Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147176.roa
File:                     AS147176.roa (raw, json)
Hash identifier:          2Kdsv8t9ZRyKq/U/Ez7mNCl9yRkzfY/K6n862x/CtIs=
Subject key identifier:   BB:82:0C:4D:F8:A1:68:49:D4:92:2F:8B:F7:12:4D:F0:4B:A1:F6:23
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       07F6D13DF5CB97B5EF5E670E53161FF1CAF9E688
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147176.roa
Signing time:             Sun 04 Jun 2023 02:59:52 +0000
ROA not before:           Sun 04 Jun 2023 02:54:52 +0000
ROA not after:            Sun 02 Jun 2024 02:59:52 +0000
asID:                     147176
IP address blocks:        86.38.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f6:d1:3d:f5:cb:97:b5:ef:5e:67:0e:53:16:1f:f1:ca:f9:e6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun  4 02:54:52 2023 GMT
            Not After : Jun  2 02:59:52 2024 GMT
        Subject: CN=BB820C4DF8A16849D4922F8BF7124DF04BA1F623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:37:9b:f6:27:5e:95:5d:c3:02:de:e8:67:
                    10:bc:f2:7b:4f:ef:e5:6c:f5:79:8c:cc:32:51:77:
                    43:ab:a3:03:81:46:31:b5:90:da:6c:9c:22:46:90:
                    fe:0d:56:d7:b7:a6:77:33:6d:d4:90:bd:42:db:76:
                    ff:c5:75:d6:7c:ce:94:92:17:b2:aa:52:a6:e7:89:
                    af:c8:f5:7c:29:7b:e9:af:90:73:75:5c:d7:8f:45:
                    df:a2:63:4e:ca:27:76:75:95:90:fc:a3:d3:59:c9:
                    cf:db:e1:19:3f:ec:98:c1:b3:92:74:e1:32:d8:fc:
                    7b:2b:25:15:a6:0c:50:fe:3f:f2:4b:9e:0a:cf:8c:
                    58:53:46:c6:80:92:74:87:49:80:7f:2b:50:b3:18:
                    52:c5:b3:07:91:ea:d2:3d:f8:5e:ef:b0:28:4a:95:
                    3c:ab:a9:3f:55:09:c3:97:36:b3:28:dc:0c:58:25:
                    59:77:a7:d4:cf:85:02:60:d1:41:46:43:a4:71:af:
                    36:10:14:31:b1:06:ec:8d:5b:f6:28:a4:c6:60:7b:
                    33:89:d4:e8:b1:c7:da:d0:b6:2e:58:54:a4:3e:21:
                    a7:9c:a6:c8:d3:40:c2:7a:16:c2:07:da:37:87:16:
                    ab:8b:06:bc:05:70:3c:cd:25:a7:1c:53:ba:e2:2f:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:82:0C:4D:F8:A1:68:49:D4:92:2F:8B:F7:12:4D:F0:4B:A1:F6:23
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:55:ff:4c:c5:52:71:79:37:37:72:14:f1:c3:80:12:c8:82:
         d6:fb:17:cd:ef:47:a1:3c:a4:f6:e1:41:6c:a7:57:2e:91:ac:
         3e:ab:2c:30:68:29:f4:61:a6:c9:c1:26:d0:b0:5b:33:63:eb:
         7b:b3:f4:d1:ba:a2:f2:26:31:89:20:3b:fd:ec:c8:60:06:5d:
         e6:01:14:ca:77:05:f0:27:1a:49:d2:f7:83:eb:79:d7:dd:07:
         bc:7b:97:53:81:8d:d1:0b:f7:f5:87:8b:83:9f:45:f3:d4:24:
         82:17:97:02:d1:ee:b8:99:18:9b:5e:b1:75:33:3f:5b:30:56:
         02:b9:6d:73:25:54:13:2d:e2:21:da:65:60:55:63:c1:b0:b2:
         ed:f7:78:52:e7:94:34:a8:42:75:a3:77:10:c7:3b:9b:16:ca:
         c8:a3:46:34:e5:9e:a0:fe:01:b2:de:f5:22:f5:0f:4f:a9:10:
         d3:9d:0c:17:ce:18:87:3f:66:00:5a:d3:5c:35:fc:7a:59:cf:
         e0:1c:db:3a:99:5b:49:e5:30:a4:31:ca:6b:3e:d5:02:25:81:
         ab:88:6c:be:15:22:6e:f5:af:85:ee:3f:30:6c:0f:3b:9b:09:
         3e:be:05:1c:8c:fe:cd:9c:a4:a5:5c:71:41:c1:de:26:88:ab:
         75:52:08:36
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUB/bRPfXLl7XvXmcOUxYf8cr55ogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA2MDQwMjU0NTJaFw0yNDA2MDIwMjU5NTJaMDMxMTAvBgNV
BAMTKEJCODIwQzRERjhBMTY4NDlENDkyMkY4QkY3MTI0REYwNEJBMUY2MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTLjeb9idelV3DAt7oZxC88ntP
7+Vs9XmMzDJRd0OrowOBRjG1kNpsnCJGkP4NVte3pnczbdSQvULbdv/FddZ8zpSS
F7KqUqbnia/I9Xwpe+mvkHN1XNePRd+iY07KJ3Z1lZD8o9NZyc/b4Rk/7JjBs5J0
4TLY/HsrJRWmDFD+P/JLngrPjFhTRsaAknSHSYB/K1CzGFLFsweR6tI9+F7vsChK
lTyrqT9VCcOXNrMo3AxYJVl3p9TPhQJg0UFGQ6RxrzYQFDGxBuyNW/YopMZgezOJ
1Oixx9rQti5YVKQ+IaecpsjTQMJ6FsIH2jeHFquLBrwFcDzNJaccU7riL91VAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUu4IMTfihaEnUki+L9xJN8Euh9iMwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMxNDcxNzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWJsgwDQYJ
KoZIhvcNAQELBQADggEBAAdV/0zFUnF5NzdyFPHDgBLIgtb7F83vR6E8pPbhQWyn
Vy6RrD6rLDBoKfRhpsnBJtCwWzNj63uz9NG6ovImMYkgO/3syGAGXeYBFMp3BfAn
GknS94PredfdB7x7l1OBjdEL9/WHi4OfRfPUJIIXlwLR7riZGJtesXUzP1swVgK5
bXMlVBMt4iHaZWBVY8Gwsu33eFLnlDSoQnWjdxDHO5sWysijRjTlnqD+AbLe9SL1
D0+pENOdDBfOGIc/ZgBa01w1/HpZz+Ac2zqZW0nlMKQxyms+1QIlgauIbL4VIm71
r4XuPzBsDzubCT6+BRyM/s2cpKVccUHB3iaIq3VSCDY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org