Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272083.roa
File:                     AS272083.roa (raw, json)
Hash identifier:          unLvLcNz73cnFgf5o+NXURMnmcVKo4LPb60NSLWDIhE=
Subject key identifier:   6E:C6:02:D3:0F:83:7A:69:FD:9A:AA:C4:CE:92:42:B4:C8:16:B8:BE
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       35E0C0F7825D60B4D67A35B3B8AF1F2716B28601
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272083.roa
Signing time:             Thu 22 Dec 2022 00:00:15 +0000
ROA not before:           Wed 21 Dec 2022 23:55:15 +0000
ROA not after:            Thu 21 Dec 2023 00:00:15 +0000
asID:                     272083
IP address blocks:        181.214.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e0:c0:f7:82:5d:60:b4:d6:7a:35:b3:b8:af:1f:27:16:b2:86:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 21 23:55:15 2022 GMT
            Not After : Dec 21 00:00:15 2023 GMT
        Subject: CN=6EC602D30F837A69FD9AAAC4CE9242B4C816B8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:7d:88:cd:dc:4a:d3:57:7b:75:a8:c0:b1:
                    de:6b:f7:44:94:fd:f1:0c:3e:63:c6:bb:2f:e3:88:
                    a0:6b:91:b9:33:fd:0c:2e:00:de:68:80:f3:88:59:
                    0f:ab:18:d5:91:d7:2c:84:4e:3f:5b:51:d9:7e:c6:
                    56:9d:21:6c:c4:3d:93:c0:3d:11:5f:fb:7b:f2:fb:
                    f3:a4:17:04:c3:f3:c0:93:a7:99:02:9e:9c:5d:7a:
                    b2:16:24:33:0e:7b:26:f2:2d:56:e8:f4:7c:93:84:
                    78:95:46:e7:fb:bb:67:8a:e6:c5:89:27:e3:5b:f1:
                    30:bf:7f:68:00:4c:bf:c8:39:e1:89:93:44:5c:0c:
                    73:13:65:80:a1:04:a9:8f:80:fb:56:ee:49:6d:53:
                    52:37:3d:a0:2d:77:69:7f:7f:93:a3:c9:83:08:f6:
                    9e:4b:e6:27:ce:f5:1a:14:18:17:7a:10:a5:ce:19:
                    aa:98:b5:16:3d:2c:c3:e3:bd:a4:38:32:ae:ce:c0:
                    47:17:84:08:b8:b2:e8:92:ad:20:e9:31:b6:e6:6d:
                    c7:76:43:fe:27:9d:76:e2:fd:b7:57:fb:7f:6c:4e:
                    2c:1b:02:9f:8a:e1:0a:92:f5:96:6d:1c:68:bf:7e:
                    c8:66:e1:d4:ad:a2:cd:7b:c9:5c:56:7a:24:61:de:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C6:02:D3:0F:83:7A:69:FD:9A:AA:C4:CE:92:42:B4:C8:16:B8:BE
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:07:b3:15:c1:c0:6e:a1:57:c8:b3:77:a4:11:cc:1a:68:c6:
         69:bf:38:50:76:a8:a2:f4:e5:0f:97:53:a1:3f:11:c4:55:d9:
         f9:2f:d5:38:e3:b8:09:0c:2a:d2:4a:b6:96:26:1d:3e:f5:a4:
         0d:31:b7:e6:53:f0:f0:31:f4:a5:73:76:bf:4e:43:fd:27:ef:
         84:6e:9b:a3:27:cb:ff:7b:0f:51:33:7d:21:0d:b3:2f:a5:5c:
         9f:2e:ec:e2:7f:23:f0:37:8d:bd:01:61:c7:e8:b0:0c:9c:38:
         87:94:e5:c5:03:fa:e4:60:8e:f2:42:69:6d:42:97:ce:62:44:
         f2:78:09:df:9c:fb:3c:7c:a9:8a:10:21:fb:1b:82:69:9a:a0:
         40:6a:4a:7a:8c:4f:2c:1c:8e:00:b5:3e:29:3e:e4:39:d5:e7:
         79:97:a8:ef:5d:e6:54:7a:53:35:5f:d7:0b:56:b6:c1:af:39:
         08:09:30:ab:5d:c3:e6:8c:74:8c:b7:1d:36:d4:4e:f0:d5:3e:
         6a:75:eb:de:32:0a:cd:ee:31:85:ed:4a:61:2b:9c:76:81:13:
         86:00:e5:77:48:31:4a:04:92:c6:0d:36:cd:94:97:9a:97:14:
         d4:c8:b6:b9:0b:0f:fb:23:ca:4c:ad:23:08:2d:a9:5a:6e:8f:
         ff:08:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org