Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209260.roa
File:                     AS209260.roa (raw, json)
Hash identifier:          +X1FL+KoCqyygBDlBEPHMCY+nf6/R+UjlczefxUABVI=
Subject key identifier:   50:D2:85:38:57:F9:1C:2D:8E:96:6D:B9:CD:90:42:E5:5C:66:44:40
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2F1C5B83FD11DE04B6976E04627B213228443E98
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209260.roa
Signing time:             Wed 21 Jun 2023 00:00:23 +0000
ROA not before:           Tue 20 Jun 2023 23:55:23 +0000
ROA not after:            Wed 19 Jun 2024 00:00:23 +0000
asID:                     209260
IP address blocks:        86.38.214.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1c:5b:83:fd:11:de:04:b6:97:6e:04:62:7b:21:32:28:44:3e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 20 23:55:23 2023 GMT
            Not After : Jun 19 00:00:23 2024 GMT
        Subject: CN=50D2853857F91C2D8E966DB9CD9042E55C664440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:74:9f:91:da:1a:eb:05:ef:6e:38:6c:29:
                    88:6a:20:de:50:15:05:1b:8b:e5:e2:c3:eb:c9:5b:
                    8b:c7:40:6f:59:b6:ff:4e:1d:b5:9b:a6:e9:bc:1c:
                    91:a1:91:56:f4:50:de:c2:90:7a:2a:0f:31:ee:70:
                    41:56:8b:9a:76:ff:c8:76:8b:d4:cd:f1:e5:1a:93:
                    94:f3:c1:7e:4b:95:48:0a:55:ad:89:40:28:c3:ea:
                    aa:77:40:65:db:c4:e1:f2:71:73:d3:8c:59:60:ad:
                    c9:e4:65:6b:de:50:97:e7:64:2b:d9:50:9a:f9:74:
                    6c:20:aa:e9:66:e2:4d:c8:f0:4f:60:6c:9b:49:9e:
                    e5:c1:8a:32:d3:8b:ae:be:27:28:61:17:57:dd:d8:
                    a2:3a:77:20:6d:68:a4:31:97:47:16:2b:95:d3:69:
                    07:44:14:fa:64:2b:09:0c:bb:e8:24:49:96:ce:4d:
                    4e:87:39:2d:d1:68:95:2b:42:34:e1:13:ac:2a:f5:
                    27:20:85:28:ab:50:56:d3:b2:98:65:5b:0b:a8:e8:
                    4b:8c:08:da:a5:8f:d5:e6:c6:37:0c:1f:6a:b9:73:
                    c0:18:c7:3c:f7:89:78:5e:fc:8d:3d:c7:e1:57:79:
                    a0:98:7e:87:9a:0a:73:98:30:b0:35:c8:4d:1c:bd:
                    2f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:85:38:57:F9:1C:2D:8E:96:6D:B9:CD:90:42:E5:5C:66:44:40
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.214.0/24
                  89.116.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:1b:a4:59:59:ce:d2:7e:a6:4d:cb:39:d8:30:ef:10:f0:66:
         31:1c:33:c4:67:47:ce:0f:e3:58:98:af:e5:b1:b4:f7:a2:91:
         6d:0a:14:9e:54:91:31:4e:64:e2:0f:ab:2c:1d:d6:92:14:36:
         ed:4f:b7:bf:9f:46:c7:43:7a:fa:be:68:f9:01:9e:c5:d9:5c:
         00:2f:49:f4:03:f4:cd:14:f0:06:41:6b:df:ad:b7:42:7d:05:
         99:9e:c3:ee:4c:73:f1:97:d4:b0:2b:2e:17:54:39:e2:19:dc:
         a6:46:a8:28:2f:76:11:e2:1c:68:ff:12:98:f0:58:b1:e9:9b:
         9d:ff:48:9d:f0:d2:5f:8c:40:f6:50:51:49:f7:b8:89:46:5d:
         11:0e:77:62:00:bd:c1:20:16:ee:d2:02:90:3e:2f:47:4b:7b:
         54:13:e0:95:30:e7:95:77:dc:10:0c:90:2a:c7:90:a0:d6:e4:
         36:eb:c8:83:19:dc:ce:94:25:a4:7c:41:1f:d0:38:e9:9e:c6:
         bb:28:63:6f:c0:f9:58:d9:3c:35:d0:84:ce:77:c2:a4:31:c0:
         d1:d6:63:a0:6b:a0:92:0a:e6:a9:a5:c4:23:69:31:17:7e:f7:
         97:e5:f8:9e:fb:42:07:91:9f:9e:c6:83:09:d7:88:fa:ef:94:
         aa:21:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 00:18:51 2023 by rpki-client on console-ams.rpki-client.org