Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212027.roa
File:                     AS212027.roa (raw, json)
Hash identifier:          P728CuKZEKw5t5+bUbnWY0uYXtW/p65D74P91et0NEw=
Subject key identifier:   D4:34:CD:FB:E8:DA:A3:47:C9:D1:E1:CA:A2:A3:2F:E4:34:BE:DB:D6
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3224167ADA00C27D0F1DF6B2DE265AA9FE0AE00D
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212027.roa
Signing time:             Tue 20 Jun 2023 07:18:44 +0000
ROA not before:           Tue 20 Jun 2023 07:13:44 +0000
ROA not after:            Tue 18 Jun 2024 07:18:44 +0000
asID:                     212027
IP address blocks:        89.116.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:24:16:7a:da:00:c2:7d:0f:1d:f6:b2:de:26:5a:a9:fe:0a:e0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 20 07:13:44 2023 GMT
            Not After : Jun 18 07:18:44 2024 GMT
        Subject: CN=D434CDFBE8DAA347C9D1E1CAA2A32FE434BEDBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:df:e1:78:fa:88:85:b5:bb:85:09:9d:f5:
                    b4:45:7f:69:85:fc:04:da:e0:fe:ad:f9:79:6b:3e:
                    25:23:26:db:7d:e4:50:2b:7f:c5:b8:72:1c:3d:53:
                    8b:0e:80:23:58:79:bb:3c:74:c7:3b:59:99:2d:03:
                    23:5f:25:e0:e4:40:09:46:cf:86:51:46:02:5f:28:
                    74:a8:77:ca:e1:b5:87:1b:20:ea:4e:8d:49:e5:3f:
                    4b:5c:f6:28:bb:e5:12:37:d7:73:29:a3:ed:45:2f:
                    5a:22:c9:56:8b:26:05:ae:8d:e0:4a:87:58:5c:2a:
                    7e:6c:34:9e:45:25:a2:72:fe:7d:4f:ae:0c:81:7b:
                    cd:d3:03:fe:81:c4:36:5e:e8:d9:f1:66:4a:a3:78:
                    3c:24:25:2f:d4:6e:4a:7c:05:a3:2a:29:80:69:d9:
                    55:a8:81:47:37:f0:7d:6e:5a:d2:86:89:29:06:90:
                    71:06:9f:e6:98:19:ca:49:bc:11:6d:1d:e2:25:3f:
                    6d:a5:66:b1:58:18:03:da:1b:3a:1e:85:ef:f6:12:
                    ec:a1:5d:84:75:67:8b:0f:0a:7a:35:49:b9:c5:9d:
                    f0:16:83:2e:ab:e1:b8:23:8e:31:a8:b5:af:d7:2d:
                    45:6f:82:cf:26:d4:93:60:20:20:02:df:ae:85:9b:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:34:CD:FB:E8:DA:A3:47:C9:D1:E1:CA:A2:A3:2F:E4:34:BE:DB:D6
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212027.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:af:d2:26:98:d8:c6:ad:3f:a9:c7:bf:f6:96:4f:37:08:df:
         1e:a1:be:b3:2e:33:25:2a:33:2b:7c:fb:98:b1:f0:69:59:ab:
         8b:59:f7:c7:df:f5:bb:e1:85:73:56:b3:d5:b3:28:bd:9a:72:
         07:a0:c1:3b:d7:96:77:cc:3b:0c:a1:96:fd:b8:7c:ec:f8:8f:
         89:6b:fb:bb:9f:d5:63:9e:e1:dd:87:82:9e:84:9d:ca:5c:51:
         cd:f7:e0:ff:02:94:9c:bf:5a:9c:0b:ad:7b:71:0c:6f:0c:19:
         1c:09:36:96:6a:ed:2b:79:1b:52:f2:8e:b3:0d:83:e0:c8:5a:
         be:8f:d8:f8:98:72:57:9b:c9:9c:0f:1c:9b:a3:ad:97:34:87:
         2b:d6:de:dc:68:4e:f3:85:79:b1:fa:74:dd:84:ff:a2:e3:93:
         8e:46:06:c5:2f:e1:8a:8c:e2:3c:71:aa:25:5f:76:10:a7:7c:
         d2:cb:9d:0d:b6:c9:11:af:13:41:1c:a2:df:db:22:19:c5:9e:
         86:cb:19:64:06:ca:e6:ff:90:9f:2b:84:b2:39:62:38:f7:cf:
         f4:f2:3d:c9:b7:45:9b:0d:a3:0a:d1:98:cb:9a:2b:71:3e:ee:
         05:2b:e1:c4:e6:33:d8:15:5c:5e:c7:7a:00:01:93:3b:95:90:
         0b:24:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 14:25:26 2023 by rpki-client on console-fra.rpki-client.org