Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          ZFSchWU7jaCkKcOyPT/oFoVmpCvx3a5HrMHsMTRUnmo=
Subject key identifier:   F8:4F:D4:53:7A:39:1E:4A:23:B0:0D:33:08:6B:82:0F:24:EF:5E:BF
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3FFA7DC0F081F5B8A454A6A5652A86CC097C9F4B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS0.roa
Signing time:             Fri 25 Nov 2022 15:31:47 +0000
ROA not before:           Fri 25 Nov 2022 15:26:47 +0000
ROA not after:            Fri 24 Nov 2023 15:31:47 +0000
asID:                     0
IP address blocks:        89.117.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fa:7d:c0:f0:81:f5:b8:a4:54:a6:a5:65:2a:86:cc:09:7c:9f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 25 15:26:47 2022 GMT
            Not After : Nov 24 15:31:47 2023 GMT
        Subject: CN=F84FD4537A391E4A23B00D33086B820F24EF5EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:0a:66:6c:03:41:65:61:bd:f3:b8:99:53:
                    58:4f:0e:e8:11:ce:8f:0c:bf:2f:13:10:0d:31:07:
                    2b:95:30:c9:7f:5c:b3:2d:1c:4a:97:65:00:78:0e:
                    9c:e7:54:35:50:0b:7c:a9:51:1d:2e:57:d4:a0:6e:
                    51:ae:62:0d:2f:fe:d1:41:e9:03:2e:b9:68:36:b7:
                    46:24:2b:35:f9:0f:de:9c:61:0d:b5:2b:f8:10:b5:
                    96:c7:81:e6:a4:5f:00:fb:c5:31:46:77:6d:29:72:
                    3a:ab:4a:74:76:b8:71:22:c5:26:0f:f8:7e:d6:fe:
                    11:db:70:f2:42:27:b0:0b:12:ac:5c:32:d9:1d:82:
                    f4:1a:9f:1a:ef:a3:03:a4:a5:06:ae:c6:61:cd:92:
                    83:b8:69:b5:d6:3b:15:12:23:c4:b3:0a:87:6c:9a:
                    9d:18:e6:49:c2:26:98:e5:f9:5a:65:e1:bb:2e:6c:
                    81:0f:f6:7a:7a:4f:dd:0e:80:a9:f2:f5:65:7d:c9:
                    77:72:69:48:45:7b:cb:75:27:12:73:0b:f3:e6:67:
                    0c:6f:43:f6:f7:af:3a:f7:6a:d2:d3:e4:b7:0d:b7:
                    fd:b3:76:17:c3:59:aa:8f:26:3c:12:20:27:23:57:
                    f7:9e:56:1b:39:92:66:b0:8d:23:6f:27:31:32:62:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4F:D4:53:7A:39:1E:4A:23:B0:0D:33:08:6B:82:0F:24:EF:5E:BF
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:1b:eb:ab:21:5f:59:f6:4f:0d:3c:62:f9:e6:51:e9:49:
         d3:ec:eb:9e:76:f7:bc:d8:68:71:00:03:79:31:fc:d7:8a:b6:
         4f:60:8b:6a:f5:86:f2:ab:32:3b:49:96:cf:15:de:cf:e2:78:
         04:28:6b:cb:d7:52:48:c7:38:fe:33:9c:14:40:3c:7f:7e:30:
         2a:59:92:e6:0b:28:2d:50:40:ee:36:46:53:97:73:9e:53:f3:
         fc:f2:19:aa:e8:ac:29:ab:20:b7:99:08:28:c4:83:31:b4:62:
         1e:92:ec:15:56:e1:3c:2b:e4:2c:34:96:0a:35:fc:58:15:cc:
         93:62:e3:80:e0:a8:d8:13:2e:84:91:35:6e:8b:03:c0:03:d6:
         83:f8:48:83:a5:2c:97:98:5d:e5:61:a0:44:47:11:f3:e2:31:
         17:54:f8:b2:58:b0:8a:a2:84:f2:81:9d:de:a7:a9:a7:a2:35:
         85:9f:e2:58:f2:ed:51:b0:72:c4:b3:bb:15:56:38:c4:a9:be:
         b0:d7:6d:a2:76:c7:33:4e:d2:d7:7b:81:cd:26:61:bf:88:3a:
         38:20:da:39:5e:dd:81:bb:90:f1:35:55:c2:5f:93:c7:43:3d:
         21:c0:a1:2f:2a:2b:be:db:27:b0:ea:6d:bd:9c:fa:0c:06:b7:
         90:52:d1:74
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUP/p9wPCB9bikVKalZSqGzAl8n0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMjExMjUxNTI2NDdaFw0yMzExMjQxNTMxNDdaMDMxMTAvBgNV
BAMTKEY4NEZENDUzN0EzOTFFNEEyM0IwMEQzMzA4NkI4MjBGMjRFRjVFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeApmbANBZWG987iZU1hPDugR
zo8Mvy8TEA0xByuVMMl/XLMtHEqXZQB4DpznVDVQC3ypUR0uV9SgblGuYg0v/tFB
6QMuuWg2t0YkKzX5D96cYQ21K/gQtZbHgeakXwD7xTFGd20pcjqrSnR2uHEixSYP
+H7W/hHbcPJCJ7ALEqxcMtkdgvQanxrvowOkpQauxmHNkoO4abXWOxUSI8SzCods
mp0Y5knCJpjl+Vpl4bsubIEP9np6T90OgKny9WV9yXdyaUhFe8t1JxJzC/PmZwxv
Q/b3rzr3atLT5LcNt/2zdhfDWaqPJjwSICcjV/eeVhs5kmawjSNvJzEyYvEZAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQU+E/UU3o5HkojsA0zCGuCDyTvXr8wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjBtBggrBgEFBQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXVtMA0GCSqGSIb3
DQEBCwUAA4IBAQA+ERvrqyFfWfZPDTxi+eZR6UnT7Ouedve82GhxAAN5MfzXirZP
YItq9YbyqzI7SZbPFd7P4ngEKGvL11JIxzj+M5wUQDx/fjAqWZLmCygtUEDuNkZT
l3OeU/P88hmq6KwpqyC3mQgoxIMxtGIekuwVVuE8K+QsNJYKNfxYFcyTYuOA4KjY
Ey6EkTVuiwPAA9aD+EiDpSyXmF3lYaBERxHz4jEXVPiyWLCKooTygZ3ep6mnojWF
n+JY8u1RsHLEs7sVVjjEqb6w122idsczTtLXe4HNJmG/iDo4INo5Xt2Bu5DxNVXC
X5PHQz0hwKEvKiu+2yew6m29nPoMBreQUtF0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org