Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272882.roa
File:                     AS272882.roa (raw, json)
Hash identifier:          PWD/IoqYFCFZgwpEUYIc3P+GS6YDu4FK6Y8LtUbCLrk=
Subject key identifier:   05:3F:07:9D:37:BF:AA:68:CF:4C:0A:1F:EF:D3:6E:3A:0F:A9:A5:DB
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       47317579AE8C52D6E1B057A638D2869C152478CD
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272882.roa
Signing time:             Mon 28 Nov 2022 12:18:18 +0000
ROA not before:           Mon 28 Nov 2022 12:13:18 +0000
ROA not after:            Mon 27 Nov 2023 12:18:18 +0000
asID:                     272882
IP address blocks:        191.96.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:31:75:79:ae:8c:52:d6:e1:b0:57:a6:38:d2:86:9c:15:24:78:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:18 2022 GMT
            Not After : Nov 27 12:18:18 2023 GMT
        Subject: CN=053F079D37BFAA68CF4C0A1FEFD36E3A0FA9A5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:52:c8:f0:d5:0a:c3:7e:dc:af:75:d6:05:
                    1e:ee:a8:4b:07:4a:00:8f:b5:1f:78:9a:b9:42:54:
                    dc:60:8b:85:33:ea:fe:be:0a:ec:5f:bc:33:43:4a:
                    3c:1f:09:5a:61:67:a8:af:7b:65:33:33:57:0b:54:
                    5b:ba:23:42:29:c5:6c:ef:71:45:fb:99:5b:08:23:
                    76:a6:e3:d1:9f:21:b9:1f:4f:11:24:9a:31:1f:b6:
                    41:b1:ca:53:02:35:a9:dd:35:5f:ca:5e:f9:36:cf:
                    ae:ee:25:48:e0:47:74:32:ee:b1:a7:af:bd:04:d2:
                    a9:ca:bb:3f:05:e5:4d:cb:95:ef:2d:2c:c9:d9:24:
                    ae:4b:07:ad:89:9e:94:fe:5a:09:e4:24:bb:8a:d4:
                    e3:f9:cd:6b:8f:c2:c4:db:e6:a4:52:44:be:1e:72:
                    be:0f:45:8b:47:de:7a:32:38:63:9e:1d:60:37:4e:
                    d2:74:9d:c6:0f:90:ce:11:96:7b:6a:fe:90:1e:a3:
                    f4:61:7b:c7:50:44:fd:8c:d5:a2:2c:ff:ea:d1:06:
                    52:a8:0e:6b:b0:12:92:be:f0:c3:9a:94:b3:6b:09:
                    d1:fc:aa:61:a6:62:ec:e3:8e:2e:a2:da:1e:28:fa:
                    1b:a7:88:03:89:1f:b2:22:4e:50:31:e7:30:56:a7:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:07:9D:37:BF:AA:68:CF:4C:0A:1F:EF:D3:6E:3A:0F:A9:A5:DB
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272882.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:92:9d:55:f9:cf:f0:a2:59:f4:90:d1:7b:d1:3e:a3:1b:
         02:52:e1:c5:39:38:13:db:54:b8:5d:87:f6:43:bc:13:bc:1d:
         7a:98:21:c8:6e:0d:0f:6d:56:07:1a:42:1d:50:d3:2d:8d:00:
         8b:a2:7a:71:9b:45:74:26:36:19:68:21:f0:44:45:20:a9:6e:
         a5:f9:ab:57:bf:1b:48:ca:3b:e0:ff:28:ce:28:28:84:34:b0:
         11:0f:e9:50:00:a2:87:a8:1b:7a:54:61:de:a0:9f:74:3d:75:
         ac:c9:5a:a1:65:20:89:d5:b4:04:c7:54:b5:e6:25:3d:26:b1:
         24:54:f2:71:dc:7a:2e:db:a5:db:7d:d2:2f:31:9a:3c:15:54:
         c1:b6:21:06:64:8c:3a:ca:0e:2e:06:4a:c9:40:02:8b:3b:71:
         df:35:73:f5:da:07:15:17:eb:cb:ef:1c:c4:8f:17:50:25:71:
         8f:02:1a:c0:db:7d:f5:36:c1:a5:23:24:2d:52:21:cb:4b:ab:
         36:8c:fa:b9:8a:1c:fa:f3:94:1a:83:25:be:72:e5:1f:0e:34:
         d1:b1:39:8a:c7:a7:d7:8c:af:e7:1a:2b:2a:02:c4:6a:de:62:
         87:ed:d6:c5:17:ea:ef:7e:1c:a9:63:fe:56:38:69:b2:c4:a0:
         62:fe:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org