Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272696.roa
File:                     AS272696.roa (raw, json)
Hash identifier:          0nHrZ3Q3schZPiOZ7301jDtInO1myH9Nq+/tYPyBW0s=
Subject key identifier:   FC:A1:AF:20:1B:A0:51:11:9E:47:00:68:0A:E8:80:88:3D:71:4B:FA
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       1B5D3CCD5A79D6FA9135881183E19DD58772FE7C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272696.roa
Signing time:             Mon 06 Feb 2023 04:13:39 +0000
ROA not before:           Mon 06 Feb 2023 04:08:39 +0000
ROA not after:            Mon 05 Feb 2024 04:13:39 +0000
asID:                     272696
IP address blocks:        181.215.4.0/24 maxlen: 24
                          191.96.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5d:3c:cd:5a:79:d6:fa:91:35:88:11:83:e1:9d:d5:87:72:fe:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  6 04:08:39 2023 GMT
            Not After : Feb  5 04:13:39 2024 GMT
        Subject: CN=FCA1AF201BA051119E4700680AE880883D714BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:d5:c3:a2:ca:5c:1c:2e:a5:d5:6b:b4:f8:
                    02:3e:c2:83:c0:a0:b1:ea:5f:3f:7d:05:f7:2d:09:
                    4d:0a:a4:9c:50:f1:39:fd:34:88:cd:7c:79:13:bb:
                    01:75:4d:e8:b2:0b:11:f3:02:97:c8:b2:75:70:43:
                    36:fb:d2:ae:a2:7b:b9:16:84:04:06:05:45:d0:f3:
                    89:a7:7c:99:be:fb:f0:d8:f3:a8:f4:47:65:f2:f0:
                    4a:44:cf:a5:60:11:3d:24:c8:dc:35:25:03:3e:97:
                    e7:c3:a5:e7:49:d4:55:62:83:6c:bf:7e:10:3f:9f:
                    84:12:b5:f8:8c:cb:f8:33:4d:56:78:f4:2c:56:36:
                    1f:25:91:61:47:d6:69:16:d6:e3:bb:80:8f:bc:bf:
                    19:1a:18:a1:be:ee:5d:f8:91:52:e2:36:cc:2f:e6:
                    8a:ab:f4:38:70:68:97:d2:8a:55:0e:5e:1f:29:d9:
                    d6:3e:c6:b1:13:ca:47:09:42:11:64:a4:68:57:bf:
                    25:4a:ca:a6:66:86:c6:3c:5f:8c:3b:17:0f:63:60:
                    01:15:0e:55:94:85:00:bf:f2:eb:c2:a8:6d:22:89:
                    6e:2e:3f:19:3a:82:50:42:8c:6d:ed:99:11:f4:7a:
                    da:b2:84:b7:ad:8c:02:1e:42:93:ab:f4:f5:3c:96:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:AF:20:1B:A0:51:11:9E:47:00:68:0A:E8:80:88:3D:71:4B:FA
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.4.0/24
                  191.96.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:28:81:62:a2:8d:02:50:07:1f:d1:0c:76:27:b2:d4:8c:37:
         88:a8:20:c9:e6:ee:56:86:53:13:f2:63:12:f4:0e:a4:d3:d0:
         b0:87:1b:69:d9:b1:30:4d:b9:e0:58:5e:a4:f2:3d:44:ae:53:
         9a:fe:7c:9b:be:73:dd:cb:f5:4c:12:52:e0:8a:3f:28:19:62:
         00:7e:1b:58:fb:60:11:f8:e5:59:f7:29:c6:09:76:e9:18:bd:
         28:65:f3:b0:ec:e0:74:6d:d2:6c:ab:3c:7b:56:84:04:8e:67:
         0d:e9:0d:ae:51:12:ce:8d:40:b9:54:83:b0:f5:99:99:6b:1d:
         4d:10:5b:9c:16:32:9d:a8:c9:92:3b:42:3c:f9:97:5d:9a:1c:
         75:c7:9b:31:28:36:2f:f5:ae:dc:f3:d4:47:6b:6a:3d:17:0d:
         0c:7a:51:06:19:3c:4f:8f:22:37:47:6f:1e:08:8d:24:2b:e0:
         84:18:c9:27:2f:48:c2:7f:11:d0:8c:64:6b:71:4e:76:ec:77:
         df:8e:7c:f4:db:72:d6:65:73:b9:21:7c:32:2a:53:3e:ef:3c:
         a6:4c:94:06:a1:47:22:20:c3:88:a0:f1:f2:ad:18:6c:aa:b7:
         4c:26:5a:c4:7e:62:ef:ad:0a:20:e4:8b:5c:47:03:b7:37:9e:
         3d:f7:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org