Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272470.roa
File:                     AS272470.roa (raw, json)
Hash identifier:          6h4xPe5r0EKJJcGOcNipnHI5N8LisGrNYb7FEye3+MA=
Subject key identifier:   97:37:AD:D4:84:9E:A9:1E:B7:53:64:0C:8C:AD:E3:A8:62:3A:9B:FE
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5FBE876A1DB716650B692E1808EFF6B534F8533D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272470.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     272470
IP address blocks:        191.101.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:be:87:6a:1d:b7:16:65:0b:69:2e:18:08:ef:f6:b5:34:f8:53:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=9737ADD4849EA91EB753640C8CADE3A8623A9BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:3c:ee:65:77:9f:03:2a:a9:4b:1c:65:aa:
                    c5:52:e9:08:2f:3b:f1:f2:b9:2d:80:cb:bc:bc:42:
                    a4:66:ac:9f:85:84:2f:10:4e:60:a3:43:a6:a5:90:
                    02:bc:ee:15:90:33:d0:37:77:d9:b1:0a:86:10:d1:
                    0d:e7:f9:23:3d:1e:54:90:8e:30:6e:ad:59:b9:33:
                    d4:3f:89:18:d6:12:76:34:fa:cb:17:08:e9:59:dc:
                    43:2a:f6:d7:7a:42:04:46:95:81:5f:72:6b:3b:ed:
                    03:46:2c:f5:db:89:8d:6f:16:51:bd:9f:61:43:41:
                    91:11:92:f8:8b:98:91:c7:ab:9d:7a:ad:3b:7b:0f:
                    0e:3f:47:d8:35:84:e9:06:b0:b7:75:39:8e:f8:48:
                    c6:ff:ee:7a:95:c3:b8:eb:47:67:97:b3:1c:ae:f6:
                    59:9b:b1:e4:f5:65:3a:ca:07:12:f4:e4:35:ef:f0:
                    d4:de:b8:e5:0b:32:04:67:a9:c2:84:66:22:8b:2d:
                    b1:ee:98:f3:07:99:df:66:a4:71:13:9f:52:2c:7d:
                    93:3a:29:aa:da:c8:4d:f8:10:b4:a9:9b:65:7e:9e:
                    44:16:31:b8:24:9b:11:1c:36:85:73:a9:51:e9:31:
                    10:c3:8e:1a:58:82:41:09:88:8e:b2:91:7a:ea:8c:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:AD:D4:84:9E:A9:1E:B7:53:64:0C:8C:AD:E3:A8:62:3A:9B:FE
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:c6:57:50:d3:28:6c:0b:85:a7:80:8b:9d:c0:93:5f:10:
         ec:1f:f7:28:24:ac:db:e5:07:85:5c:8f:64:43:27:ed:c3:7f:
         20:86:7b:2f:f1:bc:67:bb:4a:52:6e:62:2c:dc:69:60:e3:c0:
         75:57:34:52:54:ef:60:c0:63:f2:8c:70:55:74:5b:5e:fc:c7:
         2c:65:67:9c:83:21:a7:c4:b0:e5:f0:46:66:21:ae:42:74:25:
         83:45:d4:44:e3:4f:39:eb:d4:08:f3:f1:3e:44:8f:2e:11:61:
         d5:1f:5a:30:06:65:57:5a:b3:de:2f:5f:f0:43:35:7b:39:25:
         ff:6a:d9:26:8a:52:e5:18:5e:57:64:4c:83:73:0d:d6:23:8e:
         c2:32:d9:d1:9e:af:19:94:2c:e5:4c:81:06:17:26:6d:30:5f:
         e3:fd:30:48:f3:fe:db:8f:a8:13:d7:5e:47:f3:5a:9e:57:66:
         ca:37:99:ed:eb:05:bc:a2:9d:20:b8:32:f0:58:a1:13:e4:d9:
         1e:9f:d9:ba:85:7e:83:d6:f5:8a:4c:ce:de:98:1a:9e:fc:37:
         c8:99:99:a0:e8:ec:44:f3:38:48:dc:ed:be:f0:24:f2:59:8c:
         3c:5d:90:78:39:ad:a4:9a:63:58:83:bc:02:6d:bd:0d:ed:74:
         82:d2:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org