Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396073.roa
File:                     AS396073.roa (raw, json)
Hash identifier:          XzoFr2ef4klYDWtlZgCugG/4E5xRKoP6Kmd6lbQh9YA=
Subject key identifier:   C3:65:0A:DC:D7:95:E1:B6:2A:5E:92:78:3A:60:2D:44:26:04:2E:63
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       AAFBB8C728A71D7BCDC3E2C733EFAC550119CB
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396073.roa
Signing time:             Mon 28 Nov 2022 12:18:16 +0000
ROA not before:           Mon 28 Nov 2022 12:13:16 +0000
ROA not after:            Mon 27 Nov 2023 12:18:16 +0000
asID:                     396073
IP address blocks:        191.101.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:fb:b8:c7:28:a7:1d:7b:cd:c3:e2:c7:33:ef:ac:55:01:19:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:16 2022 GMT
            Not After : Nov 27 12:18:16 2023 GMT
        Subject: CN=C3650ADCD795E1B62A5E92783A602D4426042E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:23:cb:aa:6d:91:e6:4f:8a:2e:5e:0f:a5:
                    53:60:c8:ce:71:9e:9a:00:49:88:55:6e:88:2a:7f:
                    11:97:7d:7d:f1:0c:92:41:e9:c6:89:64:08:4c:fe:
                    5d:07:e8:bc:86:81:ef:20:24:27:61:1e:72:80:4b:
                    b7:bb:52:b7:34:f2:88:e2:09:2d:7c:b5:d2:df:be:
                    9c:34:63:2a:71:34:f4:c2:6b:2d:2a:f7:3f:60:35:
                    0f:c9:41:f8:45:af:53:3d:96:07:9e:62:3a:af:4b:
                    2a:c4:85:98:73:9c:e7:a6:fe:6f:2e:37:20:60:dc:
                    67:b5:b9:f5:3a:4c:ee:fa:f6:be:ba:54:72:15:62:
                    cc:8a:00:84:88:47:95:76:4f:93:57:8c:09:b4:4f:
                    3b:97:2b:bd:6b:7d:c1:1a:ee:9c:3e:ee:cc:11:7d:
                    75:70:63:80:d3:eb:b5:d4:72:67:92:b9:42:cd:76:
                    36:f8:a7:b1:ce:bc:0e:00:4f:d0:70:22:91:2c:f4:
                    42:68:19:c7:c0:61:d1:9b:dc:60:91:e6:3c:8f:4b:
                    3a:1c:b5:81:73:0f:94:29:16:a2:e4:81:d2:4e:bf:
                    ca:61:b0:74:33:b1:b3:53:27:71:54:36:d4:70:10:
                    a5:93:58:87:77:e5:1e:79:86:e7:ab:9c:5e:ea:a2:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:65:0A:DC:D7:95:E1:B6:2A:5E:92:78:3A:60:2D:44:26:04:2E:63
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS396073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:e8:c2:68:7e:36:52:34:87:e1:38:38:f2:fa:37:b7:72:
         c2:0e:c6:a2:99:f1:82:69:e7:dc:7b:09:40:32:b0:7e:29:9e:
         c3:b0:e9:76:3a:69:0e:6a:1b:b0:a4:22:e4:bb:2b:f7:34:20:
         b3:81:a9:1a:f9:dd:4b:67:87:5b:9d:ba:36:49:b3:f5:90:84:
         2f:56:a6:94:b0:59:3e:f9:35:5b:83:78:b4:77:63:a4:32:7e:
         c8:4d:03:11:e2:e7:2a:ac:c1:83:32:cb:1d:a3:25:66:fa:e4:
         31:b8:2b:0e:d5:b9:2a:7c:5d:b4:29:72:31:00:bb:e7:ac:a0:
         29:dd:2a:0a:4f:a8:e4:e2:da:f3:ea:1f:8a:eb:92:3b:33:30:
         f6:da:9a:64:f4:72:93:5c:fc:8a:0b:82:3c:b9:92:90:b9:7a:
         20:ac:2a:2a:d3:2c:be:e4:e0:9a:a1:fb:49:0c:0a:a0:74:a3:
         cd:a6:79:29:48:b3:ba:2f:2f:1d:9b:46:10:c0:5d:c9:85:41:
         c2:60:79:4d:7f:05:d2:f2:71:39:bb:4b:ea:3f:df:44:da:4a:
         1c:47:58:37:31:73:23:b6:63:55:6d:9b:e6:55:48:77:b2:bd:
         52:0f:7b:11:b8:61:1b:a6:30:12:73:20:ff:ce:20:1f:2b:a5:
         3b:2f:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org