Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS399045.roa
File:                     AS399045.roa (raw, json)
Hash identifier:          1X/ApPqIkpgWYgojQ1NMZS+Np/Ngz8Tn3AQbRw6IZKA=
Subject key identifier:   38:75:AE:1B:D8:20:15:F0:9E:FD:8F:09:63:1A:D4:B7:F2:F8:B2:D9
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0F5E9454F1ADF767CB444F9F8B84563E8CF52137
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS399045.roa
Signing time:             Sat 27 Aug 2022 09:51:08 +0000
ROA not before:           Sat 27 Aug 2022 09:46:08 +0000
ROA not after:            Sat 26 Aug 2023 09:51:08 +0000
asID:                     399045
IP address blocks:        191.96.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5e:94:54:f1:ad:f7:67:cb:44:4f:9f:8b:84:56:3e:8c:f5:21:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:46:08 2022 GMT
            Not After : Aug 26 09:51:08 2023 GMT
        Subject: CN=3875AE1BD82015F09EFD8F09631AD4B7F2F8B2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:34:1b:55:55:5c:41:05:6b:2d:3b:b9:db:
                    ad:92:17:2e:2b:9f:5f:a4:8d:47:43:e2:42:7b:6e:
                    15:1b:c5:2c:b3:53:9c:5b:45:19:71:6a:aa:16:31:
                    0e:1e:94:9b:d1:ef:f7:8e:fe:78:c6:7f:2b:75:17:
                    f4:62:72:6a:59:3b:14:42:45:a8:8b:0c:93:14:70:
                    61:29:ba:24:78:7d:6f:70:48:8b:97:17:98:26:9b:
                    f2:49:ee:54:32:d8:9d:d8:89:45:be:e0:4b:8a:c8:
                    62:dc:5d:98:c7:1b:11:e1:87:06:d2:1a:37:44:b6:
                    fe:75:b9:73:b1:47:2a:08:5d:2f:47:3f:4e:8e:4c:
                    df:da:6b:da:ff:c8:f4:59:01:06:7a:81:b0:c7:91:
                    9c:76:69:ad:66:57:34:c4:e1:4a:34:ec:c3:41:7e:
                    d0:9e:2f:94:5b:07:53:d0:76:52:ac:f4:66:ac:98:
                    09:74:b2:ae:2b:4c:24:21:b8:ca:83:21:d3:37:79:
                    d8:7a:04:3b:d5:ac:b9:58:33:a5:b0:b4:2b:2e:ed:
                    20:76:bd:b6:76:9d:a8:88:02:dc:d9:e3:c8:79:a1:
                    15:00:c2:f4:57:b4:0e:57:b1:23:1f:9f:f6:85:4f:
                    38:84:99:13:94:02:03:ad:63:76:ce:aa:40:82:a7:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:75:AE:1B:D8:20:15:F0:9E:FD:8F:09:63:1A:D4:B7:F2:F8:B2:D9
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS399045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:33:0e:f8:00:1e:76:c1:5f:fa:59:f2:7c:2d:a5:1d:b9:
         d4:ee:83:62:73:f4:da:6f:bd:bd:70:0d:b0:0f:6d:cd:54:35:
         49:ef:70:65:71:91:12:fd:5f:44:33:39:f0:7b:20:d7:82:b7:
         46:8a:97:bf:f0:26:67:e2:66:43:e1:ee:db:59:78:6d:9f:af:
         34:d4:6c:c8:cc:c8:01:81:92:dd:e8:11:df:82:68:c1:3d:11:
         fd:58:49:e7:0d:68:fa:6f:11:13:42:6a:c2:5a:34:bf:d5:c5:
         52:92:ac:d5:a2:61:88:0e:a2:1b:36:88:1b:37:0a:c6:a8:f6:
         9c:2a:f5:dc:93:b8:19:f4:a4:a0:a1:da:2f:59:bb:0a:56:b8:
         ee:5b:5f:95:e4:07:9d:6d:12:36:02:de:4b:e1:78:b9:6a:67:
         bb:da:f1:78:7e:04:ca:e7:5b:55:ef:21:04:08:87:b7:0a:f0:
         9d:6a:e8:46:f5:9a:05:60:2a:2f:97:5a:e6:a7:f5:30:1e:a1:
         92:ca:56:cc:02:23:fb:31:84:9e:09:8e:89:9e:85:36:a3:71:
         2f:ea:63:b6:3a:d9:99:52:dd:fc:91:17:9c:3a:02:00:0d:e2:
         3f:e1:5d:72:47:6d:f2:ed:08:09:a9:b3:60:53:90:41:f2:75:
         08:6f:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org