Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271960.roa
File:                     AS271960.roa (raw, json)
Hash identifier:          /FkpnDQTky6NsyXosW2i+XQFv80qLP0Qq4RpLnF4l6w=
Subject key identifier:   FA:54:23:6A:6F:11:8D:9D:15:5D:11:48:EF:65:AA:A0:68:38:15:1A
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       246589F100E9DAEC67B1F8231821F1A333E83534
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271960.roa
Signing time:             Mon 28 Nov 2022 12:18:18 +0000
ROA not before:           Mon 28 Nov 2022 12:13:18 +0000
ROA not after:            Mon 27 Nov 2023 12:18:18 +0000
asID:                     271960
IP address blocks:        181.215.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:65:89:f1:00:e9:da:ec:67:b1:f8:23:18:21:f1:a3:33:e8:35:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:18 2022 GMT
            Not After : Nov 27 12:18:18 2023 GMT
        Subject: CN=FA54236A6F118D9D155D1148EF65AAA06838151A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:67:69:ae:d0:34:73:79:a0:6b:7b:90:f6:
                    28:1a:51:b5:8e:3d:dc:15:a1:2d:a6:87:88:10:23:
                    cb:1a:e1:50:14:b3:54:4d:6d:9e:a7:b0:fc:2d:e0:
                    fc:02:42:dd:7e:77:3b:bd:d4:63:2b:4d:0c:a5:4c:
                    4e:89:66:40:23:de:0e:ae:2a:7e:cd:3e:a7:19:3d:
                    ed:85:b3:61:16:03:8d:d9:f0:96:4a:a0:51:00:93:
                    5b:1e:3f:70:a1:b9:a8:07:4a:17:e6:ff:ce:c6:c7:
                    16:b4:b9:b2:01:2b:60:c7:02:9b:7f:b5:05:2c:a0:
                    2e:58:9b:40:7b:3a:fa:27:76:ff:84:d5:24:ad:79:
                    07:6b:31:f9:1a:ab:b4:0b:a4:c4:6b:e5:d6:1a:d3:
                    04:32:d8:72:14:8f:ab:5c:84:21:75:78:72:f4:44:
                    8b:5b:8b:94:3f:6e:eb:d4:50:7c:2b:88:b7:5e:b7:
                    3f:f9:8b:2c:b1:f8:c3:97:db:10:2b:bc:ab:66:aa:
                    1c:25:03:a8:fd:05:63:57:15:93:25:46:12:d7:15:
                    7b:6f:3f:3c:fc:4d:2b:38:6a:b9:ca:fe:ac:c0:68:
                    a4:2c:ca:3f:07:a4:d8:b7:68:5c:a0:c1:f9:d1:5e:
                    1e:92:b9:f2:b3:e8:52:2f:be:a7:35:a3:b6:f6:35:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:23:6A:6F:11:8D:9D:15:5D:11:48:EF:65:AA:A0:68:38:15:1A
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271960.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:19:40:6f:ce:ff:b1:71:bc:65:7e:2e:b1:52:5d:41:4d:f7:
         90:15:81:3a:ba:bf:1d:a4:9b:c4:d1:9a:eb:27:5c:e9:39:6f:
         1b:70:8a:4a:80:84:9a:e6:8c:a3:b4:2e:cc:67:de:a0:93:8e:
         43:bf:52:b0:0b:61:b5:75:9a:f0:d0:01:78:cd:e0:6d:40:d0:
         3f:a9:06:72:1c:e6:c0:9b:fe:da:0f:15:74:fe:86:cd:e4:27:
         72:c5:5a:c9:d7:a6:ad:7b:da:08:fc:62:fa:9c:fa:8c:1b:5a:
         c2:ac:71:12:92:2b:7a:1a:b5:ca:25:bf:8c:a9:79:61:ee:8d:
         fa:af:f0:8f:59:86:b2:eb:1a:11:e9:e8:ad:b0:42:9c:85:87:
         57:0e:3f:08:ab:19:a9:ab:64:78:4d:df:59:a2:5a:d2:be:2a:
         2c:bc:f6:d5:b5:f1:0b:58:fd:03:0e:87:ed:d8:4b:bc:7f:e7:
         a4:9a:fa:29:29:fc:fe:71:ef:e2:61:a3:4c:71:01:e0:a5:4b:
         3b:fd:f5:a4:a9:29:c0:db:75:c3:97:68:76:1d:1a:86:78:2c:
         a1:e6:27:b2:1d:3c:21:84:91:77:d5:48:9a:9a:ff:17:8a:5c:
         06:ff:6e:c8:30:95:99:32:10:dd:eb:50:b9:37:87:30:57:b4:
         77:f1:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org