Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400377.roa
File:                     AS400377.roa (raw, json)
Hash identifier:          UJdEjgG9fub/sMSaWJ3zc9s/lLDoSUsnu4jaRFh3MI4=
Subject key identifier:   40:CD:1D:D5:F6:9D:79:D5:11:51:38:57:4A:E9:B6:D6:05:34:A2:71
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       03211B62AB4102403C350AA94C14A91E06CFF2B3
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400377.roa
Signing time:             Fri 25 Nov 2022 00:08:54 +0000
ROA not before:           Fri 25 Nov 2022 00:03:54 +0000
ROA not after:            Fri 24 Nov 2023 00:08:54 +0000
asID:                     400377
IP address blocks:        191.101.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:1b:62:ab:41:02:40:3c:35:0a:a9:4c:14:a9:1e:06:cf:f2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 00:03:54 2022 GMT
            Not After : Nov 24 00:08:54 2023 GMT
        Subject: CN=40CD1DD5F69D79D5115138574AE9B6D60534A271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:cd:2c:6c:2f:1f:65:b1:62:aa:b7:2f:1c:
                    3b:cb:de:20:c4:f1:d6:17:9e:69:fd:bc:cd:86:0c:
                    f8:04:ba:ab:86:40:d8:ee:aa:30:4b:2e:c0:e4:61:
                    fa:ad:22:66:67:b3:cf:0a:9e:0b:24:f3:af:8c:04:
                    8d:4e:34:b3:1b:aa:03:72:61:81:b2:c0:9d:69:c3:
                    4c:12:5b:58:20:bc:05:1b:ed:9e:47:00:54:c1:d8:
                    27:a7:b3:13:27:c0:f6:9e:fc:1e:69:04:c3:b1:d5:
                    ea:6e:53:06:9f:bf:bf:56:db:95:24:09:1a:f8:97:
                    61:5c:6c:61:d2:83:5b:13:d4:30:2c:3c:8a:db:10:
                    5b:c1:77:da:99:35:5e:64:df:db:6e:c7:41:16:96:
                    96:17:f2:e3:c9:ac:3f:57:66:03:87:ad:c7:dd:39:
                    d6:c6:3e:0b:70:29:4f:95:74:18:90:49:7b:e6:5d:
                    e8:84:71:fa:e8:c9:72:c6:6b:4e:c6:bc:97:58:e1:
                    ed:13:06:00:a4:af:a4:e8:89:15:8b:99:4f:07:01:
                    59:b6:3e:43:31:24:5f:50:b4:62:a2:8c:7f:36:dd:
                    94:56:95:2c:aa:b5:96:9a:2a:23:5c:fe:8e:14:ee:
                    45:bc:9c:16:2d:5f:66:15:6e:7f:6c:f2:80:7b:d0:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:1D:D5:F6:9D:79:D5:11:51:38:57:4A:E9:B6:D6:05:34:A2:71
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:de:dd:93:ff:6e:45:f4:be:2f:ef:45:f2:e0:65:e8:ff:
         1c:97:17:5c:c7:37:af:6c:76:45:ec:1c:b1:57:e7:0b:92:de:
         22:1d:62:35:bf:87:4d:aa:b4:25:c0:97:c7:c8:03:59:05:1e:
         ca:5d:f5:d8:8b:f8:2d:1b:00:51:2b:62:05:fc:25:bf:eb:37:
         12:33:ba:17:78:ae:47:5e:de:e9:05:7e:5b:42:bc:21:e6:ae:
         9c:2f:20:fc:f3:da:17:0f:83:93:8e:a7:81:ab:2a:ff:79:10:
         aa:ef:cc:15:41:a6:e0:6a:c3:c6:de:e5:6b:22:a9:0f:08:b7:
         71:12:89:5e:35:8e:f7:f3:85:f2:b5:81:0c:11:19:dd:19:42:
         f7:48:a4:d5:53:1f:72:e2:00:bc:d3:27:56:c6:b5:9e:89:db:
         0a:2a:32:ce:c2:b1:44:12:2a:c2:fb:52:77:c8:7f:6c:c2:a6:
         2e:81:81:ce:14:2d:93:19:62:96:44:48:78:4f:b9:b3:59:0a:
         15:63:15:56:8e:e6:d0:de:f3:7d:da:ff:e9:eb:26:6b:c0:f2:
         64:5e:18:1f:54:57:5d:ee:61:da:19:2f:1d:0b:a2:51:0c:85:
         d9:e6:a1:98:64:cb:28:88:0d:6f:03:e4:10:1a:8f:8e:bd:fe:
         4f:d4:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org