Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          lKi09YdCjyqf5Ob6R4vxIO757UOBV46IFSlqwEaV25Q=
Subject key identifier:   74:3F:58:53:2B:9F:FE:96:FA:E2:3F:EB:94:84:F4:CB:4D:C4:8E:D3
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       41D013692E1CAB3F6260DA9E47D09DD6D15599D7
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212384.roa
Signing time:             Wed 30 Nov 2022 17:39:12 +0000
ROA not before:           Wed 30 Nov 2022 17:34:12 +0000
ROA not after:            Wed 29 Nov 2023 17:39:12 +0000
asID:                     212384
IP address blocks:        86.38.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d0:13:69:2e:1c:ab:3f:62:60:da:9e:47:d0:9d:d6:d1:55:99:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 30 17:34:12 2022 GMT
            Not After : Nov 29 17:39:12 2023 GMT
        Subject: CN=743F58532B9FFE96FAE23FEB9484F4CB4DC48ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:63:68:ea:32:e2:de:76:8e:08:57:66:a8:
                    91:23:cf:fc:a5:93:76:1a:64:a1:7c:41:15:a4:ac:
                    33:de:5a:5b:69:57:86:0e:0b:93:c1:61:18:cb:d4:
                    c3:77:c5:8e:60:e5:2a:b2:ad:a9:67:8d:e5:3b:b9:
                    49:37:83:0a:37:73:04:61:e1:52:f9:98:a0:9e:f8:
                    ec:43:e2:e2:be:c8:b1:85:81:ef:ee:8e:81:72:f5:
                    7c:39:4a:f0:92:0c:79:5f:5f:ec:49:30:35:d6:5c:
                    56:ca:24:76:47:48:7c:6c:4b:dd:0f:41:03:8a:fc:
                    6a:28:2c:79:29:dd:c7:1e:0a:06:04:08:15:b5:f5:
                    67:f4:20:5b:88:fd:57:8f:bf:53:e5:7e:8d:25:95:
                    cb:25:80:c1:3a:62:c0:55:ca:8a:6d:45:4d:43:5e:
                    43:d5:bd:1a:1d:e0:c4:94:47:b5:d3:09:15:e9:83:
                    3e:c7:89:b0:51:f2:96:ee:27:dd:34:9f:9a:da:d8:
                    19:c7:cd:13:1c:1a:88:2e:51:83:1c:06:47:0b:d5:
                    8e:ba:de:43:10:4c:77:14:d7:87:cb:c8:84:89:b0:
                    f2:5e:fe:06:cc:62:2c:21:f8:81:6e:8c:79:ae:5f:
                    01:66:03:b9:95:a5:2a:0a:69:13:ef:ac:ab:9f:39:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3F:58:53:2B:9F:FE:96:FA:E2:3F:EB:94:84:F4:CB:4D:C4:8E:D3
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:32:eb:39:42:b6:fd:4b:f6:51:8e:53:df:19:c8:f3:4e:
         57:16:4e:e5:5d:ce:fb:1d:61:ba:d1:7d:c4:ea:a5:23:b1:42:
         0c:43:17:98:28:20:cd:34:ec:bf:c3:50:e3:e5:84:5b:b4:72:
         89:dc:ad:4f:36:d7:24:19:51:08:17:f8:4f:a0:72:dd:43:b2:
         ce:19:40:14:7b:44:6b:30:c0:b3:af:cd:a3:ef:be:8c:96:0f:
         cd:07:50:a0:bf:30:d0:8e:2d:f8:09:d1:72:8d:0a:12:f8:7e:
         73:15:06:cf:44:45:53:1c:53:0f:93:ae:d7:da:f2:12:27:8d:
         11:92:e4:cb:53:49:ff:80:d8:d8:12:cd:82:40:58:82:b9:42:
         57:0a:ce:5d:f8:3a:6b:02:9f:51:d7:ee:eb:34:05:56:d3:72:
         5c:03:a4:dc:87:52:e2:4c:48:46:29:f9:74:47:b2:99:a8:62:
         6c:c4:8a:eb:80:7f:40:f2:b8:44:81:a3:af:e9:58:9f:2e:b5:
         44:24:12:b3:e6:72:88:c6:6c:b5:4a:9d:05:b9:61:9d:17:68:
         53:7b:b5:5a:44:94:62:85:8f:44:bc:bc:26:fa:26:fa:d0:c0:
         97:4d:e5:8c:c2:48:bd:4b:ec:e2:4a:03:a6:0d:b6:58:cd:5d:
         5e:ef:f8:46
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUQdATaS4cqz9iYNqeR9Cd1tFVmdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMjExMzAxNzM0MTJaFw0yMzExMjkxNzM5MTJaMDMxMTAvBgNV
BAMTKDc0M0Y1ODUzMkI5RkZFOTZGQUUyM0ZFQjk0ODRGNENCNERDNDhFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lGNo6jLi3naOCFdmqJEjz/yl
k3YaZKF8QRWkrDPeWltpV4YOC5PBYRjL1MN3xY5g5SqyralnjeU7uUk3gwo3cwRh
4VL5mKCe+OxD4uK+yLGFge/ujoFy9Xw5SvCSDHlfX+xJMDXWXFbKJHZHSHxsS90P
QQOK/GooLHkp3cceCgYECBW19Wf0IFuI/VePv1Plfo0llcslgME6YsBVyoptRU1D
XkPVvRod4MSUR7XTCRXpgz7HibBR8pbuJ900n5ra2BnHzRMcGoguUYMcBkcL1Y66
3kMQTHcU14fLyISJsPJe/gbMYiwh+IFujHmuXwFmA7mVpSoKaRPvrKufOTbnAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUdD9YUyuf/pb64j/rlIT0y03EjtMwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMyMTIzODQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWJu4wDQYJ
KoZIhvcNAQELBQADggEBAJXsMus5Qrb9S/ZRjlPfGcjzTlcWTuVdzvsdYbrRfcTq
pSOxQgxDF5goIM007L/DUOPlhFu0concrU821yQZUQgX+E+gct1Dss4ZQBR7RGsw
wLOvzaPvvoyWD80HUKC/MNCOLfgJ0XKNChL4fnMVBs9ERVMcUw+Trtfa8hInjRGS
5MtTSf+A2NgSzYJAWIK5QlcKzl34OmsCn1HX7us0BVbTclwDpNyHUuJMSEYp+XRH
spmoYmzEiuuAf0DyuESBo6/pWJ8utUQkErPmcojGbLVKnQW5YZ0XaFN7tVpElGKF
j0S8vCb6JvrQwJdN5YzCSL1L7OJKA6YNtljNXV7v+EY=
-----END CERTIFICATE-----
Generated at Sat Sep 30 00:45:19 2023 by rpki-client on console-ams.rpki-client.org