Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS31898.roa
File:                     AS31898.roa (raw, json)
Hash identifier:          FQZrYRt3/kfy0uAeGE94zdjqBLox7GPZZsviCRbFwj4=
Subject key identifier:   4A:16:1B:36:8E:BB:E1:08:61:A7:CD:6B:CD:E0:4A:A9:7D:D8:F5:9F
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0D41A665084159A664C2E73E971BFB56F185E72D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS31898.roa
Signing time:             Sat 27 Aug 2022 09:47:33 +0000
ROA not before:           Sat 27 Aug 2022 09:42:33 +0000
ROA not after:            Sat 26 Aug 2023 09:47:33 +0000
asID:                     31898
IP address blocks:        193.227.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:41:a6:65:08:41:59:a6:64:c2:e7:3e:97:1b:fb:56:f1:85:e7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:42:33 2022 GMT
            Not After : Aug 26 09:47:33 2023 GMT
        Subject: CN=4A161B368EBBE10861A7CD6BCDE04AA97DD8F59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:d4:1d:b8:16:ec:4e:44:d2:e2:9a:26:75:
                    e2:99:e4:32:43:12:8f:a6:54:ac:54:72:46:d0:37:
                    f7:37:7f:79:90:b0:3c:90:39:63:ad:78:58:fe:e8:
                    9b:8c:20:6a:98:1b:7f:79:99:e8:2e:ae:56:cb:0c:
                    ad:e7:81:9c:e1:4a:04:88:fa:3c:bc:dc:7f:53:87:
                    ee:f9:75:dd:7b:c0:3d:01:38:09:fb:ee:24:6b:f5:
                    9a:56:28:b0:11:75:45:6e:c3:d0:c5:cf:ec:85:95:
                    30:42:b4:71:5e:29:b6:e8:18:19:55:e5:f3:7f:8e:
                    e8:a2:87:1f:10:8c:6d:e8:55:cf:4c:53:84:b9:29:
                    11:12:ed:75:23:de:7a:b3:f5:39:6a:89:78:c8:5f:
                    cd:1a:9a:58:42:58:60:37:03:85:11:15:66:a9:f6:
                    b3:d5:0c:58:43:da:dc:33:e4:26:4c:32:2f:71:be:
                    4e:d1:f1:42:5d:78:fb:ab:7f:43:c6:2f:3a:6a:7b:
                    f9:15:d4:13:02:b3:e0:96:d4:ca:da:ca:84:6e:fb:
                    4e:29:2d:c7:75:d0:4d:d1:26:ad:6f:9f:21:a2:77:
                    53:89:64:1c:0d:67:42:26:37:b0:e5:6a:d6:a1:3e:
                    5f:5f:1f:ec:d1:8a:b1:88:c3:d1:92:53:3f:d3:44:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:16:1B:36:8E:BB:E1:08:61:A7:CD:6B:CD:E0:4A:A9:7D:D8:F5:9F
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS31898.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:a9:a0:10:78:51:62:4d:d0:bb:eb:71:a4:c1:ad:6e:e0:
         86:df:3b:2c:43:7d:12:bf:5d:2b:35:be:5b:9f:cf:6c:fd:78:
         b0:3d:c9:c3:1a:81:fd:e7:21:2c:8f:1a:b8:b3:b3:99:ea:9b:
         76:34:86:c3:d4:69:50:1b:b4:9f:0f:4a:ad:43:1c:31:23:ae:
         69:6a:c3:71:d3:30:bd:76:e9:ed:5a:23:af:9b:5a:f1:dd:61:
         de:34:71:5e:a8:b3:97:d3:75:41:b9:cf:66:ee:8a:3d:cd:9f:
         4b:90:c4:1a:07:a8:68:fc:0c:bc:0d:df:5f:77:99:85:66:9c:
         d1:2d:24:bf:f4:7e:3f:77:10:b3:4f:32:ae:7d:cf:08:a7:20:
         f2:f5:a3:77:a0:bf:b0:42:74:00:09:fd:f9:dd:2b:80:0f:c3:
         cd:08:ad:c1:bc:fc:79:3d:dd:41:7d:14:1b:27:98:a7:d4:33:
         cf:9a:d9:73:00:f5:d6:bd:a0:7f:b1:0d:02:bc:43:b0:6b:5e:
         3a:4c:ba:ed:77:ab:cf:b1:9f:15:21:3c:ca:a2:20:b0:85:c5:
         c4:d4:68:6f:12:9c:0b:cb:6a:f4:15:ba:b7:84:f0:1d:88:f5:
         66:01:f2:4d:2b:ae:47:88:4c:74:39:1d:d6:30:a4:72:0e:69:
         dc:10:3f:e2
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUDUGmZQhBWaZkwuc+lxv7VvGF5y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQyMzNaFw0yMzA4MjYwOTQ3MzNaMDMxMTAvBgNV
BAMTKDRBMTYxQjM2OEVCQkUxMDg2MUE3Q0Q2QkNERTA0QUE5N0REOEY1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZNQduBbsTkTS4pomdeKZ5DJD
Eo+mVKxUckbQN/c3f3mQsDyQOWOteFj+6JuMIGqYG395megurlbLDK3ngZzhSgSI
+jy83H9Th+75dd17wD0BOAn77iRr9ZpWKLARdUVuw9DFz+yFlTBCtHFeKbboGBlV
5fN/juiihx8QjG3oVc9MU4S5KRES7XUj3nqz9TlqiXjIX80amlhCWGA3A4URFWap
9rPVDFhD2twz5CZMMi9xvk7R8UJdePurf0PGLzpqe/kV1BMCs+CW1MrayoRu+04p
Lcd10E3RJq1vnyGid1OJZBwNZ0ImN7DlatahPl9fH+zRirGIw9GSUz/TRPalAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUShYbNo674Qhhp81rzeBKqX3Y9Z8wHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMzMTg5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHjhzANBgkqhkiG9w0BAQsFAAOCAQEAKp6p
oBB4UWJN0LvrcaTBrW7ght87LEN9Er9dKzW+W5/PbP14sD3JwxqB/echLI8auLOz
meqbdjSGw9RpUBu0nw9KrUMcMSOuaWrDcdMwvXbp7Vojr5ta8d1h3jRxXqizl9N1
QbnPZu6KPc2fS5DEGgeoaPwMvA3fX3eZhWac0S0kv/R+P3cQs08yrn3PCKcg8vWj
d6C/sEJ0AAn9+d0rgA/DzQitwbz8eT3dQX0UGyeYp9Qzz5rZcwD11r2gf7ENArxD
sGteOky67Xerz7GfFSE8yqIgsIXFxNRobxKcC8tq9BW6t4TwHYj1ZgHyTSuuR4hM
dDkd1jCkcg5p3BA/4g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org