Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212335.roa
File:                     AS212335.roa (raw, json)
Hash identifier:          nt8mSVkR62+BfA9lg6Xqlrf6r5UXZJYsR3W8+Ah+gyE=
Subject key identifier:   3E:33:C0:AB:13:CE:CD:0F:FA:19:98:C2:E2:41:4D:64:1B:BE:1E:AD
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5F535173B3F9AF62F5E2C60AAF49845BAD336CDD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212335.roa
Signing time:             Wed 10 May 2023 13:06:51 +0000
ROA not before:           Wed 10 May 2023 13:01:51 +0000
ROA not after:            Wed 08 May 2024 13:06:51 +0000
asID:                     212335
IP address blocks:        89.116.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:53:51:73:b3:f9:af:62:f5:e2:c6:0a:af:49:84:5b:ad:33:6c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 10 13:01:51 2023 GMT
            Not After : May  8 13:06:51 2024 GMT
        Subject: CN=3E33C0AB13CECD0FFA1998C2E2414D641BBE1EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:4c:e3:ca:4f:64:39:9f:ba:45:5c:fd:16:96:
                    62:b3:7c:43:15:fc:7e:f7:2f:9b:3e:f2:45:b5:1e:
                    0e:ed:2a:75:ac:8e:b9:d8:7a:f0:84:11:0c:62:23:
                    f9:24:a1:6d:2d:88:e5:04:fd:ad:ab:5b:4d:57:3e:
                    62:14:9a:25:63:c1:24:c6:92:3f:9d:8f:9b:ed:c0:
                    18:c7:3c:fd:21:1c:70:4b:8c:5b:2c:25:1d:e9:c9:
                    4a:c6:c5:f6:f1:63:12:f7:c2:c9:fc:3a:34:19:f5:
                    4b:82:da:bc:ac:2a:f0:8c:ab:0c:6c:92:6c:81:b5:
                    53:0a:87:47:62:8b:10:13:23:5d:50:76:72:52:bd:
                    1b:db:9f:d3:56:37:91:e1:ec:a5:ef:af:ee:11:63:
                    b1:c7:6f:ad:43:79:c2:3b:91:6c:ba:67:49:19:62:
                    a0:1b:a9:d6:af:d9:55:3d:0c:ca:d8:90:cd:29:c0:
                    28:c4:78:8d:a5:39:75:06:f9:51:a7:b5:93:a8:a4:
                    78:9d:82:4f:c8:c0:b1:bc:0c:4c:ec:46:a7:5f:ee:
                    e8:af:22:fb:89:7f:74:0e:03:d3:0e:c7:3b:ba:bc:
                    3c:14:0b:66:10:b6:73:88:25:de:44:34:dc:83:5b:
                    61:d4:66:67:05:36:fc:83:d1:38:db:67:0e:1e:68:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:33:C0:AB:13:CE:CD:0F:FA:19:98:C2:E2:41:4D:64:1B:BE:1E:AD
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:66:88:55:e2:8c:80:a8:eb:b5:c2:f4:43:63:9a:44:c0:15:
         b6:b7:60:0c:c8:02:f0:4e:58:47:86:52:45:70:3a:ac:69:4c:
         0d:be:75:61:51:55:12:2c:95:da:84:ed:fb:d0:00:96:a5:80:
         01:c4:ff:c4:a8:f3:85:36:25:19:75:a4:a4:6d:17:63:e6:f4:
         d0:3f:bb:49:00:d0:ab:77:4e:57:51:d5:4b:cc:f6:89:75:99:
         2b:b8:0e:90:9b:26:19:1c:ed:da:e0:77:3c:7d:70:33:40:ca:
         19:7b:ef:0a:29:bc:30:89:38:2c:ea:da:73:ee:2e:90:31:1c:
         80:e3:66:05:70:b7:8e:49:80:f3:d6:2d:a5:55:22:70:0f:32:
         4d:1b:5f:e9:3a:52:7e:86:20:b4:ce:3b:7a:ab:ff:77:d4:a3:
         77:44:1d:11:ec:53:ca:b5:dc:67:6f:fa:73:47:d1:8c:e5:21:
         cf:79:08:b6:a0:d0:4c:23:c6:72:4e:0e:04:0e:ac:64:1f:6a:
         af:d9:e9:c9:df:7d:97:01:e1:17:75:75:82:d6:03:28:1b:9c:
         18:09:3c:0a:9d:ce:4a:64:ba:ba:a8:ce:c2:87:50:c3:d8:a6:
         6f:38:3c:37:43:24:0d:a9:47:ed:39:61:93:f5:b9:65:db:47:
         68:d0:f4:27
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUX1NRc7P5r2L14sYKr0mEW60zbN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA1MTAxMzAxNTFaFw0yNDA1MDgxMzA2NTFaMDMxMTAvBgNV
BAMTKDNFMzNDMEFCMTNDRUNEMEZGQTE5OThDMkUyNDE0RDY0MUJCRTFFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+TOPKT2Q5n7pFXP0WlmKzfEMV
/H73L5s+8kW1Hg7tKnWsjrnYevCEEQxiI/kkoW0tiOUE/a2rW01XPmIUmiVjwSTG
kj+dj5vtwBjHPP0hHHBLjFssJR3pyUrGxfbxYxL3wsn8OjQZ9UuC2rysKvCMqwxs
kmyBtVMKh0diixATI11QdnJSvRvbn9NWN5Hh7KXvr+4RY7HHb61DecI7kWy6Z0kZ
YqAbqdav2VU9DMrYkM0pwCjEeI2lOXUG+VGntZOopHidgk/IwLG8DEzsRqdf7uiv
IvuJf3QOA9MOxzu6vDwUC2YQtnOIJd5ENNyDW2HUZmcFNvyD0TjbZw4eaETbAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUPjPAqxPOzQ/6GZjC4kFNZBu+Hq0wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMyMTIzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZdKEwDQYJ
KoZIhvcNAQELBQADggEBAMtmiFXijICo67XC9ENjmkTAFba3YAzIAvBOWEeGUkVw
OqxpTA2+dWFRVRIsldqE7fvQAJalgAHE/8So84U2JRl1pKRtF2Pm9NA/u0kA0Kt3
TldR1UvM9ol1mSu4DpCbJhkc7drgdzx9cDNAyhl77wopvDCJOCzq2nPuLpAxHIDj
ZgVwt45JgPPWLaVVInAPMk0bX+k6Un6GILTOO3qr/3fUo3dEHRHsU8q13Gdv+nNH
0YzlIc95CLag0EwjxnJODgQOrGQfaq/Z6cnffZcB4Rd1dYLWAygbnBgJPAqdzkpk
urqozsKHUMPYpm84PDdDJA2pR+05YZP1uWXbR2jQ9Cc=
-----END CERTIFICATE-----
Generated at Sun Sep 10 00:20:21 2023 by rpki-client on console-ams.rpki-client.org