Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140155.roa
File:                     AS140155.roa (raw, json)
Hash identifier:          2nX0PDlVV0K9N1ep+LJmkZpN/RafQVlu2qFv7N13DGw=
Subject key identifier:   08:A2:16:2E:22:6C:6A:A5:0B:3A:AD:39:6E:EA:79:F5:DC:D9:5D:4D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0766BFA8DDE52980A0EE0D23BDD0BF215B9AD0DB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140155.roa
Signing time:             Sat 20 May 2023 10:23:59 +0000
ROA not before:           Sat 20 May 2023 10:18:59 +0000
ROA not after:            Sat 18 May 2024 10:23:59 +0000
asID:                     140155
IP address blocks:        89.117.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:66:bf:a8:dd:e5:29:80:a0:ee:0d:23:bd:d0:bf:21:5b:9a:d0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 20 10:18:59 2023 GMT
            Not After : May 18 10:23:59 2024 GMT
        Subject: CN=08A2162E226C6AA50B3AAD396EEA79F5DCD95D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:df:12:f6:1e:3e:ac:7f:68:b1:c0:a7:f3:
                    af:76:4f:61:3b:b2:36:b3:b2:9a:f2:7e:64:6f:70:
                    ec:0c:5b:a4:5d:5a:f4:7b:8d:70:c3:50:b5:09:30:
                    f4:13:5d:34:e6:0a:cd:25:a8:08:cd:70:59:76:c3:
                    dd:a8:fa:54:6f:ec:b4:e7:30:a0:d9:f7:a9:78:f3:
                    e4:bb:e9:2e:31:9c:0a:51:9b:81:ee:79:2c:72:c0:
                    68:95:54:98:df:f1:b6:9d:4f:83:e8:c8:f0:11:3c:
                    a5:a3:06:b0:15:55:12:f8:46:56:6b:64:e1:99:fe:
                    5e:7b:97:c2:e7:53:4c:15:9b:af:db:3f:88:41:a5:
                    9b:0e:27:c5:07:1e:be:23:2c:25:47:43:d4:28:27:
                    c1:8c:0b:b3:48:64:cb:6d:15:51:80:b2:47:01:e8:
                    2b:cc:39:3d:eb:45:28:f6:ec:45:dd:37:06:fb:70:
                    c8:80:24:4f:df:a2:a2:2e:62:61:f1:82:35:b0:b3:
                    84:b3:ad:96:9c:5d:7a:b6:3e:11:55:e9:58:a6:d5:
                    73:a7:80:1d:d2:67:f9:6a:47:76:56:c0:d4:e0:95:
                    05:da:17:62:0f:59:60:20:45:30:f6:3f:ec:5d:50:
                    c2:e2:86:f8:99:57:7b:4d:9c:fc:a5:80:03:ee:fc:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:16:2E:22:6C:6A:A5:0B:3A:AD:39:6E:EA:79:F5:DC:D9:5D:4D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140155.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:13:a5:4b:be:8c:b1:01:67:15:71:82:7c:c1:32:1f:59:4b:
         a7:14:ce:39:98:88:78:f1:ea:8b:86:e9:b4:fd:39:bc:ce:f1:
         95:02:e0:9c:70:24:ba:27:44:c6:c8:14:64:8b:29:99:27:48:
         f8:f3:3c:49:13:bc:f1:09:eb:af:4d:4f:7b:bd:7f:d9:ce:5e:
         77:80:7d:45:e8:d0:cb:c9:4b:8b:24:be:0d:94:1a:85:d8:5b:
         1c:da:62:92:6c:00:d3:8e:69:b8:a6:65:00:06:e0:07:94:d0:
         18:87:c9:78:3f:4a:de:82:c3:ab:bf:b9:86:34:02:53:65:dd:
         32:32:07:be:ba:86:4e:b1:f9:ac:a8:68:ab:4c:8d:a6:e0:06:
         78:2a:c6:2f:eb:f8:d7:65:4a:dc:ce:dd:4e:79:13:9d:9f:9a:
         28:93:55:99:b0:35:3b:c1:1b:8e:d4:5d:7c:b2:08:b8:df:94:
         9b:90:d4:11:79:57:88:e7:14:fb:4d:f9:8d:71:f9:4d:29:85:
         59:e5:36:32:f7:95:41:31:7f:e3:35:ab:86:fd:44:83:81:7b:
         40:e6:6d:50:6b:49:68:8c:40:32:7a:e3:87:1f:1d:2c:ef:3a:
         52:4d:ff:43:88:f7:3a:16:f4:63:cd:a0:98:33:6e:85:27:00:
         8e:e7:05:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org