Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271979.roa
File:                     AS271979.roa (raw, json)
Hash identifier:          gcbN5Sn2L26M5Lf1QfignKciRlHkAbO7oWnfQNXZfdg=
Subject key identifier:   D4:A6:55:9F:3A:30:67:69:E2:1A:4D:5F:6F:29:B0:93:15:2A:39:41
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       49999E7894449E53271F21C14A91C7558F1C44C0
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271979.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     271979
IP address blocks:        181.214.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:99:9e:78:94:44:9e:53:27:1f:21:c1:4a:91:c7:55:8f:1c:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=D4A6559F3A306769E21A4D5F6F29B093152A3941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:b0:94:dd:2e:c3:e4:5a:0e:89:8a:36:1a:
                    76:93:e2:c9:10:19:1b:55:69:5b:24:b0:79:80:dc:
                    3f:53:16:8a:47:e6:c5:a4:dd:50:89:86:a4:80:f2:
                    e0:4c:91:ec:a7:4b:d9:a4:ab:1e:ee:29:8a:0d:b0:
                    8b:a4:c8:d1:fb:1f:66:de:b9:a4:20:69:a2:64:92:
                    db:c8:5c:11:5a:2a:b7:26:25:7e:8a:81:76:fd:c8:
                    02:96:1c:df:6c:63:8b:c2:d4:92:5a:62:a9:8a:74:
                    2c:74:b2:50:77:96:21:48:52:ec:7a:0b:72:c2:8a:
                    83:e7:36:1b:c2:14:c0:e9:fc:90:b0:08:cb:2b:c7:
                    51:e2:aa:4d:26:bb:41:41:96:41:a1:ac:06:13:d1:
                    f4:f6:0e:38:90:05:82:82:12:8e:01:29:b6:57:6e:
                    e0:d3:24:5a:2b:23:f3:b5:83:30:cf:63:5e:54:ed:
                    13:8c:22:da:0b:0c:97:ce:85:50:bb:eb:40:b6:03:
                    e1:13:45:cf:25:2f:85:79:ec:85:ca:11:86:62:8f:
                    59:8f:63:b2:d7:f5:f3:80:39:0c:4d:2a:73:99:cf:
                    d3:11:ac:22:55:fd:69:da:b2:af:99:a0:49:70:e9:
                    cc:d6:2c:b2:2f:40:56:4b:a8:7c:74:33:15:d2:1f:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A6:55:9F:3A:30:67:69:E2:1A:4D:5F:6F:29:B0:93:15:2A:39:41
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271979.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:a2:46:48:c3:f4:27:6f:22:de:2a:83:9f:09:e1:ab:4b:
         e6:59:6f:b6:be:a4:cb:0a:bc:17:64:a8:2c:02:ea:9e:eb:94:
         6e:e3:de:b1:26:96:49:73:17:bd:53:a1:6d:06:18:22:d0:f7:
         72:3a:54:8d:67:7f:c5:d9:98:53:c1:c8:9e:37:c1:42:5b:36:
         f6:d7:a4:83:fd:95:21:50:6e:a5:3c:6d:92:d2:3d:f6:c6:40:
         6e:bf:25:c1:89:1d:3b:c3:c1:68:3e:c3:90:3f:d5:1d:7a:48:
         80:55:0e:ff:24:0c:24:56:12:85:37:03:d9:bb:65:44:5e:d8:
         4a:47:7c:6e:58:00:28:cf:a0:c7:0a:e5:06:cc:43:ff:c9:8e:
         72:56:43:aa:63:07:ae:8f:1c:57:7c:3d:39:cc:36:22:9b:ef:
         b5:df:81:1a:75:00:3b:b5:b5:50:14:3f:85:e1:1e:05:b7:92:
         c1:1c:22:bb:63:8e:2e:ef:c7:03:db:f5:d3:76:8a:fa:f6:46:
         15:21:ab:11:26:ab:4c:19:98:0d:a9:89:1a:1b:f1:9b:a1:56:
         54:a2:7b:01:da:a1:b9:6e:3b:28:17:63:4d:24:f0:f9:56:91:
         12:28:f5:75:2e:50:00:37:4b:28:59:8b:b3:6a:c8:16:6b:30:
         fa:21:13:9a
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUSZmeeJREnlMnHyHBSpHHVY8cRMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMjBaFw0yMzExMjcxMjE4MjBaMDMxMTAvBgNV
BAMTKEQ0QTY1NTlGM0EzMDY3NjlFMjFBNEQ1RjZGMjlCMDkzMTUyQTM5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+rCU3S7D5FoOiYo2GnaT4skQ
GRtVaVsksHmA3D9TFopH5sWk3VCJhqSA8uBMkeynS9mkqx7uKYoNsIukyNH7H2be
uaQgaaJkktvIXBFaKrcmJX6KgXb9yAKWHN9sY4vC1JJaYqmKdCx0slB3liFIUux6
C3LCioPnNhvCFMDp/JCwCMsrx1Hiqk0mu0FBlkGhrAYT0fT2DjiQBYKCEo4BKbZX
buDTJForI/O1gzDPY15U7ROMItoLDJfOhVC760C2A+ETRc8lL4V57IXKEYZij1mP
Y7LX9fOAOQxNKnOZz9MRrCJV/Wnasq+ZoElw6czWLLIvQFZLqHx0MxXSH/PxAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU1KZVnzowZ2niGk1fbymwkxUqOUEwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyNzE5Nzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11ogwDQYJKoZIhvcNAQELBQADggEBADmM
okZIw/QnbyLeKoOfCeGrS+ZZb7a+pMsKvBdkqCwC6p7rlG7j3rEmlklzF71ToW0G
GCLQ93I6VI1nf8XZmFPByJ43wUJbNvbXpIP9lSFQbqU8bZLSPfbGQG6/JcGJHTvD
wWg+w5A/1R16SIBVDv8kDCRWEoU3A9m7ZURe2EpHfG5YACjPoMcK5QbMQ//JjnJW
Q6pjB66PHFd8PTnMNiKb77XfgRp1ADu1tVAUP4XhHgW3ksEcIrtjji7vxwPb9dN2
ivr2RhUhqxEmq0wZmA2piRob8ZuhVlSiewHaobluOygXY00k8PlWkRIo9XUuUAA3
SyhZi7NqyBZrMPohE5o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org