Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140947.roa
File:                     AS140947.roa (raw, json)
Hash identifier:          K+a/hxqpaAyiI3QZ+xGE599jm49Y2KZirBXqYQ1UrTM=
Subject key identifier:   D1:9C:A1:26:E1:FD:A0:C3:52:CD:C6:81:A3:CB:4D:76:1C:B3:1A:31
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       51DFF5BDD02A49C6258C7980AB85C01900AFBBC4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140947.roa
Signing time:             Thu 24 Nov 2022 18:30:03 +0000
ROA not before:           Thu 24 Nov 2022 18:25:03 +0000
ROA not after:            Thu 23 Nov 2023 18:30:03 +0000
asID:                     140947
IP address blocks:        89.116.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:df:f5:bd:d0:2a:49:c6:25:8c:79:80:ab:85:c0:19:00:af:bb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 24 18:25:03 2022 GMT
            Not After : Nov 23 18:30:03 2023 GMT
        Subject: CN=D19CA126E1FDA0C352CDC681A3CB4D761CB31A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:67:a2:3a:c8:87:68:0d:f3:b8:28:04:30:
                    89:75:6f:91:2d:c0:70:9d:6f:f6:67:8d:2f:05:75:
                    91:de:6b:dc:f0:77:de:d9:3c:91:67:8f:ab:7a:06:
                    7f:9e:58:55:d7:27:17:5f:72:de:9a:cb:87:c2:a0:
                    eb:93:81:80:d6:43:98:d5:52:d9:d7:f3:66:1d:b6:
                    0e:5a:62:5f:3b:a7:00:21:2c:92:fa:f0:75:84:fb:
                    16:2d:21:13:b9:08:4f:bc:3a:71:8e:7c:82:9b:03:
                    54:2a:d7:8d:76:ca:fe:12:dc:d3:88:34:d7:b5:db:
                    bc:ce:7c:0e:61:68:b9:5a:51:17:95:be:5c:1a:45:
                    8a:da:19:a1:74:58:ae:5a:4f:cd:90:40:b7:5f:89:
                    ca:99:23:16:0f:9a:26:b9:c5:4f:bf:0b:86:50:63:
                    7f:4b:ef:e9:7e:cd:10:cb:a4:65:84:d5:39:14:83:
                    42:97:cd:1f:57:43:bb:86:40:1d:7c:f4:8a:ea:76:
                    88:cd:d3:59:e9:80:b2:b2:9e:10:92:01:df:e5:c4:
                    fb:b6:8a:b8:ed:e8:db:71:ab:e7:bf:30:e7:2c:7d:
                    46:02:3a:07:57:68:6f:39:37:a6:3d:14:f7:04:6d:
                    78:7e:69:ee:9e:fc:cb:6c:bf:b4:d1:5c:cc:47:22:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:A1:26:E1:FD:A0:C3:52:CD:C6:81:A3:CB:4D:76:1C:B3:1A:31
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140947.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:42:ea:a6:3b:95:4a:40:79:47:66:aa:0d:40:aa:46:20:a9:
         80:d8:71:15:66:5a:e9:f8:fa:5c:7e:82:92:1c:b5:63:fe:b1:
         26:31:ce:27:7e:13:5f:15:b1:60:2c:e3:bc:ad:59:07:7d:90:
         1a:80:9c:c2:34:98:70:29:fa:ae:a1:ba:c1:84:a0:4d:3a:6a:
         35:fd:c6:f8:66:fc:62:23:53:cd:95:16:35:f0:e5:57:49:d2:
         1c:c3:68:74:16:05:17:8f:34:8a:e7:85:b6:ab:11:57:21:f4:
         e3:bd:98:ca:2b:3c:eb:0f:e4:f0:3a:5a:73:41:a8:58:ed:73:
         42:93:c2:f0:c7:fe:43:38:a1:9d:11:c1:4c:31:3e:80:6b:97:
         23:de:13:bd:bd:de:4a:ce:be:a3:ad:c7:71:a6:f3:d8:6f:2a:
         00:46:26:96:a3:9d:ad:61:f4:9a:37:fe:e2:20:41:ff:b6:4b:
         25:6a:d4:8c:88:d5:95:bf:3b:23:e3:38:30:e3:02:3f:3b:49:
         53:8e:9d:df:e7:77:07:e4:ce:86:62:88:e7:70:91:4c:4b:3a:
         d3:b1:0a:0a:23:c7:01:45:63:56:b6:44:ea:b7:4c:bb:e5:1d:
         79:06:c3:7b:6a:be:0f:a9:dd:33:e7:b8:4b:06:5b:86:b9:50:
         4a:85:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org