Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          uKj1qBkys8sOC9nbWL9dTvcV9JxYN7rZXVfyFVqzQAk=
Subject key identifier:   C6:5C:A7:47:84:E0:5A:58:7A:05:44:52:58:1D:2F:C8:5E:20:6A:93
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5F7279C9ED6A1716362FD7E8192A2DFBAB6F5927
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS16276.roa
Signing time:             Mon 28 Nov 2022 12:18:17 +0000
ROA not before:           Mon 28 Nov 2022 12:13:17 +0000
ROA not after:            Mon 27 Nov 2023 12:18:17 +0000
asID:                     16276
IP address blocks:        194.110.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:72:79:c9:ed:6a:17:16:36:2f:d7:e8:19:2a:2d:fb:ab:6f:59:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:17 2022 GMT
            Not After : Nov 27 12:18:17 2023 GMT
        Subject: CN=C65CA74784E05A587A054452581D2FC85E206A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:c5:02:72:d9:8c:25:eb:6c:a7:b2:85:5a:
                    64:64:89:a3:6e:d7:56:e5:a5:e9:c5:5c:fb:54:06:
                    40:01:39:cb:b9:12:c0:bf:2e:9d:26:55:24:b2:25:
                    a5:0b:89:f1:1f:9b:4c:7c:7a:f4:78:0e:a6:e9:fd:
                    74:ae:19:84:b0:84:ad:3a:e3:9b:85:a5:70:b6:fc:
                    d5:77:8a:f0:0a:5f:1e:3d:67:16:03:37:c7:ee:4b:
                    d8:01:5e:55:d0:46:8f:19:14:5e:24:60:e3:62:68:
                    28:b5:c8:6a:35:ca:ec:a2:83:51:30:49:b8:8b:34:
                    f7:f2:62:59:cc:dd:fd:a1:6b:87:5a:49:6f:ac:35:
                    66:d4:82:a7:f4:1b:63:c9:82:84:c7:d4:da:c4:e1:
                    bb:20:cb:eb:df:11:f7:07:98:6a:04:82:6c:49:f8:
                    6c:13:ce:8c:3e:af:19:86:27:e3:2f:8a:a4:ac:c8:
                    b3:ea:b6:2f:d5:69:4f:d9:76:25:10:b8:d6:2b:8d:
                    e3:96:27:2b:e7:28:15:06:4e:72:76:34:3f:e3:d5:
                    e2:f2:a3:97:b0:83:0c:0c:02:f3:89:0a:34:80:11:
                    c7:3f:da:b1:c1:50:fc:de:c2:10:b4:fb:21:40:23:
                    b6:22:09:fb:9f:7e:98:67:5c:c2:35:d9:d4:b5:3c:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5C:A7:47:84:E0:5A:58:7A:05:44:52:58:1D:2F:C8:5E:20:6A:93
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:29:c0:e4:f1:5a:a3:24:ea:fd:a1:f6:78:26:1a:6d:c6:55:
         8f:d5:48:c1:1b:b6:ce:98:95:87:62:a9:46:79:16:4d:f4:3f:
         92:94:02:7c:9d:05:2e:d2:c6:35:a5:31:1c:6b:21:e6:d3:24:
         34:31:5c:a8:3a:6e:27:f5:09:5f:01:89:ee:db:68:6c:49:f5:
         3a:fa:3d:2b:bb:59:22:13:fa:63:47:8e:87:e7:b7:8e:7f:d8:
         bd:5e:42:64:1a:c2:f5:5d:7c:d6:1c:75:81:1e:29:eb:24:8a:
         26:e7:c5:6d:29:17:46:50:72:59:6c:2e:ed:cc:b7:af:35:e0:
         07:18:a7:3a:8e:0d:ec:27:34:c5:c7:ab:2f:dc:08:e1:82:c0:
         7f:22:6c:48:ae:34:ed:5f:15:9d:0a:db:c0:82:67:47:6c:e6:
         12:c6:e4:37:53:71:ee:01:f6:47:1a:2d:df:7c:4e:2b:bf:98:
         8d:42:03:b4:db:a3:8f:f9:14:ad:88:29:f2:f5:7e:ed:98:62:
         5c:1b:44:2f:7c:13:9b:35:65:a2:f9:a3:35:77:b3:79:15:8e:
         3e:9e:9a:15:f4:d5:d3:9a:3e:57:f5:c1:30:66:d2:2c:d3:a0:
         ab:c8:f3:52:b1:b1:13:36:ff:e5:7a:14:4c:40:89:9f:1d:34:
         f8:78:a9:4b
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUX3J5ye1qFxY2L9foGSot+6tvWScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMTdaFw0yMzExMjcxMjE4MTdaMDMxMTAvBgNV
BAMTKEM2NUNBNzQ3ODRFMDVBNTg3QTA1NDQ1MjU4MUQyRkM4NUUyMDZBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHcUCctmMJetsp7KFWmRkiaNu
11blpenFXPtUBkABOcu5EsC/Lp0mVSSyJaULifEfm0x8evR4Dqbp/XSuGYSwhK06
45uFpXC2/NV3ivAKXx49ZxYDN8fuS9gBXlXQRo8ZFF4kYONiaCi1yGo1yuyig1Ew
SbiLNPfyYlnM3f2ha4daSW+sNWbUgqf0G2PJgoTH1NrE4bsgy+vfEfcHmGoEgmxJ
+GwTzow+rxmGJ+MviqSsyLPqti/VaU/ZdiUQuNYrjeOWJyvnKBUGTnJ2ND/j1eLy
o5ewgwwMAvOJCjSAEcc/2rHBUPzewhC0+yFAI7YiCfuffphnXMI12dS1PIM/AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUxlynR4TgWlh6BURSWB0vyF4gapMwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMxNjI3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJu8jANBgkqhkiG9w0BAQsFAAOCAQEANinA
5PFaoyTq/aH2eCYabcZVj9VIwRu2zpiVh2KpRnkWTfQ/kpQCfJ0FLtLGNaUxHGsh
5tMkNDFcqDpuJ/UJXwGJ7ttobEn1Ovo9K7tZIhP6Y0eOh+e3jn/YvV5CZBrC9V18
1hx1gR4p6ySKJufFbSkXRlByWWwu7cy3rzXgBxinOo4N7Cc0xcerL9wI4YLAfyJs
SK407V8VnQrbwIJnR2zmEsbkN1Nx7gH2Rxot33xOK7+YjUIDtNujj/kUrYgp8vV+
7ZhiXBtEL3wTmzVlovmjNXezeRWOPp6aFfTV05o+V/XBMGbSLNOgq8jzUrGxEzb/
5XoUTECJnx00+HipSw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org