Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14445.roa
File:                     AS14445.roa (raw, json)
Hash identifier:          Cf7i0UbZnYS98yETny8Im2U0MhaFbfBqka/usoOypYI=
Subject key identifier:   38:87:6D:7C:BB:83:25:D5:DA:D8:59:9B:02:20:22:BC:BB:41:1C:57
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1E2E36EE8271A3611402855AAF0D574C50020714
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14445.roa
Signing time:             Tue 27 Dec 2022 00:00:10 +0000
ROA not before:           Mon 26 Dec 2022 23:55:10 +0000
ROA not after:            Tue 26 Dec 2023 00:00:10 +0000
asID:                     14445
IP address blocks:        89.116.103.0/24 maxlen: 24
                          89.116.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2e:36:ee:82:71:a3:61:14:02:85:5a:af:0d:57:4c:50:02:07:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 26 23:55:10 2022 GMT
            Not After : Dec 26 00:00:10 2023 GMT
        Subject: CN=38876D7CBB8325D5DAD8599B022022BCBB411C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:e4:fc:35:8c:52:8e:4b:f2:df:d0:c0:9d:
                    94:6d:d1:bb:57:4e:8b:d3:1e:34:ec:ce:7e:54:d8:
                    ab:e4:7b:16:ea:d8:a8:23:a6:1d:04:ba:e6:f9:88:
                    e3:5f:aa:31:34:bb:f2:45:53:6a:5a:7c:d3:32:af:
                    e0:44:d9:12:d5:02:9d:22:e0:4e:e0:b3:3c:e8:19:
                    ef:25:1f:7a:02:54:c6:1f:47:00:c2:6a:39:75:78:
                    5b:88:06:2f:2f:4e:9a:f1:64:a4:30:18:6b:51:9d:
                    15:22:2f:bc:37:e5:ef:2b:ec:12:2e:c6:c0:a9:2a:
                    7b:cb:c3:90:46:5e:6b:4a:73:92:6b:1e:cb:db:85:
                    45:45:64:0b:c4:6c:b2:d1:d2:45:22:f5:f2:55:b6:
                    fb:d1:2c:ca:5d:dd:b3:2e:64:f7:4a:f2:9c:3f:9a:
                    4a:f4:e0:90:ef:d1:df:51:63:c0:03:01:e8:07:f6:
                    92:89:83:b6:bf:b2:20:a1:fe:d5:fb:86:d3:15:3f:
                    d9:7d:fe:5f:16:17:2c:48:50:fa:66:af:af:91:97:
                    c9:6f:73:4d:4f:f3:66:68:c4:fe:49:c0:43:5a:8c:
                    d7:d4:cb:37:d5:ed:d5:41:2d:e0:b6:fd:1d:84:11:
                    9f:b9:07:59:f6:ca:f4:98:ee:35:63:c9:e1:86:90:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:87:6D:7C:BB:83:25:D5:DA:D8:59:9B:02:20:22:BC:BB:41:1C:57
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.103.0/24
                  89.116.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:2b:0e:ab:95:0a:5f:b3:20:1b:44:0f:a5:54:70:72:c0:5b:
         d9:fb:d2:1b:f9:f4:29:7a:cf:88:b5:37:c4:8e:2d:64:9c:30:
         86:d8:6d:d2:84:fe:54:f3:37:c5:76:f8:bd:0d:8c:af:3d:aa:
         ba:2d:e9:9f:6f:9f:e2:43:5d:81:c8:5c:3e:97:e4:43:b7:85:
         11:16:05:6c:e3:3a:28:10:61:46:d5:ac:8d:3f:16:bf:12:b9:
         50:75:66:19:d6:fc:8c:f1:a9:ad:be:3b:c6:e5:d4:b8:e5:0f:
         10:80:a8:27:13:86:95:17:5b:8f:a3:bf:a8:30:74:67:5a:f6:
         da:c3:fa:d5:88:b4:fe:8c:8d:36:3f:db:9b:91:72:0b:bc:3f:
         e5:55:6d:02:48:d9:5c:4f:44:8a:1b:51:42:0b:ae:00:26:dc:
         98:c7:0d:be:32:4e:dd:63:8b:34:97:47:31:88:c8:49:96:e4:
         46:32:85:68:1d:77:06:7e:b6:47:1a:97:dd:a0:9a:67:42:3a:
         20:8f:ca:3a:35:e5:bd:8d:2c:a1:62:ec:8f:6e:50:db:8f:00:
         a9:3d:c5:06:d6:bc:7e:fa:97:40:9b:7e:d7:9e:34:77:36:17:
         80:11:ef:19:60:09:14:cc:d1:f6:cc:73:21:fe:47:ed:90:90:
         4c:44:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org