:8c:f6:9d:fe:0c:af:b5:
                    ed:ce:61:3e:6f:21:07:8b:d4:97:49:fb:76:47:9b:
                    68:9a:56:b0:72:33:17:ab:43:8f:63:ac:bf:74:74:
                    d7:d6:ba:41:46:e5:62:73:a6:ef:9e:a0:4e:2c:86:
                    68:bb:ee:2e:80:4a:b7:d4:92:60:92:1c:38:aa:9f:
                    09:2f:94:01:18:df:1f:83:ef:2b:ab:b8:97:d4:67:
                    e3:29:d5:fa:f5:88:dd:46:64:ec:55:cc:bb:25:52:
                    76:ca:5d:b1:be:ef:e8:07:6f:27:99:fe:b5:9a:9c:
                    71:ef:be:e8:e2:78:9e:be:ce:35:76:6b:d5:1c:40:
                    9a:1d:c4:1b:e9:4e:4c:f7:ca:be:b9:00:50:ea:1f:
                    9a:d3:e4:70:e6:4d:30:d0:31:7a:92:80:42:1e:e6:
                    d9:8b:19:37:51:df:8e:c4:ff:34:49:fc:56:a6:ab:
                    06:a3:da:af:72:4c:a3:a4:40:b7:9e:e9:af:29:2d:
                    31:8e:bd:2a:16:6b:dc:78:9f:07:be:bf:17:2c:51:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9D:5E:14:69:F1:BF:48:05:95:4A:15:45:8E:97:BF:0C:26:84:E6
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29854.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:d8:76:6d:65:43:13:ca:b6:64:66:27:56:3f:0e:b5:55:
         49:ef:21:5a:ff:5e:90:21:55:1b:54:ce:81:c5:63:03:a6:00:
         4a:d4:43:f5:dc:b0:4d:00:59:da:9b:d4:b2:59:01:9f:26:2e:
         c1:9d:e5:51:86:5d:d7:04:33:72:80:ba:cd:32:51:40:5c:4a:
         3d:c9:3c:eb:0e:e2:5e:9c:22:7d:9b:e5:3c:90:e7:72:4b:02:
         87:5b:42:c5:82:ca:5b:40:0b:a7:2a:8f:ef:d8:a9:a0:30:8d:
         cf:31:47:0e:f5:95:f1:12:3c:29:0c:5f:9b:3a:31:ea:43:b4:
         d0:ce:b6:ca:0d:e1:63:74:df:8a:c1:02:7d:27:47:da:85:5f:
         b9:ba:b1:cc:5b:77:ea:a8:38:fe:d4:b0:fe:1a:f8:c5:5f:1f:
         43:88:2b:28:83:6b:51:ae:41:1c:c4:5e:7f:9c:c4:7f:1e:eb:
         5d:45:da:4c:63:34:32:d6:93:b1:68:d4:74:78:25:96:fb:f5:
         63:19:98:72:d7:b1:76:5b:4a:ff:e0:b5:14:94:e3:67:28:02:
         9a:41:08:a9:cc:04:99:2f:ab:0e:c9:7c:c1:93:49:e2:3b:80:
         5f:88:d5:87:7c:f5:48:2a:9e:a0:06:e2:70:8a:bd:82:b8:05:
         07:cc:c3:d5
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUeeWRoQC1au2d500Zir5nXpsU+mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQwNDRaFw0yMzA4MjYwOTQ1NDRaMDMxMTAvBgNV
BAMTKEVGOUQ1RTE0NjlGMUJGNDgwNTk1NEExNTQ1OEU5N0JGMEMyNjg0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4xBmGRj7qH70dAAkyx8zZEgN
B8Hq8ziLNdZ2V+0bQTUceVnqh5CgpaphnShdXJJ7NJOXjPad/gyvte3OYT5vIQeL
1JdJ+3ZHm2iaVrByMxerQ49jrL90dNfWukFG5WJzpu+eoE4shmi77i6ASrfUkmCS
HDiqnwkvlAEY3x+D7yuruJfUZ+Mp1fr1iN1GZOxVzLslUnbKXbG+7+gHbyeZ/rWa
nHHvvujieJ6+zjV2a9UcQJodxBvpTkz3yr65AFDqH5rT5HDmTTDQMXqSgEIe5tmL
GTdR347E/zRJ/Famqwaj2q9yTKOkQLee6a8pLTGOvSoWa9x4nwe+vxcsURULAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU751eFGnxv0gFlUoVRY6XvwwmhOYwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyOTg1NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9gzjANBgkqhkiG9w0BAQsFAAOCAQEAKxrY
dm1lQxPKtmRmJ1Y/DrVVSe8hWv9ekCFVG1TOgcVjA6YAStRD9dywTQBZ2pvUslkB
nyYuwZ3lUYZd1wQzcoC6zTJRQFxKPck86w7iXpwifZvlPJDncksCh1tCxYLKW0AL
pyqP79ipoDCNzzFHDvWV8RI8KQxfmzox6kO00M62yg3hY3TfisECfSdH2oVfubqx
zFt36qg4/tSw/hr4xV8fQ4grKINrUa5BHMRef5zEfx7rXUXaTGM0MtaTsWjUdHgl
lvv1YxmYctexdltK/+C1FJTjZygCmkEIqcwEmS+rDsl8wZNJ4juAX4jVh3z1SCqe
oAbicIq9grgFB8zD1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org