Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137409.roa
File:                     AS137409.roa (raw, json)
Hash identifier:          HXtLY43oF1aQNMu+6t6e7rui+g8KznCKh0sABZu94Tc=
Subject key identifier:   89:46:75:90:04:B4:E5:31:11:54:D4:CC:8A:BC:B5:85:FD:65:FE:24
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7C633C765ECD43408ABEF0E3B26CEE22BCE49D2E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137409.roa
Signing time:             Fri 27 Jan 2023 08:16:05 +0000
ROA not before:           Fri 27 Jan 2023 08:11:05 +0000
ROA not after:            Fri 26 Jan 2024 08:16:05 +0000
asID:                     137409
IP address blocks:        89.116.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:63:3c:76:5e:cd:43:40:8a:be:f0:e3:b2:6c:ee:22:bc:e4:9d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 27 08:11:05 2023 GMT
            Not After : Jan 26 08:16:05 2024 GMT
        Subject: CN=8946759004B4E5311154D4CC8ABCB585FD65FE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:dd:5c:05:d4:bf:b5:4d:92:92:ca:28:db:
                    fd:2d:df:2c:62:75:1a:3f:e3:38:82:cf:c6:55:c6:
                    5f:bc:a9:2c:d0:b2:af:43:64:e6:03:26:e4:8c:f4:
                    4e:fe:74:e0:fd:43:85:03:59:72:54:fb:28:43:a0:
                    61:e8:fe:b4:36:9a:4f:41:b4:30:8e:14:85:32:27:
                    af:61:22:93:38:b5:ad:5a:88:f5:20:ef:28:80:d6:
                    60:9a:31:6a:e4:8d:c5:99:c5:f1:01:0e:c6:47:90:
                    df:b4:65:24:6c:43:8f:19:a6:8c:27:24:29:b4:b9:
                    85:dd:7b:3c:ce:aa:3f:fd:ea:84:10:81:c9:2d:9b:
                    28:f6:d7:02:d9:6d:f0:8f:53:1b:b9:37:3e:75:cc:
                    95:9e:f4:d0:34:05:a1:10:9d:11:47:c2:de:13:4f:
                    ef:45:2a:5c:54:47:3e:b0:21:05:31:44:f9:4a:f0:
                    4f:c1:70:15:69:fa:25:5c:20:6e:aa:9d:15:4f:69:
                    ea:aa:b9:7c:0b:10:b2:56:38:63:62:02:f4:f2:53:
                    3b:82:8c:11:cd:55:8a:bd:7a:5f:7a:f4:fe:cc:4b:
                    4a:d7:e5:ed:c5:5d:76:b1:f9:ac:68:45:95:80:87:
                    5b:3f:eb:55:2c:3a:e7:23:f9:c6:c1:35:6b:eb:8b:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:46:75:90:04:B4:E5:31:11:54:D4:CC:8A:BC:B5:85:FD:65:FE:24
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f8:8d:6f:7f:5e:18:7a:34:69:63:cf:3c:00:e5:32:2c:9a:
         16:37:2b:9c:8a:0c:27:bd:5f:59:cf:a2:80:e1:04:26:4a:dc:
         72:68:5a:0e:1a:3a:21:c2:24:02:0b:41:46:e7:16:e2:c1:b1:
         d5:9c:49:66:30:3c:74:1f:94:01:42:6f:37:b2:9b:22:51:48:
         c2:1f:40:8c:77:11:d0:fd:59:87:59:3b:ad:58:40:9e:d6:c0:
         b5:e4:e9:f4:2b:2c:0b:ee:fe:0c:15:41:04:e2:dc:a9:d1:62:
         c5:cf:8f:0c:32:a7:44:5d:32:7f:30:34:21:73:3e:7e:40:96:
         20:66:97:a0:ae:9e:5f:ea:98:04:e8:b7:87:81:a3:a3:f9:63:
         56:46:07:a8:40:b7:5b:6d:05:24:52:f1:c6:45:b9:cb:d4:35:
         5e:f9:82:89:0f:d8:47:61:bf:87:92:fd:0b:ad:0d:97:b4:d3:
         cb:2f:0a:ac:dd:77:bf:64:0d:61:d3:0f:54:ac:f1:98:93:b4:
         93:f8:bf:88:f3:79:e3:d9:2b:28:88:43:d1:b3:6b:c7:4f:c1:
         b7:07:f4:4f:5b:9e:b1:d5:3f:2c:48:0a:2b:c3:c2:f0:dc:6d:
         86:da:a7:87:f5:3e:b7:cc:3a:b9:38:e9:66:bf:17:4b:a4:f5:
         d2:1d:74:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org