Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS267809.roa
File:                     AS267809.roa (raw, json)
Hash identifier:          q0Ti+9UXwftFwutbf0nKWBFtXzg7/ZVfz0Zut3wSK1k=
Subject key identifier:   7C:01:71:29:C2:68:7A:4A:00:71:88:DB:6D:D3:A8:EA:D7:78:09:9E
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7E49C754C305E14D1195F372AF52ED52D4FE5B0B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS267809.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     267809
IP address blocks:        191.96.231.0/24 maxlen: 24
                          191.101.25.0/24 maxlen: 24
                          191.101.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:49:c7:54:c3:05:e1:4d:11:95:f3:72:af:52:ed:52:d4:fe:5b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=7C017129C2687A4A007188DB6DD3A8EAD778099E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:3e:18:d3:4f:0a:1b:82:66:a8:7c:0c:d0:
                    51:22:00:1e:fe:49:ad:c9:54:89:31:69:52:ac:ff:
                    0e:9b:45:72:09:88:61:df:75:6c:07:8a:4d:ad:c2:
                    a8:5e:23:70:42:b5:c2:ed:9d:9e:e0:7d:dd:ca:b7:
                    c8:03:43:69:69:d7:67:b6:d2:c9:98:b6:9e:4c:fb:
                    a6:03:1d:21:1b:7a:3d:0e:0b:f2:09:78:36:83:2c:
                    4f:95:97:7d:ea:1b:dd:9d:60:fe:cf:87:7c:c5:53:
                    df:a2:ba:e7:86:e6:ae:7b:1e:fd:e0:87:22:44:5c:
                    fb:a9:93:f3:e3:e8:42:06:1e:3b:9f:33:8b:ab:53:
                    c4:af:17:8d:6e:ef:7e:a2:e1:f0:e8:80:70:7c:e4:
                    b0:82:19:73:1a:ed:d3:93:27:18:98:6a:a3:44:b1:
                    3c:04:ee:14:17:aa:49:54:1b:35:9a:eb:54:ec:0e:
                    eb:22:c7:02:7b:16:94:5b:94:55:0d:dc:a3:86:34:
                    5d:17:e7:cf:f1:a1:da:44:74:26:e6:70:2f:a1:39:
                    a2:87:62:be:6c:31:1d:07:58:fe:cd:3f:07:d4:54:
                    e4:31:c9:54:b9:35:02:0b:cb:59:a7:0d:2b:f9:82:
                    d0:89:04:c4:f3:f1:5e:74:bc:cb:9c:86:b4:51:8b:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:71:29:C2:68:7A:4A:00:71:88:DB:6D:D3:A8:EA:D7:78:09:9E
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS267809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.231.0/24
                  191.101.25.0/24
                  191.101.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:21:5a:8d:85:ba:49:19:c3:ce:c4:ae:94:4b:43:a9:ff:1a:
         0a:ff:43:35:92:ff:19:f6:c7:c9:28:1c:c6:f2:12:5d:9b:62:
         74:9c:23:1f:0e:5e:29:c2:63:2c:84:a8:25:4a:48:9f:23:17:
         0c:71:84:25:5d:11:dd:16:c3:47:56:26:e4:5e:7c:4a:2b:98:
         45:d5:2e:15:14:0a:48:81:f1:36:02:bf:d4:25:2d:be:82:f7:
         6f:ac:94:fa:e5:f2:3c:ae:ac:06:74:84:59:84:b6:5c:02:a8:
         6d:a6:82:42:d0:ee:b7:08:d9:ca:ad:55:d4:b0:e5:cb:94:e9:
         ae:8c:3a:a3:18:07:2e:d3:4f:2d:00:ea:34:6a:88:83:4c:bc:
         b5:61:4a:f2:ff:34:bd:8d:b4:e5:3c:fc:18:d2:b7:65:db:88:
         72:d8:5d:4f:f5:d1:54:b6:75:86:1b:47:50:22:49:de:3a:20:
         23:0a:a6:bc:03:e1:5c:3a:90:be:a1:cd:f9:9e:f5:6a:97:23:
         e5:8b:b8:42:74:d8:60:b2:e1:e4:f3:2d:9c:5d:eb:8a:1a:ea:
         d1:a7:5a:d3:97:e3:9d:5f:5e:25:a4:0b:79:c5:b8:2f:3e:8a:
         a1:f9:86:88:7e:5a:ed:fb:1b:8d:31:89:48:43:9b:4d:ef:e3:
         fe:33:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org