Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212219.roa
File:                     AS212219.roa (raw, json)
Hash identifier:          49s5g78JXBW1vQEO9X3WBejIdmgzSjBOUaN9oJO+AF0=
Subject key identifier:   39:3D:9E:02:0D:E0:01:13:EB:22:19:39:3A:CF:65:B4:DE:A9:30:15
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3D8F498CC31E57470BE9D0F5A8005FD53EF1DE13
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212219.roa
Signing time:             Thu 22 Dec 2022 13:04:14 +0000
ROA not before:           Thu 22 Dec 2022 12:59:14 +0000
ROA not after:            Thu 21 Dec 2023 13:04:14 +0000
asID:                     212219
IP address blocks:        191.96.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8f:49:8c:c3:1e:57:47:0b:e9:d0:f5:a8:00:5f:d5:3e:f1:de:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 22 12:59:14 2022 GMT
            Not After : Dec 21 13:04:14 2023 GMT
        Subject: CN=393D9E020DE00113EB2219393ACF65B4DEA93015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:a0:57:da:c5:40:03:92:e7:21:d6:83:75:
                    4c:25:ed:0e:94:36:c0:57:ae:da:e8:07:42:f7:2b:
                    b1:b9:e0:60:5f:3d:f5:ec:4b:54:3a:f5:63:51:e3:
                    3d:59:00:b6:42:48:54:ac:26:3d:dd:40:07:ff:1e:
                    14:a4:4a:38:4d:db:18:a1:9f:35:c0:ba:c4:c4:2c:
                    49:e5:d4:47:c4:70:70:19:ef:a5:5d:9e:e6:bc:73:
                    4a:35:09:87:25:85:38:3b:aa:fb:74:10:6c:2b:cc:
                    84:df:1e:de:1f:7c:56:40:a9:7e:7f:51:5e:c6:c1:
                    d8:91:65:83:50:89:a5:f9:26:3f:b0:86:24:25:ce:
                    d8:dc:d0:35:6e:b4:58:60:f3:f8:36:1d:69:62:e9:
                    a4:03:15:66:f7:b3:1a:44:29:ff:9a:db:0d:05:25:
                    95:3b:f9:85:37:b4:1e:f8:ae:dd:af:be:26:df:be:
                    2a:45:77:e5:b1:a0:e5:1e:e3:4a:91:21:15:47:4b:
                    93:a0:b9:b0:72:39:16:56:50:5e:38:68:6a:02:12:
                    8c:c8:41:01:e6:ca:ed:79:29:52:24:85:3a:06:a7:
                    fb:a6:e3:65:7e:df:43:96:51:9c:bb:35:34:d6:76:
                    02:5b:ab:4c:57:c9:ec:da:bf:ef:b0:79:da:46:3c:
                    0a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:9E:02:0D:E0:01:13:EB:22:19:39:3A:CF:65:B4:DE:A9:30:15
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:d1:73:2e:a9:a4:19:2f:06:5e:be:a1:ac:f3:3c:02:02:
         f2:24:12:47:8a:a0:01:27:bb:78:33:00:04:ed:01:f4:e1:15:
         ce:7d:b5:76:c5:ae:58:18:67:b0:02:33:cb:5b:45:fd:8e:4d:
         ba:22:8c:ec:28:68:9e:a2:72:ae:c2:f1:f8:5b:4e:26:7a:d0:
         21:e8:2e:ca:06:3c:a8:2b:cd:44:e0:c1:9d:9f:72:d1:c5:b0:
         d6:15:28:61:08:75:a8:4d:84:3e:8f:80:d9:49:35:85:91:f5:
         1d:17:44:b8:05:87:4d:83:84:39:6a:57:e4:45:79:01:49:de:
         b4:5d:b4:e2:de:a5:83:10:c5:a9:4e:51:a5:d2:89:b8:fd:ff:
         5d:ea:d9:26:d5:99:92:79:c2:20:8f:17:19:c2:d8:f9:71:da:
         1d:6d:50:6b:cb:48:3d:6e:af:70:e1:a2:42:fd:9a:14:e0:f9:
         80:ae:b0:c4:2b:5c:6c:b3:ac:a0:6f:c3:93:aa:99:05:bb:b1:
         c8:8a:78:c2:f6:7f:6e:cd:7e:b9:c3:d4:9c:7b:62:79:5a:64:
         fc:e6:b8:04:5f:f8:ca:96:0d:da:14:1d:b4:df:a8:a9:5c:c9:
         aa:17:9f:1b:b0:94:47:62:a8:b6:31:c0:9c:5a:04:2a:a8:48:
         2d:47:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org