Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147287.roa
File:                     AS147287.roa (raw, json)
Hash identifier:          i/Rc3iNAFykxNtzjs6v5pLxxngva4iVqpS768Gb0mLU=
Subject key identifier:   1A:A7:1F:3A:8E:FF:C4:24:52:FB:72:6C:6A:41:AD:C2:3F:6D:B1:AD
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0A6DC722A40F030AB5E631C8F2EA43C3771A0FA8
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147287.roa
Signing time:             Mon 22 May 2023 09:07:43 +0000
ROA not before:           Mon 22 May 2023 09:02:43 +0000
ROA not after:            Mon 20 May 2024 09:07:43 +0000
asID:                     147287
IP address blocks:        89.116.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6d:c7:22:a4:0f:03:0a:b5:e6:31:c8:f2:ea:43:c3:77:1a:0f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 22 09:02:43 2023 GMT
            Not After : May 20 09:07:43 2024 GMT
        Subject: CN=1AA71F3A8EFFC42452FB726C6A41ADC23F6DB1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6e:c9:05:41:ec:4d:4c:42:1b:9c:53:87:01:
                    f4:ef:d1:cb:27:0c:3d:56:63:40:ac:bc:7f:dd:61:
                    90:f4:b6:7d:84:5b:ce:3d:fd:3c:8e:78:42:a5:de:
                    31:70:ff:fb:6b:bb:0b:2e:2e:b3:82:dc:ed:ab:1b:
                    59:65:a9:27:19:9f:a5:36:55:72:5d:c9:7a:b0:01:
                    b0:07:c0:6e:50:79:1e:0a:5f:19:90:17:c0:89:80:
                    6d:9d:60:eb:de:40:17:3c:5d:5e:31:4d:06:d2:e5:
                    2d:7b:3b:71:71:b4:a4:75:f0:2a:63:cc:1b:fe:8d:
                    79:24:35:6b:8c:9d:f4:59:5a:b1:ec:56:a6:28:1c:
                    35:2b:7d:c4:6c:38:d4:35:91:91:2f:b3:3e:97:0b:
                    41:8a:62:ef:45:dc:cc:ea:ee:ab:a9:11:73:30:4c:
                    1c:5c:bb:57:d2:e7:4f:35:ee:7c:94:59:14:36:10:
                    cb:ea:22:12:35:e5:27:34:92:c1:cc:80:11:76:33:
                    81:dd:c4:8c:b7:3d:f0:7f:9a:cc:ed:86:62:c5:6c:
                    2a:3d:a1:db:a1:82:73:24:13:fe:ff:d1:7b:49:59:
                    d6:3b:68:25:ba:d8:00:e3:83:0f:e1:53:0b:e7:75:
                    64:8d:38:0a:b5:53:17:6e:00:34:cd:10:51:00:32:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A7:1F:3A:8E:FF:C4:24:52:FB:72:6C:6A:41:AD:C2:3F:6D:B1:AD
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:33:02:2b:d4:3f:e2:a4:81:87:c7:e8:4c:8c:61:7a:20:f6:
         89:9f:a3:ca:5b:d2:ac:e0:a2:fd:d7:1f:ac:48:95:fe:4e:ae:
         1e:26:a8:c7:94:35:2a:dc:85:09:cd:53:1e:49:f1:78:7f:95:
         fe:d6:e4:c2:24:50:9d:57:7e:61:a9:8a:7e:89:fe:7d:ea:df:
         77:90:d1:a7:be:03:8b:a2:8e:46:ca:35:56:ee:f7:56:22:56:
         11:f7:59:1b:83:53:73:a4:20:6a:76:da:62:6d:0a:b8:9f:a9:
         99:80:a2:72:02:c8:64:4e:f0:df:57:46:90:f8:6b:41:3e:e5:
         1a:76:9b:75:6b:07:47:4d:ed:be:c6:22:dd:f1:3f:6e:f7:dd:
         e3:cf:bd:7d:8a:47:b8:85:66:0c:62:b7:d5:7a:f0:6d:11:cd:
         bb:fc:60:82:50:b6:07:11:15:4a:07:42:25:1a:5e:a3:a7:b2:
         1c:f4:7d:15:5e:a7:08:29:0a:69:5a:37:4a:4f:1e:fb:ca:3d:
         d3:92:03:27:0a:f7:40:1d:75:75:46:09:25:e3:a3:f2:80:e6:
         9f:9e:f4:c4:54:3c:20:c6:09:f7:18:a3:e4:dd:05:86:36:03:
         df:10:c5:a5:48:36:30:d5:10:8a:05:15:d2:25:2b:40:ba:03:
         59:f2:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 22 00:17:57 2023 by rpki-client on console-fra.rpki-client.org