Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211237.roa
File:                     AS211237.roa (raw, json)
Hash identifier:          nMmdY4vJiv0aWTKzY2zckLqFGLXqPr+s8ivSrVbworo=
Subject key identifier:   32:BD:00:51:33:41:9E:EA:76:31:7C:CF:56:D0:A6:30:A9:1B:FC:EF
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       13EF45EB70473290FC3773D05D5ECDA3EAFCF380
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211237.roa
Signing time:             Fri 24 Feb 2023 09:30:05 +0000
ROA not before:           Fri 24 Feb 2023 09:25:05 +0000
ROA not after:            Fri 23 Feb 2024 09:30:05 +0000
asID:                     211237
IP address blocks:        191.101.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ef:45:eb:70:47:32:90:fc:37:73:d0:5d:5e:cd:a3:ea:fc:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 24 09:25:05 2023 GMT
            Not After : Feb 23 09:30:05 2024 GMT
        Subject: CN=32BD005133419EEA76317CCF56D0A630A91BFCEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:10:84:64:af:4f:a7:49:e7:1e:8d:24:2a:
                    4e:0a:ec:85:d7:e5:d0:c7:ad:ec:52:d1:c9:81:7f:
                    5f:8b:fd:a5:84:3f:96:8a:a8:70:4a:a8:0c:20:bd:
                    a7:1e:51:21:f9:b5:6f:d8:54:d5:44:d9:ba:13:64:
                    03:2a:72:b0:70:da:e4:ec:2c:95:f1:38:aa:ef:75:
                    72:77:50:8d:b5:25:e4:c8:21:89:ce:fd:fc:97:91:
                    ba:26:bb:c4:c3:b3:87:0b:09:cc:c8:50:73:ca:00:
                    15:3c:ee:05:36:cf:e0:79:7e:78:d6:a3:ea:fa:da:
                    70:29:61:5f:84:a7:36:85:4a:87:57:0e:b9:9c:69:
                    56:c1:52:0c:27:2b:35:63:c5:59:ca:b3:0a:a3:57:
                    d2:b3:30:21:4e:4f:6f:51:f0:9b:98:92:97:35:50:
                    3a:5b:4e:82:74:5b:5c:75:b3:ff:35:c5:fc:ec:11:
                    2f:44:53:06:6b:a6:53:dd:d0:8a:b7:71:ad:fe:27:
                    45:52:21:a7:c1:86:a5:a2:87:b9:1c:4d:4b:6d:6f:
                    f9:ed:6d:1f:49:63:62:a4:4b:14:91:bb:5d:2f:99:
                    0d:ab:cc:01:3e:13:49:0d:45:94:a7:a1:37:82:4c:
                    39:3f:9e:37:e0:c4:09:63:e1:6a:6e:47:e8:e9:b9:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BD:00:51:33:41:9E:EA:76:31:7C:CF:56:D0:A6:30:A9:1B:FC:EF
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:85:64:c6:9b:b2:fe:50:64:66:8c:71:5a:56:4e:6e:18:
         31:97:55:a4:6b:6f:75:da:a6:a7:38:7b:85:5e:a8:e4:30:16:
         b0:a9:f2:71:08:a7:b3:6f:be:8b:30:dd:78:d3:4f:72:29:29:
         e5:ed:46:72:d6:65:fb:50:4c:45:d4:7b:6a:40:ef:9a:88:50:
         5e:f8:af:62:60:b5:9e:cc:14:3f:37:0d:da:6f:d0:85:01:fa:
         82:be:6f:c3:af:a6:1c:7f:4e:4c:87:4a:bf:36:59:48:9f:69:
         c9:5c:11:fa:56:20:89:8c:af:0c:10:db:e0:b6:b6:79:88:7b:
         dd:4e:91:44:64:36:34:fb:e2:ca:06:35:b6:18:77:b8:2b:a6:
         eb:9f:12:fe:fe:73:57:d5:94:83:41:e4:1b:cd:4b:5a:37:41:
         4a:6a:21:a3:10:ba:7a:6e:fc:fa:cc:e3:d5:b4:50:37:8c:bb:
         3a:bf:98:9a:60:cf:9e:2d:b4:20:55:d9:77:4c:3e:6b:b4:4b:
         7e:56:b6:87:24:9d:0a:7b:1b:f6:38:4c:81:19:53:bb:dc:d0:
         48:11:cb:70:72:73:c8:c1:e1:da:90:94:1c:a8:03:3a:61:c9:
         0c:dd:d3:b0:33:35:8c:78:f9:90:5b:5f:58:48:f4:b0:ae:92:
         c7:d5:4b:ca
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUE+9F63BHMpD8N3PQXV7No+r884AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMjQwOTI1MDVaFw0yNDAyMjMwOTMwMDVaMDMxMTAvBgNV
BAMTKDMyQkQwMDUxMzM0MTlFRUE3NjMxN0NDRjU2RDBBNjMwQTkxQkZDRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZBCEZK9Pp0nnHo0kKk4K7IXX
5dDHrexS0cmBf1+L/aWEP5aKqHBKqAwgvaceUSH5tW/YVNVE2boTZAMqcrBw2uTs
LJXxOKrvdXJ3UI21JeTIIYnO/fyXkbomu8TDs4cLCczIUHPKABU87gU2z+B5fnjW
o+r62nApYV+EpzaFSodXDrmcaVbBUgwnKzVjxVnKswqjV9KzMCFOT29R8JuYkpc1
UDpbToJ0W1x1s/81xfzsES9EUwZrplPd0Iq3ca3+J0VSIafBhqWih7kcTUttb/nt
bR9JY2KkSxSRu10vmQ2rzAE+E0kNRZSnoTeCTDk/njfgxAlj4WpuR+jpuepzAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUMr0AUTNBnup2MXzPVtCmMKkb/O8wHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMTEyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZagwDQYJKoZIhvcNAQELBQADggEBAEjw
hWTGm7L+UGRmjHFaVk5uGDGXVaRrb3Xapqc4e4VeqOQwFrCp8nEIp7Nvvosw3XjT
T3IpKeXtRnLWZftQTEXUe2pA75qIUF74r2JgtZ7MFD83Ddpv0IUB+oK+b8Ovphx/
TkyHSr82WUifaclcEfpWIImMrwwQ2+C2tnmIe91OkURkNjT74soGNbYYd7grpuuf
Ev7+c1fVlINB5BvNS1o3QUpqIaMQunpu/PrM49W0UDeMuzq/mJpgz54ttCBV2XdM
Pmu0S35WtocknQp7G/Y4TIEZU7vc0EgRy3Byc8jB4dqQlByoAzphyQzd07AzNYx4
+ZBbX1hI9LCuksfVS8o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org