Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210977.roa
File:                     AS210977.roa (raw, json)
Hash identifier:          v2EQbwWZ2ZrLQlonYKbmyw2zrOHz0jNWuSRJCR6LwS0=
Subject key identifier:   82:D5:19:8A:61:E4:9E:F1:ED:98:35:E1:7B:D2:45:B8:EA:96:2B:1C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       316F916FF209B0447FE1AD14071C5FC9B85BD854
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210977.roa
Signing time:             Thu 19 Jan 2023 14:28:15 +0000
ROA not before:           Thu 19 Jan 2023 14:23:15 +0000
ROA not after:            Thu 18 Jan 2024 14:28:15 +0000
asID:                     210977
IP address blocks:        191.96.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6f:91:6f:f2:09:b0:44:7f:e1:ad:14:07:1c:5f:c9:b8:5b:d8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 19 14:23:15 2023 GMT
            Not After : Jan 18 14:28:15 2024 GMT
        Subject: CN=82D5198A61E49EF1ED9835E17BD245B8EA962B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:ab:52:d8:75:00:8c:ab:fb:08:44:db:7c:
                    15:e6:98:22:db:d8:5b:bb:19:ab:1a:df:03:a1:4f:
                    ce:fb:dc:d5:d2:dc:8d:7e:78:42:3a:c2:11:ca:19:
                    3e:8f:e2:75:14:c5:96:42:85:a8:38:2f:9a:a5:62:
                    39:6a:19:42:b8:55:ad:55:cd:1c:a4:a6:78:2f:96:
                    76:b6:db:36:af:ee:3f:ba:75:a5:74:c6:cd:bd:7e:
                    4a:f6:7c:b0:a6:ee:07:90:78:65:49:69:86:8c:37:
                    98:23:0b:bb:cf:21:34:00:e8:67:d0:ee:ec:29:7c:
                    ee:ed:95:43:45:84:b7:a5:76:ae:68:dc:6c:b4:ea:
                    3a:95:dc:e9:c8:f4:d0:75:da:92:c8:a2:d5:0e:e1:
                    1a:03:06:52:43:a5:41:84:af:4f:cd:d4:44:7d:0b:
                    6c:39:df:11:21:aa:7c:bc:3a:f5:27:1b:46:2d:5b:
                    0b:4f:c3:18:53:01:37:23:4d:0a:99:97:ba:4a:81:
                    ef:87:e1:ea:6e:16:ef:47:e4:94:af:dd:23:36:6c:
                    a1:10:19:33:11:f1:3b:d5:13:fd:7d:7c:36:4e:c8:
                    de:a5:09:4e:59:ea:96:b4:71:43:b5:fd:0a:06:9b:
                    03:2b:2a:65:81:65:bb:f9:56:77:2b:9f:1b:46:f0:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:19:8A:61:E4:9E:F1:ED:98:35:E1:7B:D2:45:B8:EA:96:2B:1C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210977.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:a4:91:3a:6b:1e:e4:c0:67:07:87:64:f4:3c:55:bf:55:
         67:16:46:bf:7d:75:f0:cb:86:5a:2e:34:f5:cc:f8:0e:fc:f9:
         15:4c:1a:e6:b7:3a:36:c7:a4:a5:cc:6e:02:02:23:fb:3c:fb:
         9d:85:ba:1d:5f:51:9b:8c:bf:f9:30:7d:21:db:16:79:fc:0c:
         c0:49:f6:73:53:0f:08:5d:7c:22:32:b2:fd:9d:d6:fc:da:aa:
         86:36:0e:3a:0b:44:c8:dc:0c:e2:52:c5:b4:3d:fc:a0:a0:56:
         4a:cb:86:fa:f3:02:60:41:98:61:b2:e3:6d:29:18:60:dd:08:
         5c:08:bf:7c:c7:25:20:9c:15:c4:25:4d:f4:ec:b9:46:7a:24:
         ac:eb:56:5a:c9:66:1f:23:7f:55:07:6a:28:5f:e2:3f:f1:d1:
         9e:17:17:eb:d2:32:62:a1:ae:42:c7:27:d0:fb:3f:ef:41:f0:
         9e:3a:98:f0:3d:e3:cc:b1:f4:1f:25:5a:86:1d:d7:88:06:e5:
         68:7b:38:da:ee:46:eb:08:39:2d:83:9a:9c:1d:84:b6:9f:24:
         08:a9:22:0a:b1:9c:94:70:1e:67:8a:79:3d:0a:35:46:fa:35:
         83:9c:56:d1:98:3b:d9:2e:2e:14:81:11:7f:3b:71:d4:78:b2:
         6a:01:77:ac
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUMW+Rb/IJsER/4a0UBxxfybhb2FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAxMTkxNDIzMTVaFw0yNDAxMTgxNDI4MTVaMDMxMTAvBgNV
BAMTKDgyRDUxOThBNjFFNDlFRjFFRDk4MzVFMTdCRDI0NUI4RUE5NjJCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfv6tS2HUAjKv7CETbfBXmmCLb
2Fu7Gasa3wOhT8773NXS3I1+eEI6whHKGT6P4nUUxZZChag4L5qlYjlqGUK4Va1V
zRykpngvlna22zav7j+6daV0xs29fkr2fLCm7geQeGVJaYaMN5gjC7vPITQA6GfQ
7uwpfO7tlUNFhLeldq5o3Gy06jqV3OnI9NB12pLIotUO4RoDBlJDpUGEr0/N1ER9
C2w53xEhqny8OvUnG0YtWwtPwxhTATcjTQqZl7pKge+H4epuFu9H5JSv3SM2bKEQ
GTMR8TvVE/19fDZOyN6lCU5Z6pa0cUO1/QoGmwMrKmWBZbv5VncrnxtG8Pp7AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUgtUZimHknvHtmDXhe9JFuOqWKxwwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMTA5Nzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YGAwDQYJKoZIhvcNAQELBQADggEBAHxQ
pJE6ax7kwGcHh2T0PFW/VWcWRr99dfDLhlouNPXM+A78+RVMGua3OjbHpKXMbgIC
I/s8+52Fuh1fUZuMv/kwfSHbFnn8DMBJ9nNTDwhdfCIysv2d1vzaqoY2DjoLRMjc
DOJSxbQ9/KCgVkrLhvrzAmBBmGGy420pGGDdCFwIv3zHJSCcFcQlTfTsuUZ6JKzr
VlrJZh8jf1UHaihf4j/x0Z4XF+vSMmKhrkLHJ9D7P+9B8J46mPA948yx9B8lWoYd
14gG5Wh7ONruRusIOS2DmpwdhLafJAipIgqxnJRwHmeKeT0KNUb6NYOcVtGYO9ku
LhSBEX87cdR4smoBd6w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org