Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS263702.roa
File:                     AS263702.roa (raw, json)
Hash identifier:          1yzFNOKb4aK+3FH3jy2z06KelLJ4IkvskT3A5TbWC1k=
Subject key identifier:   E8:3F:95:AA:29:8D:83:28:84:5A:78:97:94:AB:0B:F5:57:63:0C:73
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4BF3106C88A3376B05AAFB9ACF58B78C5040E29A
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS263702.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     263702
IP address blocks:        179.61.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f3:10:6c:88:a3:37:6b:05:aa:fb:9a:cf:58:b7:8c:50:40:e2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=E83F95AA298D8328845A789794AB0BF557630C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:06:d1:bf:38:75:a9:a0:c4:34:5c:12:9e:
                    55:a0:fd:b5:d6:e9:2a:e1:44:88:20:e6:21:0c:7e:
                    7f:21:34:09:1c:6f:c2:82:cd:fe:57:a2:d0:34:b3:
                    af:c6:92:55:2e:22:39:b2:41:7b:cf:4c:b5:89:5a:
                    ad:7a:46:91:5c:28:cb:17:c9:b9:28:63:57:86:77:
                    57:1f:59:b7:f5:b1:77:cf:8a:46:4f:7d:14:ff:08:
                    37:b3:1e:b8:8f:9d:ad:43:47:2a:46:6a:62:f9:3c:
                    4f:0a:8f:be:3d:d4:22:7d:69:b5:85:2d:c5:5f:0e:
                    45:73:f5:e9:74:9e:29:83:63:89:79:25:b4:39:98:
                    91:51:63:c9:61:bd:0d:24:b6:41:15:57:8e:b4:e3:
                    39:89:4b:f7:aa:9b:b2:9d:8a:7d:bd:22:bf:0b:4e:
                    42:9c:39:18:ad:c0:88:18:7d:86:56:e5:90:cb:fb:
                    8a:65:74:ee:36:05:94:23:ff:9d:7b:32:7a:b6:85:
                    38:67:07:65:05:ae:de:ab:05:00:d1:e3:a7:63:2b:
                    22:d1:92:fc:2c:41:c8:6a:d0:18:ec:69:f1:66:2c:
                    4c:ba:5d:f0:a1:b2:10:7b:44:3e:ae:5b:8e:64:21:
                    fe:d6:f0:67:b5:cd:79:43:71:64:16:ad:dc:71:67:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:95:AA:29:8D:83:28:84:5A:78:97:94:AB:0B:F5:57:63:0C:73
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS263702.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:82:46:43:d3:57:62:20:58:c0:b6:f3:ba:df:57:b9:34:48:
         9c:35:a3:c8:e1:3d:9d:45:cf:b8:97:b8:71:0c:f3:a9:8b:a5:
         42:e9:7f:3d:a4:69:a2:1c:50:01:5c:da:38:0f:9d:95:f3:7f:
         bb:fe:c8:f5:da:be:41:93:1f:40:3e:4f:01:44:44:58:09:ff:
         9a:8e:eb:14:8e:54:f5:04:8f:6a:8a:51:89:5a:bb:28:38:c0:
         20:17:0d:cd:09:03:6c:d4:f3:9e:23:d3:13:e4:3d:d4:4f:d8:
         e6:c7:27:cb:b0:47:e0:af:e2:34:03:72:55:34:82:84:6e:ef:
         4f:c9:18:f6:b0:aa:f8:28:b8:83:7b:94:df:fb:4d:17:ed:50:
         c8:da:03:e6:f5:0d:22:33:58:62:18:24:3f:4c:e7:a2:0d:fd:
         8a:4e:4a:59:c5:7d:c4:28:8d:80:1c:52:aa:c8:c3:c7:a1:f1:
         32:89:af:85:a8:ee:a6:21:b6:12:be:a0:6b:cd:1b:73:ba:3a:
         6e:f4:ce:28:43:61:ba:b1:84:c5:2e:96:4a:9c:d4:68:31:96:
         f2:f5:1d:c4:c3:06:9d:66:21:06:c0:ee:bc:33:c2:8e:84:c4:
         ac:42:3d:cb:42:e5:fc:be:62:00:3b:a4:e3:bd:92:93:ff:a2:
         01:ce:a4:de
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUS/MQbIijN2sFqvuaz1i3jFBA4powDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMjNaFw0yMzExMjcxMjE4MjNaMDMxMTAvBgNV
BAMTKEU4M0Y5NUFBMjk4RDgzMjg4NDVBNzg5Nzk0QUIwQkY1NTc2MzBDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwQbRvzh1qaDENFwSnlWg/bXW
6SrhRIgg5iEMfn8hNAkcb8KCzf5XotA0s6/GklUuIjmyQXvPTLWJWq16RpFcKMsX
ybkoY1eGd1cfWbf1sXfPikZPfRT/CDezHriPna1DRypGamL5PE8Kj7491CJ9abWF
LcVfDkVz9el0nimDY4l5JbQ5mJFRY8lhvQ0ktkEVV4604zmJS/eqm7Kdin29Ir8L
TkKcORitwIgYfYZW5ZDL+4pldO42BZQj/517Mnq2hThnB2UFrt6rBQDR46djKyLR
kvwsQchq0BjsafFmLEy6XfChshB7RD6uW45kIf7W8Ge1zXlDcWQWrdxxZ7exAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU6D+VqimNgyiEWniXlKsL9VdjDHMwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyNjM3MDIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBACzPcgwDQYJKoZIhvcNAQELBQADggEBAFSC
RkPTV2IgWMC287rfV7k0SJw1o8jhPZ1Fz7iXuHEM86mLpULpfz2kaaIcUAFc2jgP
nZXzf7v+yPXavkGTH0A+TwFERFgJ/5qO6xSOVPUEj2qKUYlauyg4wCAXDc0JA2zU
854j0xPkPdRP2ObHJ8uwR+Cv4jQDclU0goRu70/JGPawqvgouIN7lN/7TRftUMja
A+b1DSIzWGIYJD9M56IN/YpOSlnFfcQojYAcUqrIw8eh8TKJr4Wo7qYhthK+oGvN
G3O6Om70zihDYbqxhMUulkqc1GgxlvL1HcTDBp1mIQbA7rwzwo6ExKxCPctC5fy+
YgA7pOO9kpP/ogHOpN4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org