Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271799.roa
File:                     AS271799.roa (raw, json)
Hash identifier:          hsxdTikXp7MQcbLN9bufukY25gHRIfEeezh3NTZXi94=
Subject key identifier:   C9:87:35:8E:AE:4D:7C:10:6A:F3:A2:3D:CC:8E:27:D3:54:FF:FC:31
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       6976C885365D35689F51D52A182A41B93F9F4E75
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271799.roa
Signing time:             Wed 22 Feb 2023 03:15:01 +0000
ROA not before:           Wed 22 Feb 2023 03:10:01 +0000
ROA not after:            Wed 21 Feb 2024 03:15:01 +0000
asID:                     271799
IP address blocks:        45.88.99.0/24 maxlen: 24
                          179.61.229.0/24 maxlen: 24
                          191.101.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:76:c8:85:36:5d:35:68:9f:51:d5:2a:18:2a:41:b9:3f:9f:4e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 22 03:10:01 2023 GMT
            Not After : Feb 21 03:15:01 2024 GMT
        Subject: CN=C987358EAE4D7C106AF3A23DCC8E27D354FFFC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:37:e0:c9:b9:da:fd:ed:dd:c2:69:95:81:
                    52:ae:15:2b:11:f6:9f:82:a8:5c:6c:0d:d5:d5:ad:
                    0c:db:e8:a0:1a:d1:2b:77:39:f0:d1:79:e6:b2:88:
                    df:d0:fb:c5:de:cb:e7:b9:83:36:5a:d0:b1:7d:ed:
                    08:da:d0:02:1e:54:ff:2a:b4:e3:ce:07:69:7c:43:
                    fa:77:d5:ba:c9:38:45:16:38:e9:f5:c3:55:f5:e1:
                    ba:96:db:11:6f:f4:77:0c:b3:e9:00:e6:9f:a1:65:
                    1d:26:db:1e:9c:1e:65:32:bd:7d:5a:9c:ac:86:49:
                    0a:da:f9:63:69:b5:2a:fd:c8:2d:0d:96:7d:09:fa:
                    1c:c1:4f:3d:c9:e5:d2:92:56:15:9a:a1:2c:1d:3b:
                    24:ba:ad:07:d5:e7:4b:af:a1:9d:13:d1:41:5d:b3:
                    06:f8:7d:dd:53:c5:d5:8e:f4:07:76:25:38:45:83:
                    de:ec:df:78:78:5a:dc:73:93:12:2f:73:37:38:3d:
                    7a:c6:f8:33:ef:77:69:e9:ad:c3:39:7e:f0:99:5e:
                    36:9d:fa:03:dc:1c:22:fc:eb:6b:d4:32:3a:1a:2c:
                    f1:1f:ec:84:9a:01:12:dd:7e:db:a4:90:1e:e2:38:
                    27:3a:33:87:08:b6:2d:a2:1a:59:7d:74:51:72:83:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:87:35:8E:AE:4D:7C:10:6A:F3:A2:3D:CC:8E:27:D3:54:FF:FC:31
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271799.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.99.0/24
                  179.61.229.0/24
                  191.101.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:a6:b6:31:c4:28:4b:da:15:42:6f:7a:1a:6f:bc:9a:b7:
         f0:a5:f7:4b:04:ec:bd:85:d8:2e:a1:9c:7d:07:04:59:5c:9d:
         38:00:33:f9:4e:64:9c:42:f4:09:cf:b4:e5:04:1a:e1:d0:72:
         84:a2:4f:ae:14:5d:29:e2:b8:00:1f:f9:92:b7:42:2a:28:3a:
         33:74:10:b2:7a:52:b6:2e:07:cb:e4:e3:d6:4e:6f:8f:d4:b1:
         97:2d:a6:82:11:5b:6a:c9:03:84:c8:6f:6c:f5:bb:27:5b:2f:
         92:07:54:da:7b:8c:bb:80:81:b4:dd:fa:7d:ca:3e:92:05:cc:
         a9:bf:3a:4e:3d:29:02:0b:32:fc:2a:fb:8e:98:72:4e:95:b5:
         7f:dd:5b:7d:94:94:3e:db:df:d4:43:b8:67:df:26:00:fa:02:
         10:f1:0a:d1:0b:83:30:96:5c:3b:ab:c2:21:58:5d:4d:ac:b0:
         79:ac:41:8f:b9:6e:84:80:15:f0:70:5a:19:53:3e:85:77:03:
         b3:da:4a:9e:a6:16:e4:f8:f7:51:d5:3a:1f:0d:65:04:e0:1c:
         2a:e0:c2:35:69:30:f5:d8:5c:74:d3:97:b3:af:bd:46:a7:02:
         b7:49:30:d9:20:08:4b:5b:be:f3:ae:27:5e:b8:b7:e6:94:cd:
         8e:ec:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org