Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200385.roa
File:                     AS200385.roa (raw, json)
Hash identifier:          05rvUtGeDgOEMirUjvS3aWd6Z1EDM8yrIOIYPQrOnq4=
Subject key identifier:   94:97:D9:C0:A6:D2:B2:CB:F1:98:A5:20:32:56:41:7F:43:15:A6:9B
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       43D2929D7E2473897CD65E9FF11C207DCF2F06AE
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200385.roa
Signing time:             Thu 18 May 2023 14:29:45 +0000
ROA not before:           Thu 18 May 2023 14:24:45 +0000
ROA not after:            Thu 16 May 2024 14:29:45 +0000
asID:                     200385
IP address blocks:        89.117.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d2:92:9d:7e:24:73:89:7c:d6:5e:9f:f1:1c:20:7d:cf:2f:06:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 18 14:24:45 2023 GMT
            Not After : May 16 14:29:45 2024 GMT
        Subject: CN=9497D9C0A6D2B2CBF198A5203256417F4315A69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:2a:a7:a8:41:32:07:ab:a6:1c:09:3f:2e:
                    10:51:e2:18:1d:c4:07:28:fa:ca:3a:05:71:c0:dd:
                    0c:aa:a5:5b:77:ce:e1:49:ed:06:63:52:b6:69:00:
                    18:91:35:ea:01:ab:5f:e8:88:b9:78:6b:3f:63:fe:
                    30:d5:88:37:1a:35:10:1a:30:73:6a:9e:de:c5:bb:
                    b4:0f:52:94:f9:3b:2c:5b:1a:31:75:f8:fd:1e:29:
                    cf:cb:71:c3:3c:09:05:72:89:e9:64:a9:c3:6d:32:
                    92:f8:93:b4:16:2e:7e:5b:74:91:98:26:6f:f8:1c:
                    9c:a6:6e:64:43:c9:5a:f5:7a:57:63:c7:67:df:12:
                    0c:77:8b:bd:93:55:a2:4a:93:30:b0:72:c2:69:70:
                    a3:3f:35:6b:d6:d3:99:19:82:fb:1c:4d:fa:00:b3:
                    01:be:ed:e8:27:16:27:3d:67:d3:3c:b2:c9:f4:48:
                    8c:5d:65:26:77:22:dd:f0:01:d1:39:04:cc:4f:6b:
                    d0:db:20:77:56:d8:25:84:a1:44:19:52:ca:dd:d4:
                    39:dd:a5:d9:e3:e1:37:8f:cb:c8:9e:a8:f0:bb:20:
                    e7:ed:76:b2:38:13:e7:07:2f:48:43:dd:42:d9:ec:
                    36:c2:04:d3:27:e6:b7:cd:9d:ff:5c:1b:ef:ca:da:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:97:D9:C0:A6:D2:B2:CB:F1:98:A5:20:32:56:41:7F:43:15:A6:9B
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200385.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:21:dd:05:a3:3c:bf:d5:07:d2:b8:26:69:60:7b:46:a3:9b:
         e9:3b:39:8c:7a:c7:8a:27:d9:8c:dc:16:35:bc:93:ac:94:69:
         19:95:1e:67:26:be:aa:48:bd:9f:9f:43:88:b2:fc:88:e1:14:
         ce:d5:d6:f8:d3:e0:60:6e:a5:0f:1d:a5:01:1f:99:fd:91:83:
         17:13:e4:8a:3f:6f:c6:5c:94:49:c5:b2:97:d9:2e:3d:95:9c:
         c2:21:41:f1:e3:65:81:54:20:6f:82:f0:db:cb:9b:ae:60:74:
         f3:bb:12:6a:14:3c:be:c4:cb:38:b0:2f:c5:1c:cf:8c:65:cc:
         67:8d:37:ea:8f:39:93:36:ff:ef:08:60:e7:df:b9:d7:c4:f7:
         a7:1d:79:e3:bd:60:dd:6f:42:bb:1f:c0:d9:70:7a:d2:b8:8e:
         11:f4:58:d6:ef:de:46:09:ea:16:49:95:ff:33:0c:a2:75:73:
         a7:39:77:be:d0:b2:29:40:cd:f1:86:15:39:46:02:d2:56:cf:
         e8:73:72:13:4c:88:08:41:18:83:17:66:17:fa:cb:4d:c6:2c:
         49:52:81:97:bd:95:ad:de:aa:9c:29:33:f6:e0:3a:6b:48:66:
         7b:2c:bc:10:c6:9f:4b:c5:cd:c0:8e:69:f2:49:ff:67:f0:29:
         68:18:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org