Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS19844.roa
File:                     AS19844.roa (raw, json)
Hash identifier:          a+eYSh2Yb3t5dqtGabhsuH6ausA6CewDHXErLpIM0/g=
Subject key identifier:   F3:BD:C4:60:E9:BC:75:95:C5:9F:5C:D8:49:80:0E:B0:16:A3:FE:DA
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3E68AAD0275A23A0CC4D4459DB8148CE75145A67
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS19844.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     19844
IP address blocks:        191.96.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:68:aa:d0:27:5a:23:a0:cc:4d:44:59:db:81:48:ce:75:14:5a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=F3BDC460E9BC7595C59F5CD849800EB016A3FEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:22:5b:e6:16:3e:62:c8:05:b3:2f:c5:d8:
                    db:c0:6b:4f:36:c5:dd:14:40:b7:90:02:be:f6:a1:
                    3d:04:27:2f:0c:c4:79:33:f7:61:cd:74:4d:78:95:
                    4b:5b:56:63:9c:ee:b1:98:24:f3:76:f4:10:d0:c9:
                    ce:2e:6c:96:eb:a9:d1:63:1a:bc:af:8f:f1:db:2b:
                    f1:98:be:6f:0d:09:75:dc:59:71:c3:71:76:df:e7:
                    a6:00:15:67:ea:49:6a:69:cd:d6:19:48:74:d1:a0:
                    d6:2b:8a:99:69:c4:48:e0:64:f7:b2:15:55:09:17:
                    01:e5:78:7b:d0:ad:3f:2e:29:43:09:3e:74:f5:ac:
                    bf:ca:43:61:d8:99:39:93:6e:50:87:2a:c2:83:ac:
                    09:ba:62:3e:e0:2f:98:b3:1d:e5:c7:39:0b:0a:21:
                    fe:21:cb:b5:64:6a:80:23:c0:a6:c6:16:98:7e:be:
                    6d:48:5c:f9:18:a8:3d:bd:b8:0c:e1:44:3d:63:4d:
                    f8:00:08:7f:16:06:51:f6:79:73:73:29:1e:21:ea:
                    45:2e:01:be:06:e8:0f:e3:36:c1:b4:ef:85:c5:96:
                    37:5a:23:a1:eb:aa:e8:8f:c0:71:8c:87:37:12:cc:
                    57:67:ee:94:c8:70:a7:32:dd:96:14:59:84:b1:aa:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BD:C4:60:E9:BC:75:95:C5:9F:5C:D8:49:80:0E:B0:16:A3:FE:DA
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS19844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:90:a0:a6:0f:49:c3:c6:00:51:90:6d:28:00:98:fa:69:65:
         9d:cb:43:aa:0e:2b:31:f2:57:70:15:18:7f:b1:74:ae:e3:4f:
         aa:7e:b0:a2:42:ad:ef:85:68:73:e5:b9:9f:3b:e4:94:88:04:
         03:ee:1f:b3:7a:46:26:ae:46:9e:20:c2:c7:37:17:5b:3e:14:
         b6:38:3f:f9:69:3e:0b:32:6c:21:6c:62:20:90:d2:d0:2e:84:
         aa:85:9d:52:2f:44:d8:97:4b:bb:66:6e:44:30:56:d0:c3:a3:
         5e:60:95:6d:8e:e7:cb:3e:fc:bf:eb:d8:d9:d9:0c:3b:02:45:
         9c:dd:4b:00:bb:fa:d3:a9:07:53:48:f8:31:b1:c3:83:9a:52:
         2a:18:50:7b:c5:90:2a:c1:fc:33:87:07:5f:30:a1:99:04:fa:
         4c:9a:af:a8:10:a5:1f:93:92:45:48:46:db:13:d3:61:7d:da:
         99:22:91:38:a5:5d:bd:81:2a:ca:a9:99:07:b8:30:43:85:7e:
         8d:4c:1c:4c:7b:b8:87:52:74:07:2c:a2:1f:21:59:08:ff:e9:
         d3:61:d0:c4:06:b4:5c:0a:0d:bd:e0:59:66:f4:e8:e0:11:09:
         5e:70:5e:1e:04:be:77:3e:75:69:88:a1:5c:25:a2:11:3e:dc:
         2f:47:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org