Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          7Q9YwbP/a07KRrbqX0oTD30cII1/nVIUKzslF0UuhIQ=
Subject key identifier:   47:D8:94:C0:C7:68:18:64:12:9B:97:35:23:C4:16:16:71:24:4D:EB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       79AA75E2C67C81298C330D0092684FE0534BF900
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20473.roa
Signing time:             Mon 24 Apr 2023 00:00:12 +0000
ROA not before:           Sun 23 Apr 2023 23:55:12 +0000
ROA not after:            Mon 22 Apr 2024 00:00:12 +0000
asID:                     20473
IP address blocks:        89.117.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:aa:75:e2:c6:7c:81:29:8c:33:0d:00:92:68:4f:e0:53:4b:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 23 23:55:12 2023 GMT
            Not After : Apr 22 00:00:12 2024 GMT
        Subject: CN=47D894C0C7681864129B973523C4161671244DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:61:95:15:99:02:2e:df:9d:ff:52:ef:28:9c:
                    83:48:da:17:94:e5:cc:30:8c:d0:99:14:48:7b:89:
                    d8:c9:07:b1:fa:ff:d1:cd:c4:0a:a1:5b:bf:d2:76:
                    b3:ca:00:45:89:e7:11:c1:3f:38:3b:39:da:cd:2c:
                    92:41:0e:4e:d8:06:b2:3f:63:c6:72:91:31:c9:c4:
                    30:c9:d1:be:c3:19:fd:3c:fd:23:91:4e:9a:e6:a3:
                    6c:97:4a:7e:5d:62:1c:ca:31:14:86:2f:f2:47:78:
                    e4:30:2e:13:a3:51:52:d4:72:19:4c:e5:58:74:7f:
                    ea:0d:b7:d8:23:77:93:fd:ba:6b:5e:1b:7a:7c:37:
                    92:c0:4c:28:7a:3d:e4:42:6d:69:36:70:d7:e6:a6:
                    50:55:84:ba:d7:a7:40:5a:19:f3:09:dd:f0:06:c3:
                    28:99:0e:8d:28:79:fa:2f:a0:7c:ce:4e:3a:cf:76:
                    6a:46:85:16:9e:6c:0e:cb:dd:d9:10:62:c7:6b:8b:
                    a5:cd:05:63:4b:db:ec:f9:f6:76:ee:f0:ab:db:c1:
                    c1:ad:7d:56:2a:38:40:71:05:6d:43:fb:ee:73:dc:
                    71:99:af:9d:81:b0:23:ef:93:33:b3:5a:b4:76:78:
                    7a:d5:6a:47:a8:7b:0e:dc:2e:dc:02:71:69:0f:1b:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:94:C0:C7:68:18:64:12:9B:97:35:23:C4:16:16:71:24:4D:EB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:d2:ba:c1:2c:00:06:86:a8:ca:d8:13:9a:3a:24:3a:77:
         60:81:8e:4d:97:7b:a9:59:71:ff:71:e5:ce:90:81:95:76:0b:
         66:1f:00:ed:ab:f3:aa:34:1a:0a:0c:17:6c:50:82:f5:6d:36:
         ac:ed:f9:1b:6d:9f:64:db:fe:b6:4c:d8:9e:3d:0e:3b:72:f5:
         cd:06:94:02:c8:47:53:b0:14:3e:b1:e5:8d:31:45:44:2b:fd:
         2c:ff:a8:00:ed:56:ee:b1:01:47:0c:6b:fb:35:c4:d3:55:78:
         77:a1:09:11:9f:17:3d:42:9e:5d:84:05:81:5c:3e:d5:83:3d:
         06:e4:35:28:2f:f2:77:02:f3:5e:a1:a0:b1:88:6f:bd:e0:4b:
         ee:85:69:e5:dc:4f:4a:56:69:ce:4d:de:d6:85:81:4b:8f:fa:
         2d:45:a8:4a:c8:08:7f:ad:f5:c4:6d:76:d5:ba:cf:e4:b9:96:
         c9:d4:36:1e:d6:9e:d6:42:dc:31:03:22:cc:14:ea:c9:d3:a8:
         19:f9:f5:37:fc:f9:ef:64:01:48:6e:37:fe:29:a8:85:6b:5c:
         34:fa:69:e7:d2:8a:7d:5f:7c:05:1e:12:71:39:00:42:d7:e7:
         cf:f6:96:2a:b3:40:90:a8:98:7a:b9:56:2a:3a:06:63:6a:bd:
         f2:b4:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 00:41:31 2023 by rpki-client on console-ams.rpki-client.org