Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS26548.roa
File:                     AS26548.roa (raw, json)
Hash identifier:          oDdp0INIP/0dIN2VZodu4oj7COI63IUjqK/4eWnY3oI=
Subject key identifier:   CA:D4:D2:2C:3C:56:7F:3B:E7:10:35:8D:2C:5E:B7:8A:94:76:45:1D
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       E71AB8AA70373A08F3E871420723FD7F7B6393
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS26548.roa
Signing time:             Mon 28 Nov 2022 12:18:18 +0000
ROA not before:           Mon 28 Nov 2022 12:13:18 +0000
ROA not after:            Mon 27 Nov 2023 12:18:18 +0000
asID:                     26548
IP address blocks:        191.96.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e7:1a:b8:aa:70:37:3a:08:f3:e8:71:42:07:23:fd:7f:7b:63:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:18 2022 GMT
            Not After : Nov 27 12:18:18 2023 GMT
        Subject: CN=CAD4D22C3C567F3BE710358D2C5EB78A9476451D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:c0:64:5e:e2:b2:fd:cf:ac:c0:0a:25:93:
                    fe:b6:8b:2f:2e:33:da:53:68:68:e9:7a:bd:31:2c:
                    11:d9:8f:f8:fb:74:cd:15:16:2f:88:55:80:7e:fd:
                    6b:66:a9:ee:a2:58:55:60:f3:d3:e4:8e:30:e1:f4:
                    b5:88:b3:b2:7d:bb:3b:30:01:10:6f:7c:e5:df:fb:
                    45:bb:7f:0c:cf:f9:eb:c4:e7:09:40:2b:82:87:cd:
                    d9:5d:d5:7d:24:9d:f1:62:48:a4:3c:b3:28:34:92:
                    c4:59:a6:5d:43:53:24:86:4a:8c:b2:0a:1f:76:a9:
                    8b:bd:38:84:57:41:19:17:7f:83:71:b4:88:70:25:
                    5a:07:92:6b:e2:e2:66:6a:84:66:a1:c0:61:e0:00:
                    88:0e:ba:e4:03:e9:06:b3:b9:ae:c7:73:06:b9:8f:
                    f7:5b:e9:ab:73:81:3b:8c:fc:a8:dd:23:aa:c3:82:
                    d6:3e:88:4b:8b:45:ff:69:8f:ba:13:e6:74:fd:8d:
                    b6:42:25:00:ff:45:8b:2b:87:4a:70:e8:ed:7f:63:
                    94:62:4f:07:d8:71:b9:c5:b7:4d:f5:fb:fb:1e:b9:
                    d6:e8:61:c4:50:4b:c1:63:b0:be:e8:10:cc:f4:e6:
                    b1:22:a4:eb:c7:91:26:cb:52:12:d3:73:0f:16:d4:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D4:D2:2C:3C:56:7F:3B:E7:10:35:8D:2C:5E:B7:8A:94:76:45:1D
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS26548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:fe:a0:e4:de:85:36:79:2d:df:34:3b:3e:f6:c1:6a:3d:
         c8:37:05:07:3b:70:89:cc:a9:ef:69:05:39:eb:b6:f3:40:e7:
         00:af:25:4c:03:6b:3f:f5:32:06:aa:37:93:86:5b:3b:53:1b:
         a5:67:be:5b:de:54:9f:4d:27:f4:17:2b:dd:5a:58:ed:b0:8c:
         20:6e:1b:c9:dd:2c:89:03:35:2f:ff:f3:0c:16:5d:4d:c1:60:
         ac:b0:27:89:5e:1f:be:64:f7:e7:65:b2:2d:35:69:9e:36:c1:
         18:de:60:8f:c0:3e:c3:2f:07:f6:f2:70:04:22:9b:8f:cb:ec:
         07:87:90:93:3f:12:cf:a9:89:25:07:57:40:d4:c2:da:5e:35:
         28:83:3c:98:f6:f3:0d:e3:25:9d:e6:cd:a9:08:22:20:95:5f:
         a7:68:72:47:b5:ee:40:8b:7f:e6:06:6c:60:02:26:99:ac:71:
         3d:de:97:01:00:bc:50:bc:69:fd:57:d5:6c:f7:fc:1b:c5:46:
         1c:7a:77:f4:96:e9:90:1e:b0:18:b1:a9:dd:9b:cf:e5:01:ed:
         91:f9:98:8b:b3:b4:9c:ed:87:22:51:08:25:64:94:18:06:99:
         0d:bd:35:cc:e9:f9:66:29:4d:c5:60:8d:17:2c:61:08:50:d7:
         38:d3:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org