Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          B+GjVn6l483YHyutBijZ/DctZ5UGcviKOklSc1m9AJw=
Subject key identifier:   DB:FF:0A:C7:73:EC:C1:E8:28:BD:63:17:30:F8:2F:E8:7F:69:38:4D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2837DCA158089D63D320F080431BF3A174287A8B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS174.roa
Signing time:             Wed 21 Jun 2023 05:10:28 +0000
ROA not before:           Wed 21 Jun 2023 05:05:28 +0000
ROA not after:            Wed 19 Jun 2024 05:10:28 +0000
asID:                     174
IP address blocks:        89.117.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:37:dc:a1:58:08:9d:63:d3:20:f0:80:43:1b:f3:a1:74:28:7a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 21 05:05:28 2023 GMT
            Not After : Jun 19 05:10:28 2024 GMT
        Subject: CN=DBFF0AC773ECC1E828BD631730F82FE87F69384D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:65:13:cf:14:76:9c:ed:bd:79:ae:cb:b3:
                    62:0b:93:08:f6:a8:28:3a:a5:48:1e:f5:fb:13:2d:
                    06:43:d4:e8:da:e8:f7:58:c8:2a:73:d5:0d:1d:fa:
                    70:63:bd:b8:87:58:b1:06:78:47:ba:0e:3a:d6:e1:
                    39:fe:04:9a:74:b1:c0:98:fe:46:eb:da:62:dd:c3:
                    6c:80:dc:32:7a:26:3a:3e:c4:3f:18:d1:f9:3f:d3:
                    7a:3e:a8:c1:bd:73:eb:4a:41:3f:be:fd:35:6f:d7:
                    26:0a:3a:90:9f:6d:03:8e:4d:df:a5:17:01:69:84:
                    57:50:85:c8:ee:93:d0:c6:b0:8a:d8:fc:a7:66:09:
                    61:b3:92:ea:87:7b:fe:ff:f4:18:f4:b3:9c:19:50:
                    99:d8:38:21:11:b8:5f:87:bc:89:fa:70:ab:71:4c:
                    f3:d8:74:55:08:4a:ac:55:b1:e8:4c:26:29:31:f9:
                    1a:92:55:d6:86:04:f5:7f:c8:db:ff:0b:f5:5b:f8:
                    d8:71:98:6c:b7:ea:b8:d4:42:d5:96:22:41:7b:a0:
                    03:cf:2b:3b:34:02:0e:0a:f3:79:01:26:1d:ce:e5:
                    fd:e3:27:61:5d:60:14:ec:62:27:4b:34:12:f4:52:
                    02:f7:8b:24:11:4f:de:6e:8a:1b:35:2e:6d:2c:cb:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FF:0A:C7:73:EC:C1:E8:28:BD:63:17:30:F8:2F:E8:7F:69:38:4D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:86:38:29:28:8f:01:88:26:63:85:ba:53:fe:91:63:6c:
         de:94:63:2e:57:29:03:4a:66:d3:f1:d9:44:ba:e9:bc:23:85:
         b7:47:bb:4e:ff:71:c9:50:5a:49:10:84:4d:6b:81:aa:52:07:
         29:86:4d:3b:40:c1:91:b0:39:41:de:20:0a:0d:78:8e:6b:61:
         44:01:a5:6d:61:06:cd:32:b9:5b:9d:ff:79:4c:33:fc:03:09:
         b0:68:4a:41:46:a7:96:6d:e6:8f:59:84:76:0d:b6:5b:68:e9:
         30:35:57:29:9b:9b:f7:73:65:2d:f6:0d:03:2d:ca:e0:01:f9:
         f5:0d:b8:d2:ac:d8:d5:ec:f1:8e:d1:4e:8d:7e:d1:fc:14:42:
         37:c4:5f:0e:36:20:9a:b3:63:20:7d:6c:24:70:49:f3:64:9c:
         74:3c:bf:f0:24:f1:53:4f:08:ef:71:c1:8c:5b:4e:7d:f7:ff:
         83:10:71:26:bd:04:3d:da:6d:17:5f:bb:59:35:cc:5a:92:f9:
         d3:de:a9:02:e9:f7:2a:01:7d:9a:1e:c2:75:4e:34:97:06:9b:
         84:44:c3:0d:aa:b1:11:7d:a0:14:5e:70:79:10:e2:3f:99:88:
         ba:ae:94:2f:0b:68:b4:8a:55:3a:41:39:40:b7:3e:d5:e5:8a:
         7c:5d:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org