Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210636.roa
File:                     AS210636.roa (raw, json)
Hash identifier:          7Z5uxlLHgS+HF/bT7T0sO1vVd3X5osPwBadQaJvRZew=
Subject key identifier:   ED:D6:19:8D:A1:EF:D1:42:71:FB:8F:E5:4A:B6:4E:53:83:79:0C:F2
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7D9C931C8CFEF22AAED1C82E0F98E555211082FE
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210636.roa
Signing time:             Sat 25 Feb 2023 07:45:05 +0000
ROA not before:           Sat 25 Feb 2023 07:40:05 +0000
ROA not after:            Sat 24 Feb 2024 07:45:05 +0000
asID:                     210636
IP address blocks:        191.96.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9c:93:1c:8c:fe:f2:2a:ae:d1:c8:2e:0f:98:e5:55:21:10:82:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 25 07:40:05 2023 GMT
            Not After : Feb 24 07:45:05 2024 GMT
        Subject: CN=EDD6198DA1EFD14271FB8FE54AB64E5383790CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:cc:ea:d9:77:92:4e:05:dd:77:0a:58:cb:
                    f7:84:18:4b:09:07:dc:1c:99:3f:10:d8:ec:bb:07:
                    b1:c1:30:a4:40:26:76:19:cf:7c:03:87:dc:8f:c9:
                    c6:a0:e7:0d:ba:fa:4f:e0:49:4e:bb:13:95:05:c0:
                    24:57:f0:b2:6e:a7:df:0a:91:37:05:d2:7d:a0:17:
                    a6:8a:ea:89:d9:c6:29:c6:d4:5c:0e:2d:7e:1c:db:
                    9c:cf:ed:fc:13:b1:92:6d:4c:f7:7e:05:51:28:5a:
                    1b:8e:09:3b:17:66:77:27:5c:1d:1b:4b:c6:57:bc:
                    25:83:1f:40:2e:c4:01:f3:ee:28:79:07:51:be:64:
                    f5:40:99:73:74:00:28:e9:af:61:7c:bc:1d:66:b7:
                    7d:95:ac:82:a6:9b:f9:9f:88:d1:1c:06:36:9e:f1:
                    d9:e6:10:d6:7e:16:61:b0:62:eb:aa:c3:56:39:ec:
                    d5:8b:f8:44:e7:1b:85:d6:d4:3f:00:bb:f1:d1:8f:
                    1a:3f:5a:0a:5d:3e:cc:96:ed:ce:11:20:51:d1:37:
                    63:06:37:9c:43:66:02:82:2a:a8:6b:f7:4c:10:70:
                    35:e0:da:12:39:2b:a6:5a:fe:bc:53:82:46:75:25:
                    87:7e:9b:e3:86:14:78:61:55:26:00:c9:6c:cd:4e:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:19:8D:A1:EF:D1:42:71:FB:8F:E5:4A:B6:4E:53:83:79:0C:F2
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:a8:c6:a9:c3:ec:fe:9f:ca:31:cb:8c:59:41:05:2f:a4:
         8c:f2:07:a4:f2:81:38:18:1e:32:ed:2e:6f:be:ee:38:48:ac:
         dd:72:0c:ad:02:e0:0b:11:ff:9a:a5:03:4a:c0:e4:e7:01:02:
         bc:fb:ed:0a:32:9f:e7:79:d9:73:71:5d:3d:53:ca:a5:e9:e3:
         d3:f0:d6:68:83:85:48:de:fd:12:42:c7:75:36:5d:31:73:eb:
         38:ec:f0:e1:c7:35:75:b9:d0:a4:a4:de:c8:8e:ee:87:9d:db:
         8c:ec:92:51:c6:ce:37:7c:ab:89:1b:4a:de:2b:7f:37:38:67:
         42:c0:c8:92:14:05:a8:c0:83:1d:25:0e:d3:8a:11:92:dc:58:
         c3:3d:6a:ca:42:ea:d7:fc:fd:72:49:b5:87:45:2f:6a:0d:3d:
         f5:a0:14:57:ec:9f:23:23:39:31:72:d2:d7:30:7b:00:8d:cc:
         73:94:66:2f:2b:c6:ef:6c:9a:6c:8c:2b:e5:0f:13:a6:f6:8d:
         84:d3:46:c0:31:69:a2:d7:7b:9c:dd:f1:47:f6:03:05:65:83:
         78:f5:b4:50:fd:7c:33:d5:db:b5:19:39:76:3a:64:ff:b8:1f:
         07:af:c8:99:5f:1d:b1:72:e4:37:89:07:7a:34:31:92:c9:6c:
         34:f7:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org