Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142617.roa
File:                     AS142617.roa (raw, json)
Hash identifier:          8ujN+QEs5pGDY8JCmjnPO0p2k+QjUtgGjJgtf96SC88=
Subject key identifier:   45:2E:B2:C9:40:32:5D:87:6D:F0:50:98:0C:6F:79:5A:AA:B2:DB:A9
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       B39D124281939B95FE2BB62BF928FB8D2076ED
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142617.roa
Signing time:             Thu 24 Nov 2022 12:43:24 +0000
ROA not before:           Thu 24 Nov 2022 12:38:24 +0000
ROA not after:            Thu 23 Nov 2023 12:43:24 +0000
asID:                     142617
IP address blocks:        89.116.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b3:9d:12:42:81:93:9b:95:fe:2b:b6:2b:f9:28:fb:8d:20:76:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 24 12:38:24 2022 GMT
            Not After : Nov 23 12:43:24 2023 GMT
        Subject: CN=452EB2C940325D876DF050980C6F795AAAB2DBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:1b:0c:f4:62:41:69:51:3a:47:6c:d9:c9:
                    dc:7c:c5:2c:73:8a:af:68:e2:34:05:22:a8:7e:b9:
                    68:13:d3:56:c5:be:dc:d3:51:77:27:9f:4d:2b:47:
                    a3:1f:14:26:58:d0:05:14:3c:ed:e9:4e:93:f1:29:
                    5e:03:e8:c6:ab:cf:d0:c8:7d:1c:3c:11:f6:03:3c:
                    09:ef:07:89:11:a9:6b:d2:93:62:52:6e:c1:f7:db:
                    ed:0a:f8:88:c2:58:dd:b4:91:b3:ca:c4:fb:9a:8a:
                    36:3e:01:2e:b3:1b:5f:12:bf:05:b5:cf:90:d6:00:
                    e7:e3:b6:8c:7a:be:29:6c:de:f8:f9:5e:d9:36:ff:
                    57:ab:d0:51:54:49:9e:61:74:02:93:ce:7e:51:d8:
                    12:72:cb:47:68:fb:88:88:ac:c2:f9:63:32:5f:75:
                    4d:d6:a0:41:04:43:01:1f:cb:32:02:41:e6:ec:0c:
                    e3:00:df:cc:3b:5e:fd:12:c4:60:83:c4:3a:2c:a0:
                    60:69:05:55:e1:cc:53:87:3c:76:c0:f5:92:f6:bc:
                    9a:69:82:92:02:16:b1:45:9d:74:80:13:fb:57:14:
                    cf:c1:38:8f:60:bf:53:2b:72:ce:67:51:b9:07:3f:
                    d4:ba:ee:3a:ca:93:50:79:1c:6a:59:56:bf:9c:09:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2E:B2:C9:40:32:5D:87:6D:F0:50:98:0C:6F:79:5A:AA:B2:DB:A9
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142617.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:32:6f:da:bd:f1:5e:ee:17:ea:27:ce:6e:db:15:69:b4:
         08:c4:79:dd:e2:3f:ff:eb:67:9b:1f:4c:32:c8:a2:4f:5e:3b:
         6a:5f:ca:41:38:f8:dc:80:4d:29:06:3b:d4:57:cc:bd:7a:3b:
         62:e6:16:86:aa:39:39:48:b9:a0:35:c7:e8:a7:12:fd:1c:1f:
         8f:14:12:64:53:98:6e:5a:c3:09:26:d2:fe:6a:06:4d:03:15:
         d9:1a:46:54:e8:b0:e9:b8:c2:5c:57:5f:bc:22:94:74:ec:aa:
         0b:38:57:b6:7d:54:e0:97:8a:35:a0:7d:ac:c4:4a:91:53:50:
         ff:74:48:fd:e1:dc:04:88:91:1e:0b:f2:3e:05:d4:19:44:ca:
         15:10:40:a6:8f:0a:a3:8f:b6:b4:2c:26:2d:65:ce:6b:53:2d:
         19:6d:1e:57:b2:90:bc:47:79:fb:30:5f:99:56:4c:e4:e2:05:
         bf:7e:4b:05:44:38:56:df:0d:17:7f:f3:b0:f9:18:e1:12:c2:
         f3:95:2b:82:08:d7:81:c8:61:26:0b:57:86:48:f5:9d:cc:28:
         a9:56:d9:fc:8f:49:6e:15:83:9a:e6:4a:39:df:00:e4:e8:95:
         cb:f3:c7:42:6e:c8:2f:ec:ab:f4:79:09:4e:a1:dd:ef:5b:78:
         d5:d1:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org