Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271935.roa
File:                     AS271935.roa (raw, json)
Hash identifier:          wD5ydxzy90DmnLwIFqqQi1sZVdr5h76M39JtsKA7aHw=
Subject key identifier:   E2:82:31:BE:24:D6:1C:E4:20:F4:EC:26:BA:0D:E5:9A:E5:C0:C0:8C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3FB6A22DE1344E0F5F942D8E9429BD2B77715DD7
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271935.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     271935
IP address blocks:        191.96.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b6:a2:2d:e1:34:4e:0f:5f:94:2d:8e:94:29:bd:2b:77:71:5d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=E28231BE24D61CE420F4EC26BA0DE59AE5C0C08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:63:4a:10:92:a8:17:a8:74:d3:84:e0:3a:
                    42:db:a7:a5:f5:81:81:7f:f4:72:97:c2:fc:94:c8:
                    4b:57:b0:75:7b:32:9e:87:5d:d5:83:12:98:01:74:
                    56:15:ab:86:58:20:82:22:d0:f4:f2:82:7c:65:f5:
                    61:54:d2:32:3d:bc:bd:7c:d4:2b:2c:a9:6e:30:c2:
                    12:4f:8b:6b:67:f2:2d:87:49:fb:f5:bd:04:7f:5e:
                    e1:a2:c4:97:5f:ec:d9:15:32:22:3a:da:f1:43:3e:
                    89:f0:4e:fd:85:73:79:ef:4a:fd:f8:5d:0b:9b:c5:
                    5b:33:89:8b:72:0d:1a:28:e5:13:5b:5b:bc:fa:d7:
                    d0:98:4c:16:d7:c5:b3:b7:d2:70:29:f9:93:2a:f4:
                    87:6e:a6:36:71:2a:42:16:89:5e:08:60:fb:d0:2d:
                    eb:d4:d9:23:8f:e2:e2:c0:16:7c:e0:6a:46:9f:a1:
                    27:38:45:5b:f5:8a:34:1c:0e:e2:0e:63:c5:9b:1f:
                    9d:c2:9b:01:b9:6b:8b:17:2e:96:bb:db:98:52:aa:
                    a0:06:ae:48:b9:77:0e:47:8f:3e:b9:fd:fd:c0:89:
                    ff:1a:97:02:52:c0:2b:57:13:48:f5:11:7b:03:fa:
                    c3:35:eb:b1:ef:42:a6:fc:01:f7:c4:e4:9f:27:53:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:31:BE:24:D6:1C:E4:20:F4:EC:26:BA:0D:E5:9A:E5:C0:C0:8C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9f:d9:e7:19:53:92:d5:b3:15:e3:7f:fd:f8:2b:a2:bd:08:
         6a:c0:9b:4b:65:d5:00:0b:e6:5e:c3:cb:ab:7d:71:5a:4d:56:
         b6:17:fb:2f:a4:72:ef:ac:88:bc:61:70:4e:54:d9:41:d0:0e:
         90:30:15:49:1d:cf:cf:ee:cf:81:d1:1a:19:6b:7f:cb:8e:e7:
         51:7b:3c:d6:c8:88:48:06:34:0f:9a:34:f1:10:7a:e1:f2:f6:
         74:92:15:7a:8d:54:b8:00:af:0f:9a:91:35:58:cc:16:4c:32:
         7b:a2:68:59:80:73:b3:ac:ab:8d:7c:e3:9e:98:34:23:b4:1c:
         49:1a:be:7b:50:df:75:77:85:1a:e2:ce:9b:73:c9:8c:34:0b:
         20:5f:62:ab:99:9f:04:27:d8:b8:b7:2b:82:c3:ad:35:30:be:
         bd:10:a4:9f:87:75:1d:b9:9a:aa:24:b7:83:44:cb:a9:68:cd:
         f7:11:9f:97:2c:68:e8:33:6c:cd:50:46:7a:e4:46:64:2b:6c:
         94:aa:1b:1e:62:2c:05:03:cc:d3:da:c0:bc:33:ea:93:73:51:
         02:b6:c3:61:67:ba:0b:9e:27:26:ea:55:b9:89:00:26:e4:a2:
         83:a8:16:a9:0a:ba:00:ff:dd:78:01:28:2d:d1:7d:8a:c5:fd:
         46:65:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org