Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS30823.roa
File:                     AS30823.roa (raw, json)
Hash identifier:          mPy5UsqIW99+kKMdWfZx9KiAZiqtqxIZ6vYhwN5c55o=
Subject key identifier:   11:9D:A1:C3:21:DE:F7:A9:9B:3C:B3:31:43:26:9B:D7:9B:6C:FB:33
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       667087B309F663182C4045D141078896C21A6C16
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS30823.roa
Signing time:             Fri 21 Apr 2023 09:44:43 +0000
ROA not before:           Fri 21 Apr 2023 09:39:43 +0000
ROA not after:            Fri 19 Apr 2024 09:44:43 +0000
asID:                     30823
IP address blocks:        89.116.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:87:b3:09:f6:63:18:2c:40:45:d1:41:07:88:96:c2:1a:6c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 21 09:39:43 2023 GMT
            Not After : Apr 19 09:44:43 2024 GMT
        Subject: CN=119DA1C321DEF7A99B3CB33143269BD79B6CFB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:55:12:de:37:d8:e4:bf:63:e2:14:e6:43:
                    a7:9c:b9:5d:bf:71:c1:f3:07:e2:e7:52:14:79:3c:
                    28:63:c9:3f:29:ff:0e:e6:9b:82:65:e6:8a:40:a6:
                    42:f2:fd:cb:05:bb:e6:13:c5:4e:f6:56:c8:81:8d:
                    a1:41:20:87:b6:42:9b:3f:79:e6:8f:cc:ac:4c:0e:
                    62:25:71:9c:0f:72:f5:93:f3:54:c3:52:bf:02:a7:
                    c3:4f:fe:cb:6b:73:73:3f:2f:af:ea:80:1b:64:c8:
                    85:83:23:f5:d3:5f:90:54:fa:a2:dc:f4:20:b6:44:
                    ae:d7:bd:56:cb:ff:e0:f5:64:30:dd:8f:0f:67:c0:
                    28:3f:52:a4:39:ec:c7:7b:b8:59:87:a7:c9:ca:d0:
                    c5:46:06:d3:1b:e9:82:c8:fd:a6:c0:92:78:d8:c2:
                    4a:b1:1c:32:5d:a7:a0:2c:4c:fe:1f:ff:32:fb:0a:
                    58:34:93:d7:c9:f1:f5:d1:50:e3:c6:96:1b:9e:0d:
                    e0:f0:5f:c3:a1:e1:e4:77:7a:35:d6:af:d2:c2:46:
                    cd:47:a7:38:c5:4c:5e:ec:e6:fd:7b:4f:c2:fb:f2:
                    e1:15:f2:e3:76:cf:97:63:42:3b:0f:4c:85:7c:9e:
                    56:ff:d2:d7:b6:8f:4d:d5:ce:33:9e:24:53:b1:e5:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9D:A1:C3:21:DE:F7:A9:9B:3C:B3:31:43:26:9B:D7:9B:6C:FB:33
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS30823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:89:7f:6b:50:2c:e9:f7:7b:f5:4f:cb:5e:1b:8a:f0:30:
         4a:53:ed:15:1f:0a:67:d0:85:e9:2a:98:57:5f:ca:60:c3:84:
         f1:95:09:51:47:4a:b4:00:fa:97:8f:dd:54:3c:d2:c4:04:f1:
         1e:5c:17:59:5a:75:54:c9:84:b3:a4:00:c8:db:dd:6d:a4:40:
         09:cd:a6:4b:4c:52:7b:4a:8d:38:fe:b6:26:c7:ac:59:f5:0f:
         38:2f:29:d2:41:f1:76:a4:d1:1a:50:88:51:6c:91:ef:a7:91:
         da:ab:35:0f:5a:5d:7f:58:6f:f6:ad:62:4d:e6:e2:55:30:bc:
         b7:5a:e3:a4:79:c1:67:e3:18:93:20:1f:7e:4e:08:9c:53:01:
         51:48:3b:3f:f5:fe:66:0d:5a:3e:5d:da:54:9c:58:5b:50:cf:
         d8:c5:ca:dd:72:dd:6e:1a:60:93:60:3f:e7:24:91:8b:bf:0e:
         74:e8:b9:48:05:6a:e9:33:d6:34:ea:18:85:48:f9:07:91:7f:
         67:11:f8:ee:4f:01:50:c3:65:68:e9:34:fd:bd:46:40:31:f6:
         4b:c4:c1:5d:aa:b4:c7:fc:50:1d:9d:d5:57:c7:ee:0a:1c:6a:
         b4:fc:fb:1b:bd:ba:b2:2d:c9:bb:16:1c:d4:60:18:d6:9a:71:
         85:1b:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org