Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211193.roa
File:                     AS211193.roa (raw, json)
Hash identifier:          ha8Ach2YExc5w+oMZ1GzjZNfIhg/6If6uwYoeluQc9M=
Subject key identifier:   CF:A1:32:88:F6:07:C7:41:AF:33:18:B8:5B:31:7A:F3:1A:E2:7D:EC
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       43EAFAC831237C39073E270702A748BD761CE846
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211193.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     211193
IP address blocks:        194.110.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:fa:c8:31:23:7c:39:07:3e:27:07:02:a7:48:bd:76:1c:e8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=CFA13288F607C741AF3318B85B317AF31AE27DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:65:e3:55:14:49:5b:ec:51:08:a9:fe:ec:
                    2b:44:e3:5c:83:bb:be:25:f1:1f:d4:b8:ad:35:a2:
                    1f:b3:6b:6d:ce:b7:a8:b7:27:39:b3:53:22:d5:60:
                    0b:3e:c4:6e:61:b1:e9:5d:f0:3a:75:0b:a1:c0:71:
                    0e:d1:cc:72:f4:d6:2a:d7:03:26:6d:2d:36:a2:30:
                    98:2e:95:c3:3c:28:eb:5b:f4:f1:32:53:e7:fa:a5:
                    03:37:03:8b:cb:e6:39:11:bb:7d:3f:88:09:43:5d:
                    2c:bb:d0:1a:8e:17:c4:13:9c:6e:5c:66:eb:e1:d0:
                    de:ea:7d:51:cf:92:a2:ad:23:9e:0d:28:17:71:8e:
                    9e:82:ac:67:8a:33:40:87:ab:d9:c7:4b:cf:ef:e7:
                    3d:fe:0d:37:76:1c:02:4b:ca:fe:9a:6f:92:a0:61:
                    07:f3:c3:0d:bb:dc:e4:1d:91:b7:e2:94:d3:45:c0:
                    ea:97:42:76:10:11:b7:73:71:fe:61:2a:22:c8:1e:
                    c4:d8:e1:6f:e3:8d:9b:4f:03:20:0d:89:45:ac:4f:
                    00:6c:10:ae:44:96:29:0f:b6:fe:f0:be:5b:11:a5:
                    f5:2c:40:82:9b:b5:cb:ef:08:a3:1e:58:32:fa:3f:
                    fe:c0:87:b3:2c:aa:d6:17:54:ed:4d:eb:18:88:1c:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A1:32:88:F6:07:C7:41:AF:33:18:B8:5B:31:7A:F3:1A:E2:7D:EC
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211193.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e6:81:60:8f:bb:f1:80:e8:ad:28:62:43:ba:53:ba:b2:ec:
         e7:4f:64:2d:07:f1:92:29:79:ed:11:c5:e2:b0:e7:49:1c:65:
         a6:63:26:a6:08:ab:46:72:4c:0f:7c:25:fc:8e:98:6c:4f:b0:
         89:89:14:bc:02:e1:dc:2b:b0:2d:27:ec:f5:7a:1b:6f:71:1d:
         3a:be:9e:55:54:80:90:59:0f:0a:e2:d0:7b:23:92:d8:60:9d:
         14:ea:fa:0a:ba:4d:52:27:b4:f4:ee:aa:4c:7d:20:91:1c:18:
         84:5e:08:d8:45:38:93:1a:c7:f0:89:42:96:f0:d3:33:89:2f:
         f4:84:49:c5:4f:70:29:61:a2:4f:b8:ff:1a:e5:09:ff:ee:2f:
         2a:bc:a4:09:33:23:47:b4:bb:a0:e1:d9:69:16:e6:b3:54:4f:
         c9:fe:e0:45:e1:11:2c:1d:16:4e:40:20:d7:59:9f:84:fa:76:
         eb:9d:3b:ac:c7:8d:42:25:f4:79:6d:32:18:8a:6b:86:1f:29:
         60:dc:63:e9:85:97:ab:9f:2b:80:16:7e:cb:15:55:cc:8c:1d:
         9d:ab:38:43:11:db:c4:75:81:78:e7:3b:7b:9a:7f:f0:81:17:
         87:b2:6e:66:14:cf:32:ba:8a:d3:f6:3e:4b:4d:6f:d1:b9:85:
         02:89:43:77
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUQ+r6yDEjfDkHPicHAqdIvXYc6EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMTlaFw0yMzExMjcxMjE4MTlaMDMxMTAvBgNV
BAMTKENGQTEzMjg4RjYwN0M3NDFBRjMzMThCODVCMzE3QUYzMUFFMjdERUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRGXjVRRJW+xRCKn+7CtE41yD
u74l8R/UuK01oh+za23Ot6i3JzmzUyLVYAs+xG5hseld8Dp1C6HAcQ7RzHL01irX
AyZtLTaiMJgulcM8KOtb9PEyU+f6pQM3A4vL5jkRu30/iAlDXSy70BqOF8QTnG5c
Zuvh0N7qfVHPkqKtI54NKBdxjp6CrGeKM0CHq9nHS8/v5z3+DTd2HAJLyv6ab5Kg
YQfzww273OQdkbfilNNFwOqXQnYQEbdzcf5hKiLIHsTY4W/jjZtPAyANiUWsTwBs
EK5ElikPtv7wvlsRpfUsQIKbtcvvCKMeWDL6P/7Ah7MsqtYXVO1N6xiIHM7ZAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUz6EyiPYHx0GvMxi4WzF68xrifewwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMTExOTMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBADCbg4wDQYJKoZIhvcNAQELBQADggEBAEvm
gWCPu/GA6K0oYkO6U7qy7OdPZC0H8ZIpee0RxeKw50kcZaZjJqYIq0ZyTA98JfyO
mGxPsImJFLwC4dwrsC0n7PV6G29xHTq+nlVUgJBZDwri0HsjkthgnRTq+gq6TVIn
tPTuqkx9IJEcGIReCNhFOJMax/CJQpbw0zOJL/SEScVPcClhok+4/xrlCf/uLyq8
pAkzI0e0u6Dh2WkW5rNUT8n+4EXhESwdFk5AINdZn4T6duudO6zHjUIl9HltMhiK
a4YfKWDcY+mFl6ufK4AWfssVVcyMHZ2rOEMR28R1gXjnO3uaf/CBF4eybmYUzzK6
itP2PktNb9G5hQKJQ3c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org