Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS12735.roa
File:                     AS12735.roa (raw, json)
Hash identifier:          3UVdCV5TNa0ODi0nqZeBq3LC6rPS6LmUIoWzfUy//8s=
Subject key identifier:   4D:6A:A4:AA:CE:92:34:BC:95:C4:63:63:6F:BD:B2:DB:5C:07:1C:55
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6C46A661C69AFDF1C98D8675C6B57FDF5EDC8DA9
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS12735.roa
Signing time:             Thu 03 Nov 2022 13:06:44 +0000
ROA not before:           Thu 03 Nov 2022 13:01:44 +0000
ROA not after:            Thu 02 Nov 2023 13:06:44 +0000
asID:                     12735
IP address blocks:        89.117.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:46:a6:61:c6:9a:fd:f1:c9:8d:86:75:c6:b5:7f:df:5e:dc:8d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov  3 13:01:44 2022 GMT
            Not After : Nov  2 13:06:44 2023 GMT
        Subject: CN=4D6AA4AACE9234BC95C463636FBDB2DB5C071C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:02:ef:e6:03:98:1d:79:fe:d7:91:3a:09:
                    52:9f:15:f5:cf:7d:86:a9:fe:01:52:fe:6e:0d:67:
                    c9:09:da:21:4c:0f:da:92:03:5b:64:b8:4e:ce:4a:
                    0e:da:5f:1e:8c:cd:26:4d:81:f3:9e:4f:af:d2:cc:
                    4f:27:55:30:da:63:71:a2:9c:05:e3:ad:a4:a1:9e:
                    c7:8c:c8:11:e2:4c:37:1b:ba:ef:6b:1b:6d:7a:f5:
                    27:e4:46:f8:7b:49:0f:f6:ce:12:0c:08:c7:ed:c9:
                    b9:1c:07:32:cd:16:9c:af:5b:6d:58:93:af:eb:ec:
                    d2:f5:16:af:83:d8:2f:99:86:fb:f6:04:2b:7e:f6:
                    23:11:14:3c:f2:f3:07:93:57:60:f8:a2:11:0a:e8:
                    92:31:48:91:2d:6d:69:43:9f:8e:e9:ec:8b:b5:dc:
                    f8:e1:46:9f:77:15:97:74:c9:7e:dc:67:3f:96:ab:
                    fc:ab:53:25:71:63:3b:9a:fa:5b:de:c5:cd:09:cc:
                    e6:85:51:72:80:89:d4:81:a4:9f:d1:dc:2e:be:36:
                    ce:58:1a:27:06:81:77:ec:d0:79:cf:33:39:98:9e:
                    c4:46:25:b3:92:f3:e1:b3:a7:a2:ef:7d:58:b6:38:
                    1f:a6:84:e8:7a:2b:6b:92:ed:41:aa:d6:9b:09:af:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6A:A4:AA:CE:92:34:BC:95:C4:63:63:6F:BD:B2:DB:5C:07:1C:55
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS12735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:5e:7c:69:ce:5d:a3:b8:3b:c4:b5:15:d7:3a:6e:d2:58:18:
         1f:14:a4:6f:07:78:75:4d:aa:7a:f0:a9:bc:da:60:70:92:2d:
         c4:66:cb:ad:09:33:73:f6:7e:8c:14:97:ba:47:f6:d1:a0:5b:
         98:60:1d:6f:3f:e5:f9:ca:8c:ac:96:37:92:73:47:08:2f:ff:
         80:46:c4:f6:0b:85:05:69:fc:94:f8:db:e6:72:76:0b:8e:5e:
         6d:3a:9b:bb:8c:bb:23:5f:a4:c1:75:9e:92:3b:8a:bd:7d:dc:
         cf:e8:c3:58:0d:60:83:5f:5a:c6:a9:38:70:0a:0d:55:d2:25:
         98:16:a8:78:34:ff:e6:d0:39:70:fb:61:4b:45:85:a8:3b:f8:
         81:6e:2d:f6:9b:12:4c:99:82:ee:d0:20:a4:48:22:4c:14:de:
         17:47:20:bb:0c:ad:14:e9:c2:2e:85:6d:1c:8e:e6:08:aa:1c:
         0a:43:5d:2c:31:7a:55:11:61:0f:f4:fe:32:cd:9b:55:8e:7f:
         48:bb:73:f0:7b:c1:7e:4c:d5:ef:1e:1d:f1:e9:38:ae:39:cd:
         8f:37:98:01:80:c0:f2:9f:55:4d:19:50:f0:c2:04:72:ff:88:
         ef:76:c1:07:96:fb:9c:58:a7:da:ab:12:53:00:01:25:59:40:
         b0:76:5b:74
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUbEamYcaa/fHJjYZ1xrV/317cjakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMjExMDMxMzAxNDRaFw0yMzExMDIxMzA2NDRaMDMxMTAvBgNV
BAMTKDRENkFBNEFBQ0U5MjM0QkM5NUM0NjM2MzZGQkRCMkRCNUMwNzFDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zALv5gOYHXn+15E6CVKfFfXP
fYap/gFS/m4NZ8kJ2iFMD9qSA1tkuE7OSg7aXx6MzSZNgfOeT6/SzE8nVTDaY3Gi
nAXjraShnseMyBHiTDcbuu9rG2169SfkRvh7SQ/2zhIMCMftybkcBzLNFpyvW21Y
k6/r7NL1Fq+D2C+Zhvv2BCt+9iMRFDzy8weTV2D4ohEK6JIxSJEtbWlDn47p7Iu1
3PjhRp93FZd0yX7cZz+Wq/yrUyVxYzua+lvexc0JzOaFUXKAidSBpJ/R3C6+Ns5Y
GicGgXfs0HnPMzmYnsRGJbOS8+Gzp6LvfVi2OB+mhOh6K2uS7UGq1psJr66FAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUTWqkqs6SNLyVxGNjb72y21wHHFUwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMxMjczNS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl1BTANBgkq
hkiG9w0BAQsFAAOCAQEAGF58ac5do7g7xLUV1zpu0lgYHxSkbwd4dU2qevCpvNpg
cJItxGbLrQkzc/Z+jBSXukf20aBbmGAdbz/l+cqMrJY3knNHCC//gEbE9guFBWn8
lPjb5nJ2C45ebTqbu4y7I1+kwXWekjuKvX3cz+jDWA1gg19axqk4cAoNVdIlmBao
eDT/5tA5cPthS0WFqDv4gW4t9psSTJmC7tAgpEgiTBTeF0cguwytFOnCLoVtHI7m
CKocCkNdLDF6VRFhD/T+Ms2bVY5/SLtz8HvBfkzV7x4d8ek4rjnNjzeYAYDA8p9V
TRlQ8MIEcv+I73bBB5b7nFin2qsSUwABJVlAsHZbdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org