Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272073.roa
File:                     AS272073.roa (raw, json)
Hash identifier:          QnIzN+I7egSpGbDhBSlVVbJfMNvsJQSoNxLl7dB3w5k=
Subject key identifier:   E1:E6:65:C4:74:48:93:28:02:95:08:66:B8:7F:C8:56:89:39:C7:93
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       11B72952D4E5AA65034C38734F88685A8A2BCA8D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272073.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     272073
IP address blocks:        191.101.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b7:29:52:d4:e5:aa:65:03:4c:38:73:4f:88:68:5a:8a:2b:ca:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=E1E665C47448932802950866B87FC8568939C793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:53:12:73:3a:3a:50:a5:f5:91:4a:81:79:89:
                    42:ef:54:2f:ce:75:4d:de:e1:dc:6d:1d:2f:a2:2d:
                    1d:95:b8:2e:f5:14:d5:df:8d:6e:bb:ef:06:37:0d:
                    80:c4:fe:9c:49:8f:6b:14:ad:52:36:70:34:a3:c6:
                    0c:2a:e9:e5:61:b9:27:6c:ba:04:48:b6:b2:cb:16:
                    8e:b0:e4:d2:45:bd:c2:ff:f0:b5:71:c5:15:89:d4:
                    15:89:ec:52:a1:a4:de:80:5d:13:2f:d3:e6:64:62:
                    c7:51:c9:b9:10:21:fa:19:8a:c6:bf:db:4a:ec:ff:
                    88:61:c4:7d:d6:f4:f5:e2:a7:74:29:ba:ff:d3:79:
                    61:27:50:ce:6e:a4:0d:67:14:5a:2f:8f:b2:d7:f2:
                    3d:89:fb:72:f0:47:87:2b:16:88:8a:8e:49:7c:9d:
                    d3:43:aa:1c:79:83:33:98:4d:54:d9:7d:7b:c8:86:
                    3c:58:45:31:e8:a0:d8:c9:42:0b:40:43:ef:ed:40:
                    9c:8c:68:a2:e8:02:39:47:67:ed:4a:08:b9:06:29:
                    5d:61:dc:4c:a1:b9:4d:2d:0b:ab:87:1d:34:ac:ee:
                    7a:5f:23:20:c1:b6:8c:41:07:43:51:c8:93:a7:a5:
                    36:ee:a7:70:28:8d:43:18:d7:37:fa:14:87:10:55:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E6:65:C4:74:48:93:28:02:95:08:66:B8:7F:C8:56:89:39:C7:93
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:71:b1:81:4b:f5:a6:c2:a6:b6:4d:7c:47:61:57:a1:5a:da:
         8d:ab:65:45:73:7e:d7:34:1f:96:ed:8b:df:aa:2a:a9:bb:b0:
         e7:dc:ca:e2:cf:c6:c4:48:4e:24:b7:c1:83:b1:ff:51:a1:9e:
         5a:b3:f2:1b:8b:f4:e0:74:ad:c1:10:91:b3:93:86:eb:87:a0:
         37:90:95:d7:6f:6d:e8:c1:19:5f:f1:3e:67:b4:41:22:1e:cf:
         91:1e:73:d1:46:53:0e:f3:73:fc:25:6f:0c:20:93:8b:57:df:
         05:04:08:da:6d:97:7f:cd:85:ef:aa:b5:86:d4:f6:3c:f7:41:
         2b:aa:67:e3:f6:c8:6b:a6:90:5e:4b:49:1a:3e:df:2e:21:d8:
         f5:f5:6a:32:72:d9:fc:a9:e3:25:98:29:47:ab:ba:3e:28:cf:
         e8:2d:0a:c2:f6:65:f3:90:d3:9f:b8:4d:a3:bf:6c:67:36:39:
         91:cb:19:b6:a1:bf:ba:aa:ce:75:4b:c2:52:7e:f7:75:03:ba:
         00:44:31:a3:f0:df:1e:8a:aa:c3:51:72:e1:d2:d6:72:87:1e:
         e1:ff:1d:e9:81:3a:93:89:40:df:e0:0e:f9:7a:c2:6b:f8:d3:
         83:4c:39:bd:74:75:d7:de:9b:f3:4e:c0:73:34:cb:be:fe:01:
         f3:a0:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----