Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS271988.roa
File:                     AS271988.roa (raw, json)
Hash identifier:          g3szdceoZQ2GTHPmBGcYgX+cN9/3cIQE0bIRL9LzFuk=
Subject key identifier:   2A:F7:4A:7F:2D:FE:16:6D:F9:BF:99:92:3E:E3:BF:E9:E1:BE:E6:A2
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       58929791A6AE55BAAB709A77634E439FA6A756F6
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS271988.roa
Signing time:             Wed 09 Mar 2022 12:53:43 +0000
ROA not before:           Wed 09 Mar 2022 12:48:43 +0000
ROA not after:            Wed 08 Mar 2023 12:53:43 +0000
asID:                     271988
IP address blocks:        191.96.164.0/24 maxlen: 24
                          191.101.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:92:97:91:a6:ae:55:ba:ab:70:9a:77:63:4e:43:9f:a6:a7:56:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 12:48:43 2022 GMT
            Not After : Mar  8 12:53:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:3b:0d:7a:a4:5d:cb:b0:af:0f:dc:15:5a:
                    ed:7c:16:5e:04:78:54:0f:e3:11:e4:0f:c4:c9:e0:
                    d3:e7:08:35:07:75:3f:85:0a:d0:de:06:ed:7c:1a:
                    c7:5c:2b:9f:9e:96:99:d0:93:5d:2d:cd:b2:26:db:
                    91:da:27:6a:bf:7f:ce:74:c2:5e:9c:8c:3e:ad:0b:
                    65:28:25:f6:d9:10:ca:39:cd:f7:d5:3b:5b:83:d6:
                    6e:af:bd:a0:a7:b2:17:53:cd:af:05:28:da:57:23:
                    4f:cb:b9:de:c4:45:67:d0:73:32:14:35:27:e4:d4:
                    d5:52:ac:ad:18:8a:e5:95:3c:ec:50:4e:61:7a:a1:
                    6d:5b:8b:c1:e6:fd:da:c4:cc:a5:ef:39:86:3b:cc:
                    a3:ed:bd:6c:33:83:a5:ea:28:bd:bf:b1:40:e1:55:
                    c0:96:b7:f1:3a:81:e6:45:9b:4a:d4:10:cf:92:49:
                    38:09:6b:4e:00:70:f4:a7:b7:80:fc:bd:32:c1:fd:
                    d7:0c:f2:bc:52:c7:5d:6a:fc:f9:0d:b5:e1:19:5a:
                    5a:ec:4c:00:de:fc:eb:61:c2:67:33:b9:61:00:73:
                    6f:31:3a:86:92:d2:c1:e1:c8:4e:e2:f1:4c:19:a3:
                    18:2f:29:f4:99:0e:89:12:15:26:a2:a7:d7:4f:89:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F7:4A:7F:2D:FE:16:6D:F9:BF:99:92:3E:E3:BF:E9:E1:BE:E6:A2
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS271988.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.164.0/24
                  191.101.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d7:1f:c7:6f:7b:e5:5e:42:6d:03:b9:b6:46:72:ee:ca:17:
         db:05:7c:bf:51:27:a3:6d:c6:68:85:7e:20:ef:8c:82:4b:c6:
         56:30:05:e3:9a:ed:87:e1:23:8d:a5:1d:9f:f8:fe:d1:17:ef:
         be:7b:bb:cf:7f:20:18:ea:6f:94:de:3b:ae:a3:02:9c:51:c4:
         e0:e1:13:e3:02:6a:78:0d:b1:f4:b0:aa:d4:f1:8b:b1:3b:dd:
         ae:b9:c5:fa:c1:1d:6a:5a:92:84:2d:26:c5:5d:29:a6:69:b0:
         69:14:84:05:1a:03:df:13:b9:0b:a7:77:44:76:67:45:dd:07:
         30:08:68:54:90:d9:e5:a0:bf:c4:d7:38:51:50:c7:23:99:fc:
         c3:26:33:dd:44:53:df:1e:ee:4d:aa:96:e8:84:a8:78:58:2c:
         ee:09:91:65:4d:07:9f:9a:ae:20:9e:ed:17:2e:26:68:64:57:
         53:ad:3a:2d:05:e0:6c:d8:ea:8c:95:9d:90:cd:e2:21:6b:b7:
         76:df:eb:f9:c5:ea:6c:26:75:59:af:cc:88:5f:f4:46:97:70:
         1e:3f:12:06:6a:05:18:77:3b:57:15:d1:3e:10:11:1f:27:d1:
         ed:6c:22:45:0d:ad:af:67:3d:ce:10:69:4e:82:47:19:ae:ce:
         2a:c1:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org