Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200482.roa
File:                     AS200482.roa (raw, json)
Hash identifier:          3S38QnH+objmMliCCQF3RkWgs0O+ZveXmY5hFVr6CKY=
Subject key identifier:   95:9A:E4:13:B2:09:B9:0A:6D:BA:50:10:5A:A9:66:3F:B4:2C:F8:B2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       078DD21EA7392A52A6A57603EFC5A15332CD7316
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200482.roa
Signing time:             Wed 24 May 2023 11:59:27 +0000
ROA not before:           Wed 24 May 2023 11:54:27 +0000
ROA not after:            Wed 22 May 2024 11:59:27 +0000
asID:                     200482
IP address blocks:        86.38.5.0/24 maxlen: 24
                          86.38.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8d:d2:1e:a7:39:2a:52:a6:a5:76:03:ef:c5:a1:53:32:cd:73:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 24 11:54:27 2023 GMT
            Not After : May 22 11:59:27 2024 GMT
        Subject: CN=959AE413B209B90A6DBA50105AA9663FB42CF8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:67:7b:ed:f1:59:13:0d:13:08:01:df:b8:
                    db:c3:89:95:76:dc:de:60:57:e4:3b:e5:47:49:35:
                    85:fe:9d:f7:07:b6:06:de:1d:dc:9e:9b:ad:6d:49:
                    15:4c:4d:78:36:d3:ae:eb:b2:56:bf:2a:0d:00:33:
                    60:d1:01:c6:1e:20:f6:1d:2b:73:70:32:10:fd:f2:
                    a4:47:4d:49:84:78:08:19:83:5d:82:ce:eb:27:88:
                    32:fa:1b:80:4e:ef:96:c8:33:6a:1a:e0:20:b3:e5:
                    22:75:7a:a8:b0:d2:98:c1:a6:a2:47:15:12:91:5c:
                    bd:58:fb:57:17:2b:9f:19:e3:61:be:f7:ae:2b:81:
                    df:ff:2b:be:28:04:61:26:b9:20:8d:31:6a:0c:93:
                    5c:78:31:cb:13:ed:d8:bd:3f:7e:25:6f:0b:df:ee:
                    9c:d6:9c:f7:10:5c:81:0c:d3:12:54:31:56:79:fd:
                    9a:c2:d6:f2:af:99:41:c6:36:5b:6a:6a:7d:0e:2b:
                    64:c9:1f:90:8f:fe:ea:45:c2:b6:a5:3e:d4:c9:b6:
                    df:7d:63:ab:10:b0:1d:27:22:03:7e:48:41:5c:5e:
                    36:8e:44:b2:bb:bc:15:4b:33:b3:4b:e6:93:d6:da:
                    e4:bc:5d:54:59:dc:fa:4f:6f:f3:5a:11:ab:7e:0c:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:E4:13:B2:09:B9:0A:6D:BA:50:10:5A:A9:66:3F:B4:2C:F8:B2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.5.0/24
                  86.38.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:ea:6e:7a:4f:d3:23:0b:61:b8:51:c7:da:1e:6b:26:e4:
         9c:db:0c:12:87:7c:87:1d:ab:49:dc:f8:20:e5:e8:b8:34:e2:
         5a:cb:3b:56:34:35:bf:ae:7f:b4:22:e0:44:6a:a5:b9:85:c1:
         f4:f6:66:93:02:07:51:17:43:6c:5d:83:bc:f8:3a:21:51:fa:
         8e:31:a9:68:9e:0d:ce:0a:cb:4a:33:8e:94:ee:06:31:79:4e:
         d5:a2:6b:a7:95:1d:4c:ca:af:b4:3c:5e:78:b4:f0:9c:c9:64:
         4f:99:e5:0c:4d:57:d0:a8:07:5e:bb:2e:55:fb:81:58:4d:9c:
         6c:64:67:44:76:7e:e0:ce:15:e3:d5:8c:ea:fe:be:8a:b3:f5:
         a9:fc:53:1a:16:61:c9:52:95:03:cf:8c:8f:d1:cb:ab:36:02:
         1f:ff:0b:cd:9c:c4:8b:bd:1e:9d:72:19:4e:24:66:4e:4b:d0:
         e3:77:4b:56:f5:6a:a6:18:93:f0:b9:6b:19:4c:8f:48:8c:2a:
         7d:a3:17:34:24:86:c4:d4:e3:46:ea:08:56:6e:39:8b:94:f7:
         93:80:cd:f8:de:c9:53:93:f5:4f:ca:c6:0d:75:6a:f7:a9:2a:
         c4:1e:97:19:bc:d9:98:0f:4c:8e:ba:36:41:2d:03:b6:4c:ad:
         ce:77:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org