Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS139660.roa
File:                     AS139660.roa (raw, json)
Hash identifier:          akglBr3lUpIftTBUur58x38st9cnu5RaIr0L4FBJEdE=
Subject key identifier:   23:D2:41:B7:97:4E:48:FD:7B:B6:49:03:DD:88:6D:29:D4:16:26:D1
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       13F359D7248FD5E056B34135F554B844BA891EDA
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS139660.roa
Signing time:             Wed 18 Jan 2023 08:41:23 +0000
ROA not before:           Wed 18 Jan 2023 08:36:23 +0000
ROA not after:            Wed 17 Jan 2024 08:41:23 +0000
asID:                     139660
IP address blocks:        89.117.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f3:59:d7:24:8f:d5:e0:56:b3:41:35:f5:54:b8:44:ba:89:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 18 08:36:23 2023 GMT
            Not After : Jan 17 08:41:23 2024 GMT
        Subject: CN=23D241B7974E48FD7BB64903DD886D29D41626D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:22:fe:ef:04:24:79:3a:cb:d9:f8:6f:ba:
                    a6:2b:9c:8d:05:b5:f1:03:e7:59:0d:8b:d1:ae:31:
                    38:1f:bd:78:cd:62:7b:8d:e8:9b:93:31:5b:ab:fe:
                    6e:46:fd:7f:9e:ef:da:c1:7d:94:69:10:25:5f:74:
                    cd:bd:19:c4:5d:16:15:89:e9:1e:a9:78:bd:7a:31:
                    df:0c:53:e7:14:06:27:2a:c8:fd:55:ea:21:35:d8:
                    6e:5b:6b:d4:85:3f:c5:14:42:17:65:16:5d:41:20:
                    c3:1c:19:1b:18:8a:73:f6:c5:12:6b:2e:84:a9:3b:
                    8a:6a:65:f0:9c:75:f7:23:5c:dc:31:98:98:b2:7c:
                    be:3d:9f:64:9e:ff:7b:66:9b:c0:80:57:b3:9d:03:
                    ba:78:17:59:f1:ca:d4:1a:20:66:d0:53:61:50:08:
                    44:83:03:30:6d:f7:9d:1b:83:d3:46:8b:e8:94:0c:
                    11:47:80:61:c8:18:e1:32:9b:1a:4d:44:c8:3d:fb:
                    6d:63:09:45:a0:14:00:c8:2d:f6:7b:34:73:5f:96:
                    48:34:8a:17:1e:fb:7d:50:6d:f3:9c:e2:65:ea:b9:
                    d6:bb:44:b3:04:7f:31:33:53:a1:ce:1b:8b:e0:74:
                    88:e5:27:02:9b:69:2d:c1:55:de:6a:dc:74:01:b3:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D2:41:B7:97:4E:48:FD:7B:B6:49:03:DD:88:6D:29:D4:16:26:D1
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS139660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:03:03:fe:74:54:c1:40:49:3c:a1:6b:de:6b:ca:ff:84:dc:
         08:dc:d4:42:37:ab:69:f1:58:89:43:56:bd:cb:5d:62:3b:37:
         a0:b7:b1:17:23:48:f1:08:f3:1a:07:f8:18:77:97:aa:fd:f0:
         d7:a0:5c:f1:9c:c7:0f:d1:33:2d:b4:8d:f8:e9:30:9d:32:fa:
         55:ac:4b:fb:ec:d5:4c:25:e1:ff:bf:72:5b:7a:08:38:1a:74:
         50:0a:71:32:6b:b4:4d:69:d8:70:ab:21:f3:2c:17:fa:fb:1b:
         58:eb:4c:a2:73:63:30:5f:b2:d8:05:b0:bc:95:b5:56:28:59:
         4f:0b:fd:c3:8a:a5:13:41:ba:bc:32:e3:57:03:56:51:11:d5:
         b4:fc:ba:76:22:b6:9c:6a:90:e1:34:1b:66:c3:c8:25:a5:7f:
         65:6b:83:85:53:fb:61:b4:5e:84:8d:b9:6c:1a:9f:8f:39:20:
         e5:b6:25:1f:b6:ca:2b:02:bd:28:5c:e0:86:8b:2d:67:b0:53:
         2b:32:fb:f2:3f:d1:af:19:d3:cf:40:3f:c5:88:61:e9:68:bb:
         ff:f4:c2:e2:74:99:41:d8:a6:a7:58:f9:dd:62:b7:39:b8:d9:
         bf:b2:16:8d:4d:55:13:f0:44:b8:f0:88:90:9d:b6:1c:67:42:
         ab:38:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org