Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS210439.roa
File:                     AS210439.roa (raw, json)
Hash identifier:          ujF1JV3El2Wa+60olPyzjGvoQueIeN0hatE7lR0xk14=
Subject key identifier:   BC:3E:40:25:1F:70:B1:79:CB:FF:D0:3C:A3:26:AF:F9:62:10:42:C8
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5AC54A60AD3FD3EA52A0B3769D4E5DC485192956
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS210439.roa
Signing time:             Thu 29 Dec 2022 08:00:09 +0000
ROA not before:           Thu 29 Dec 2022 07:55:09 +0000
ROA not after:            Thu 28 Dec 2023 08:00:09 +0000
asID:                     210439
IP address blocks:        89.117.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c5:4a:60:ad:3f:d3:ea:52:a0:b3:76:9d:4e:5d:c4:85:19:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 29 07:55:09 2022 GMT
            Not After : Dec 28 08:00:09 2023 GMT
        Subject: CN=BC3E40251F70B179CBFFD03CA326AFF9621042C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:48:df:ee:78:53:34:e8:13:a9:13:c0:d7:
                    2b:c8:5c:fd:34:5c:61:37:29:63:34:61:e8:71:4b:
                    fc:d3:b5:2e:93:29:c8:f3:d1:13:3e:97:f6:39:65:
                    90:9a:25:a2:2d:e3:ee:43:94:3f:ab:78:a6:c6:47:
                    19:af:58:36:05:95:09:2e:b4:f2:d0:02:a7:ab:bc:
                    be:c8:85:11:3c:22:b3:d1:f9:0f:14:55:90:ee:c5:
                    b6:37:dd:43:6d:be:e0:9b:b6:a9:a8:48:25:fd:0a:
                    56:3d:52:3c:17:77:15:9c:65:66:bc:3c:77:7a:22:
                    2b:c1:41:fc:fd:da:a7:88:7e:45:37:a3:92:ff:de:
                    3e:6d:be:fe:76:46:75:15:07:89:a9:cd:dd:d1:b2:
                    78:c7:58:c6:bf:ff:f0:99:7e:ab:f4:14:72:59:f1:
                    ad:07:5f:a5:75:c1:ab:b1:37:5f:7b:57:eb:3f:74:
                    d2:7d:68:5b:b7:ed:25:86:99:a7:fc:8e:78:ec:2a:
                    0c:c4:84:6c:cd:17:ef:62:48:df:5c:ce:a4:03:99:
                    90:31:7b:cc:b5:28:cb:e6:03:84:da:0c:80:e1:a2:
                    ba:34:5d:95:1f:48:ee:cb:2e:71:f8:45:a6:48:a3:
                    cc:1f:38:c6:a6:18:63:02:70:96:06:75:eb:00:77:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3E:40:25:1F:70:B1:79:CB:FF:D0:3C:A3:26:AF:F9:62:10:42:C8
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS210439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:6e:38:c8:ff:f9:18:46:ec:8d:63:e3:aa:df:d2:66:83:2c:
         16:59:28:99:18:d3:42:9d:70:19:35:ad:d8:cf:2f:f7:40:14:
         0f:71:46:58:bc:86:18:18:a0:3c:d1:08:a3:be:a9:b9:d9:8c:
         34:64:f6:7c:d8:61:b8:b2:7c:d0:bd:cd:65:2a:74:a8:4d:0b:
         d0:a5:ef:fa:87:18:b8:7f:d6:1f:d3:08:df:e4:5e:67:87:ee:
         4e:e7:cd:38:00:b2:49:8e:05:dd:ca:46:e9:09:52:a8:e9:72:
         d2:fc:b1:72:e5:07:c2:e6:72:fd:16:41:d1:59:61:67:1c:42:
         9e:cc:3f:85:bb:c0:38:fc:fc:df:88:0e:af:30:34:9a:74:45:
         42:73:1b:13:c4:56:5b:a1:24:45:1b:09:13:26:e5:eb:dc:5d:
         f9:a1:d4:fd:90:59:65:f5:94:44:8d:84:48:d4:8a:91:88:7d:
         8f:44:4f:c3:a0:88:2d:c4:57:ef:d6:21:ae:8a:e9:e4:af:3d:
         1b:8c:c0:9c:dd:c2:2c:a6:43:48:f4:a6:c4:1c:c5:f9:aa:5a:
         ad:ae:aa:37:dd:03:69:dc:40:16:30:5a:4c:d7:89:18:13:b0:
         51:dc:5f:e2:be:5f:ee:ed:ee:a2:aa:8d:0e:31:49:7f:0f:ec:
         8d:35:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org