Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142430.roa
File:                     AS142430.roa (raw, json)
Hash identifier:          srHNgqD+z7UucBPc4G5+4nSMuSdSHT5KuyqSAr5VpPM=
Subject key identifier:   A0:DA:30:CB:F3:F7:AD:B2:29:DA:41:DC:CB:4B:C8:71:5D:9A:6F:C1
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7521D028A044E56B821EAE7262C314A19695F4B8
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142430.roa
Signing time:             Wed 30 Nov 2022 00:00:20 +0000
ROA not before:           Tue 29 Nov 2022 23:55:20 +0000
ROA not after:            Wed 29 Nov 2023 00:00:20 +0000
asID:                     142430
IP address blocks:        89.117.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:21:d0:28:a0:44:e5:6b:82:1e:ae:72:62:c3:14:a1:96:95:f4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 29 23:55:20 2022 GMT
            Not After : Nov 29 00:00:20 2023 GMT
        Subject: CN=A0DA30CBF3F7ADB229DA41DCCB4BC8715D9A6FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:d1:a7:e8:43:60:6f:23:ce:e1:3c:38:cf:
                    7f:df:0e:20:07:ac:7f:10:af:64:60:c7:e5:ce:fd:
                    03:85:17:75:34:0d:b6:b7:40:c8:2d:fa:a0:b3:e9:
                    78:3b:c4:d0:67:0f:b1:91:1f:21:47:39:33:f8:3e:
                    c1:ad:f7:c2:32:f1:1d:95:bc:3d:aa:47:24:e1:cb:
                    79:df:76:12:aa:db:13:c4:f7:99:86:ca:ea:c8:f8:
                    da:16:f0:bd:97:68:f5:dc:57:98:a3:40:cb:ec:13:
                    cd:03:c1:fe:70:3d:b9:ab:76:93:e4:0f:67:e7:d1:
                    65:16:de:6e:cf:6e:71:45:03:16:c2:c3:f1:2b:61:
                    3f:7d:5f:ab:e1:d3:30:f8:f4:7c:72:49:0c:77:f5:
                    7b:a7:2a:54:ae:ac:eb:94:b9:00:8f:d9:18:6c:39:
                    8c:31:96:62:f8:58:34:70:21:2b:8f:a1:9e:c8:7b:
                    a5:2f:3a:33:4c:08:5f:1c:99:b6:62:dd:bb:83:2c:
                    94:c3:41:a3:62:8b:cf:77:e7:42:7f:d9:e0:b2:52:
                    7a:4d:28:6d:f0:7d:bf:3a:f9:57:be:61:66:d8:f0:
                    29:a7:b8:a1:3e:43:02:cb:ab:af:e3:2d:35:5b:a3:
                    52:4f:fc:fe:f8:cc:68:7c:65:4f:0f:09:26:d1:2d:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DA:30:CB:F3:F7:AD:B2:29:DA:41:DC:CB:4B:C8:71:5D:9A:6F:C1
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:65:14:28:f8:c6:9e:df:05:a1:d0:7e:3a:a2:b4:c6:8b:
         31:db:a8:55:31:52:f1:0e:7f:4f:02:84:48:98:a5:7e:1c:4b:
         cc:79:f6:08:cf:fe:2c:d3:8a:71:22:61:bd:53:1a:d8:dc:e8:
         06:4c:c8:21:89:81:8e:f9:d4:1d:60:8e:6c:ea:2f:d6:56:99:
         2c:0a:31:37:a4:5a:3b:23:7b:6a:fc:af:16:a3:78:cc:ef:58:
         d6:a5:ea:1b:a2:35:79:45:98:78:db:4e:21:ba:d7:ff:f3:bd:
         0f:72:59:4c:0a:23:9d:13:41:31:15:24:a2:d2:29:7e:33:67:
         99:86:6e:84:51:3f:df:f4:bc:e1:c9:e9:b4:d8:a0:28:bb:1f:
         2a:de:db:99:a9:a2:c1:e9:e0:fe:ab:c9:8b:de:49:6e:76:26:
         27:93:ad:71:52:01:55:66:0a:f3:74:a8:b0:33:53:45:cb:2f:
         8a:5b:fa:b7:4f:79:8e:6a:58:d4:20:7e:9a:49:b0:ef:e0:00:
         73:f3:5f:22:13:d3:a3:3c:c3:c6:91:ba:2c:4b:d8:aa:a0:3e:
         6a:e2:9e:be:03:c2:fe:4f:72:ed:73:00:05:b1:52:46:fa:d1:
         45:0e:f6:26:3b:6a:97:45:e3:4d:94:f8:da:e4:39:fc:0d:73:
         31:4f:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org