Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207588.roa
File:                     AS207588.roa (raw, json)
Hash identifier:          zmhG80Snqkyh2bW4xZJfxMVLun7bQH7ylyiV6aiUu0c=
Subject key identifier:   2B:71:F1:DA:26:83:2B:26:7D:16:03:B0:CA:3A:B7:D9:02:EE:58:28
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       6756A60D65AA3CEF6F9FF67910A7605ABB38B226
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207588.roa
Signing time:             Mon 28 Nov 2022 12:18:26 +0000
ROA not before:           Mon 28 Nov 2022 12:13:26 +0000
ROA not after:            Mon 27 Nov 2023 12:18:26 +0000
asID:                     207588
IP address blocks:        191.101.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:56:a6:0d:65:aa:3c:ef:6f:9f:f6:79:10:a7:60:5a:bb:38:b2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:26 2022 GMT
            Not After : Nov 27 12:18:26 2023 GMT
        Subject: CN=2B71F1DA26832B267D1603B0CA3AB7D902EE5828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:a4:69:c3:3a:ea:f5:55:bd:19:f4:c5:c6:
                    f0:75:33:82:c3:2f:e6:d3:e4:21:bc:e6:15:1d:84:
                    4a:b7:14:5f:e3:8e:96:9b:17:a9:74:4b:4f:2a:42:
                    d9:92:1d:8c:45:77:01:9a:ff:c6:13:e6:4a:93:1f:
                    41:cc:66:5d:56:7d:14:21:e4:07:47:12:85:9f:56:
                    ed:12:77:32:59:a6:05:06:7c:8d:fe:8f:a5:22:a7:
                    39:23:c3:35:86:f3:12:e7:fb:cb:12:4b:d8:11:d6:
                    8e:f3:d7:c3:cd:cc:01:c9:e4:8e:d9:c5:5f:b4:80:
                    86:f4:92:5e:77:1e:71:e8:73:1a:e1:a2:2f:91:a5:
                    56:5d:32:5f:4a:f1:a7:53:01:7e:5d:68:8d:67:59:
                    cc:cd:04:db:91:23:8e:f0:4a:ce:76:b4:44:48:a8:
                    99:63:d6:5e:d8:9a:09:3e:75:35:3d:04:db:c3:66:
                    ac:93:b3:01:5b:ed:14:cd:9b:45:89:8d:68:92:b7:
                    12:20:6b:6d:3b:a8:3b:cf:72:cd:cb:9f:d3:f3:b6:
                    05:63:fa:9a:ef:2c:98:81:3d:63:66:b7:19:8b:08:
                    ca:65:2d:8b:36:93:a8:e6:49:88:52:e2:0e:dc:bd:
                    97:aa:ef:b5:a0:8a:ce:6e:4e:88:04:0d:9d:98:32:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:71:F1:DA:26:83:2B:26:7D:16:03:B0:CA:3A:B7:D9:02:EE:58:28
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207588.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:4c:cc:09:40:28:d0:59:4e:30:69:33:ed:78:2d:d2:df:74:
         5e:7e:a6:b2:e1:aa:a0:d2:fc:d8:1d:21:10:8b:38:bb:62:b3:
         f3:36:90:b0:cf:d6:60:24:4b:a8:f5:5e:f5:2e:1a:cb:bf:fc:
         5a:b6:42:ac:ea:43:fb:21:36:94:f8:25:8d:c1:43:c5:50:c2:
         d2:81:47:c4:ed:b2:bd:2e:7e:61:bf:98:76:91:5c:df:de:ba:
         0b:9d:6f:7d:1d:4e:6a:23:9f:65:a9:4b:06:a0:79:f7:63:da:
         c3:ef:fd:62:05:ca:7f:db:16:07:32:5b:e2:be:cd:f8:1e:ca:
         39:13:ac:42:e3:57:0a:15:74:af:05:81:ac:ff:06:02:01:b1:
         cf:8a:3a:bc:a6:2b:b4:ca:e7:14:53:d0:5f:00:67:ec:cd:49:
         d2:02:2b:0d:0e:6c:ad:f4:6f:1a:32:33:18:c3:02:26:a5:56:
         18:08:22:5a:e4:76:3c:72:d4:2b:cc:48:f4:80:32:1c:23:84:
         8d:19:a0:96:c8:78:24:bd:03:af:d3:30:aa:2c:ae:75:71:65:
         26:c0:56:17:15:d1:df:3b:0a:5b:88:20:a0:73:44:55:be:17:
         64:36:db:46:10:56:f1:58:31:c2:b1:70:c4:3c:db:ba:1c:8d:
         5b:cd:a4:8f
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUZ1amDWWqPO9vn/Z5EKdgWrs4siYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMjZaFw0yMzExMjcxMjE4MjZaMDMxMTAvBgNV
BAMTKDJCNzFGMURBMjY4MzJCMjY3RDE2MDNCMENBM0FCN0Q5MDJFRTU4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoqRpwzrq9VW9GfTFxvB1M4LD
L+bT5CG85hUdhEq3FF/jjpabF6l0S08qQtmSHYxFdwGa/8YT5kqTH0HMZl1WfRQh
5AdHEoWfVu0SdzJZpgUGfI3+j6UipzkjwzWG8xLn+8sSS9gR1o7z18PNzAHJ5I7Z
xV+0gIb0kl53HnHocxrhoi+RpVZdMl9K8adTAX5daI1nWczNBNuRI47wSs52tERI
qJlj1l7Ymgk+dTU9BNvDZqyTswFb7RTNm0WJjWiStxIga207qDvPcs3Ln9PztgVj
+prvLJiBPWNmtxmLCMplLYs2k6jmSYhS4g7cvZeq77Wgis5uTogEDZ2YMvHdAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUK3Hx2iaDKyZ9FgOwyjq32QLuWCgwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMDc1ODgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZWUwDQYJKoZIhvcNAQELBQADggEBAK9M
zAlAKNBZTjBpM+14LdLfdF5+prLhqqDS/NgdIRCLOLtis/M2kLDP1mAkS6j1XvUu
Gsu//Fq2QqzqQ/shNpT4JY3BQ8VQwtKBR8Ttsr0ufmG/mHaRXN/eugudb30dTmoj
n2WpSwagefdj2sPv/WIFyn/bFgcyW+K+zfgeyjkTrELjVwoVdK8Fgaz/BgIBsc+K
OrymK7TK5xRT0F8AZ+zNSdICKw0ObK30bxoyMxjDAialVhgIIlrkdjxy1CvMSPSA
MhwjhI0ZoJbIeCS9A6/TMKosrnVxZSbAVhcV0d87CluIIKBzRFW+F2Q220YQVvFY
McKxcMQ827ocjVvNpI8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org