Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198652.roa
File:                     AS198652.roa (raw, json)
Hash identifier:          i/kh+xTfZHYMjtFBt2qFeFf1qC0G5o1Dehu8n4oDkj0=
Subject key identifier:   0A:66:0F:A1:23:E6:0F:CF:13:CF:BB:00:A9:26:4D:F7:6A:E6:6C:F6
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       69FB07BC6471367D76FB0B4EB4062C5356BF9E6F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198652.roa
Signing time:             Thu 22 Jun 2023 16:32:25 +0000
ROA not before:           Thu 22 Jun 2023 16:27:25 +0000
ROA not after:            Thu 20 Jun 2024 16:32:25 +0000
asID:                     198652
IP address blocks:        89.116.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fb:07:bc:64:71:36:7d:76:fb:0b:4e:b4:06:2c:53:56:bf:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 22 16:27:25 2023 GMT
            Not After : Jun 20 16:32:25 2024 GMT
        Subject: CN=0A660FA123E60FCF13CFBB00A9264DF76AE66CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:0e:6c:45:d5:58:d3:c0:51:98:5a:69:5d:
                    66:67:31:ef:e2:3b:7d:92:a0:b9:0b:7c:8a:d7:17:
                    81:88:76:38:bf:3b:c5:5f:6c:55:2a:e2:6f:bf:6c:
                    d3:e3:de:1b:db:d1:88:ab:6e:29:fb:f4:72:1e:20:
                    41:12:8a:6b:ea:e7:c4:d1:24:75:26:60:55:8b:21:
                    8c:3c:0a:2f:64:c3:0f:93:03:27:96:a6:3e:30:b1:
                    de:61:ce:2a:28:7d:4a:d7:3a:4c:92:17:0d:d0:2c:
                    d9:b5:80:59:ef:c9:9c:8c:4b:c4:47:3b:65:ff:1e:
                    46:bc:fd:55:05:40:90:e5:96:04:e6:f7:55:78:a5:
                    33:1a:24:3e:09:69:38:5d:a4:5c:a7:58:77:4d:6d:
                    85:c2:9b:b2:8d:57:57:01:f9:f6:4f:07:d6:9a:99:
                    b5:4c:4d:d5:a3:53:a8:4f:ee:fd:40:b3:48:f0:ab:
                    78:5d:47:15:95:f5:18:cc:10:7d:0e:a9:ba:5e:9e:
                    ae:56:b9:d8:e1:c2:dd:0f:f2:fc:41:5d:fe:26:bd:
                    f5:5b:39:ef:44:6e:f2:9d:8b:21:70:d3:c1:ac:bd:
                    3c:79:ee:12:d5:87:4b:b1:ee:ac:b7:21:5d:6f:ed:
                    e5:6a:ad:dc:e3:c6:59:bb:25:8c:a8:79:49:f6:da:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:0F:A1:23:E6:0F:CF:13:CF:BB:00:A9:26:4D:F7:6A:E6:6C:F6
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198652.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:23:9f:39:c7:5f:66:39:d2:00:c8:0b:8b:ff:94:ea:c7:93:
         60:17:0c:93:a1:1b:ec:8f:26:2c:55:10:90:e1:74:8b:8b:b1:
         d4:cf:cf:75:71:a7:8b:54:57:98:b0:6d:5e:14:17:87:f9:6f:
         5d:0a:19:11:d1:8b:8c:79:c8:28:66:63:f8:0f:53:4f:45:41:
         8d:e8:d6:3c:a5:e1:33:7b:41:83:1b:a2:78:9e:16:41:b7:90:
         05:9c:a4:26:25:85:4d:a9:17:42:71:77:68:b3:10:b6:b0:26:
         b5:47:94:25:00:3f:f7:4e:a8:f9:49:fe:ec:1c:05:ad:cd:cc:
         8b:34:39:5f:9d:c0:6f:60:3e:aa:96:30:e2:6b:23:1c:c8:71:
         3e:72:28:ab:dc:07:c9:3c:29:41:9e:f8:4f:a2:c5:a3:57:18:
         cb:7d:02:4c:6d:7c:83:e2:a1:da:e7:02:2f:f3:99:38:dc:84:
         cf:f1:37:43:53:37:76:04:32:55:d8:12:52:9d:f8:4f:e8:38:
         43:ef:01:cf:7d:1e:ec:5c:c1:b4:30:a4:ad:31:8b:6f:dc:7c:
         80:b2:14:72:a8:6a:f5:00:48:c9:05:f7:17:dc:bb:b3:6d:41:
         8b:14:b9:63:4c:ff:58:f7:91:64:89:c4:9b:70:7a:2f:f4:31:
         b8:d3:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 10:31:27 2023 by rpki-client on console-ams.rpki-client.org