Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS39614.roa
File:                     AS39614.roa (raw, json)
Hash identifier:          TVdac0Zls4HhF64qCWzo1N5lUPOtt5tC/o+U9gltZS0=
Subject key identifier:   B8:08:49:08:96:D2:1E:F7:44:21:32:68:91:85:E5:C9:A4:23:E1:E3
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1D8D3EB42FE31D5A2BE224A051EBC470BC97F0B2
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS39614.roa
Signing time:             Tue 21 Mar 2023 08:35:42 +0000
ROA not before:           Tue 21 Mar 2023 08:30:42 +0000
ROA not after:            Tue 19 Mar 2024 08:35:42 +0000
asID:                     39614
IP address blocks:        86.38.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8d:3e:b4:2f:e3:1d:5a:2b:e2:24:a0:51:eb:c4:70:bc:97:f0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 21 08:30:42 2023 GMT
            Not After : Mar 19 08:35:42 2024 GMT
        Subject: CN=B808490896D21EF7442132689185E5C9A423E1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:58:30:48:8f:e2:8f:64:a4:ed:dd:1f:7d:
                    a6:7c:c2:8e:be:be:6f:86:ac:20:ee:d8:fd:f5:40:
                    25:3d:c1:43:c0:6e:cc:81:39:57:51:ba:4c:e9:11:
                    74:dd:0f:19:b0:23:b8:58:97:a3:97:58:65:06:a9:
                    c3:bb:23:1d:8d:6b:43:f7:f5:5d:40:49:75:01:d5:
                    19:e4:94:94:6b:ed:12:11:38:e0:60:a2:0a:1c:27:
                    32:59:1f:a1:fb:45:96:1c:24:0f:4d:3d:3c:a7:62:
                    48:a0:60:4b:f0:67:e7:99:92:87:f4:7a:8c:40:c3:
                    3e:72:90:4a:02:43:57:9c:e1:9d:10:c3:3c:e5:14:
                    19:f4:1e:bd:9e:2a:c3:73:2a:3e:20:9c:90:20:b2:
                    98:fd:15:b5:99:78:c0:ed:b2:a3:03:c2:ab:49:7d:
                    88:44:2b:5a:85:94:9e:1a:18:be:f7:76:a7:ea:fe:
                    71:b2:00:78:f6:62:40:41:fc:eb:54:a4:7f:fe:de:
                    aa:02:64:8e:58:ec:8a:5b:ba:6f:48:6f:36:db:d8:
                    63:ce:83:89:5b:97:c3:61:fd:7c:ab:ce:91:ed:1f:
                    76:a2:ad:26:9b:04:fe:b3:9c:1d:c5:31:14:29:2c:
                    36:6e:23:ed:b4:c5:d3:2b:2b:c4:a3:70:0e:e6:8b:
                    20:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:08:49:08:96:D2:1E:F7:44:21:32:68:91:85:E5:C9:A4:23:E1:E3
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS39614.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:81:76:5b:d5:f3:69:80:89:26:13:f0:92:98:ce:57:fe:4c:
         b6:83:02:11:c5:da:65:ed:73:4f:96:92:1c:2d:da:86:d1:2c:
         e8:4d:0c:aa:7f:36:3c:ca:59:c0:7c:be:7a:e4:fa:43:5d:2b:
         c4:b7:e5:8d:b2:b6:bb:15:02:cd:60:3e:c7:09:ee:b0:2e:25:
         46:54:d2:ab:72:32:19:83:02:d6:6c:9a:09:34:f3:d4:6f:aa:
         08:34:18:5f:c0:3a:7d:7a:e3:ce:06:61:f2:e4:10:c2:86:15:
         69:5d:1d:2d:c5:4c:cc:00:8d:76:44:aa:88:40:00:5f:9e:8c:
         67:1d:7c:cd:fb:e9:28:ba:89:9c:20:a7:54:37:57:c8:86:31:
         34:7f:86:6a:fb:03:b4:92:b3:13:48:23:66:71:39:f6:d0:9f:
         76:03:f8:c3:74:fa:8e:f7:96:31:5b:c3:72:30:07:f1:37:6e:
         ac:65:d3:28:74:46:fb:65:f5:3b:ee:1d:ff:a8:35:22:82:f6:
         7e:0d:27:d9:41:63:da:8d:14:c4:fa:b8:76:5c:41:27:79:bc:
         0f:fc:cf:e9:47:88:21:c9:4c:3c:e7:b0:65:47:fb:f5:37:f1:
         d4:d7:da:57:d9:c9:f5:1d:bb:6c:d0:c3:84:5d:9e:ec:09:99:
         20:f8:9f:cf
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUHY0+tC/jHVor4iSgUevEcLyX8LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzAzMjEwODMwNDJaFw0yNDAzMTkwODM1NDJaMDMxMTAvBgNV
BAMTKEI4MDg0OTA4OTZEMjFFRjc0NDIxMzI2ODkxODVFNUM5QTQyM0UxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDphVgwSI/ij2Sk7d0ffaZ8wo6+
vm+GrCDu2P31QCU9wUPAbsyBOVdRukzpEXTdDxmwI7hYl6OXWGUGqcO7Ix2Na0P3
9V1ASXUB1RnklJRr7RIROOBgogocJzJZH6H7RZYcJA9NPTynYkigYEvwZ+eZkof0
eoxAwz5ykEoCQ1ec4Z0QwzzlFBn0Hr2eKsNzKj4gnJAgspj9FbWZeMDtsqMDwqtJ
fYhEK1qFlJ4aGL73dqfq/nGyAHj2YkBB/OtUpH/+3qoCZI5Y7Ipbum9Ibzbb2GPO
g4lbl8Nh/XyrzpHtH3airSabBP6znB3FMRQpLDZuI+20xdMrK8SjcA7miyCNAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUuAhJCJbSHvdEITJokYXlyaQj4eMwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMzOTYxNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYmBzANBgkq
hkiG9w0BAQsFAAOCAQEAloF2W9XzaYCJJhPwkpjOV/5MtoMCEcXaZe1zT5aSHC3a
htEs6E0Mqn82PMpZwHy+euT6Q10rxLfljbK2uxUCzWA+xwnusC4lRlTSq3IyGYMC
1myaCTTz1G+qCDQYX8A6fXrjzgZh8uQQwoYVaV0dLcVMzACNdkSqiEAAX56MZx18
zfvpKLqJnCCnVDdXyIYxNH+GavsDtJKzE0gjZnE59tCfdgP4w3T6jveWMVvDcjAH
8TdurGXTKHRG+2X1O+4d/6g1IoL2fg0n2UFj2o0UxPq4dlxBJ3m8D/zP6UeIIclM
POewZUf79Tfx1NfaV9nJ9R27bNDDhF2e7AmZIPifzw==
-----END CERTIFICATE-----
Generated at Mon Jul 24 08:44:47 2023 by rpki-client on console-fra.rpki-client.org