Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396982.roa
File:                     AS396982.roa (raw, json)
Hash identifier:          whD+zCxzAzznSIqhXN3ZBnSKrZhjI9yOLPx+6S7V/dY=
Subject key identifier:   F6:42:54:6C:7F:3E:42:15:B1:F2:B5:38:C1:D4:AA:E2:2A:A3:CE:16
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7A82474C9B639FFFF9319A5E6E9555F27ECDFD86
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396982.roa
Signing time:             Wed 07 Jun 2023 15:27:38 +0000
ROA not before:           Wed 07 Jun 2023 15:22:38 +0000
ROA not after:            Wed 05 Jun 2024 15:27:38 +0000
asID:                     396982
IP address blocks:        89.117.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:82:47:4c:9b:63:9f:ff:f9:31:9a:5e:6e:95:55:f2:7e:cd:fd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun  7 15:22:38 2023 GMT
            Not After : Jun  5 15:27:38 2024 GMT
        Subject: CN=F642546C7F3E4215B1F2B538C1D4AAE22AA3CE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:ac:92:f3:86:56:fa:a7:8e:3a:17:f8:84:
                    f2:ca:38:cf:9e:86:09:09:29:80:8e:cf:28:82:c5:
                    6b:9e:00:ca:47:8a:ea:ec:b8:17:54:c0:13:4a:75:
                    2a:c0:c6:22:f5:07:20:e6:c4:06:ef:0c:09:22:d2:
                    98:1b:20:4b:1e:ad:20:a3:b8:5e:74:45:04:7f:62:
                    dd:7f:5a:19:df:f8:d6:34:9b:d6:06:62:82:7b:9d:
                    75:39:ba:1c:c2:2e:7b:06:8e:91:45:20:ae:04:dd:
                    f8:a5:40:8a:d5:47:e1:88:37:34:7c:41:40:d8:62:
                    bd:08:84:cf:18:85:ca:da:ed:6e:13:e9:88:80:55:
                    e6:b6:7d:45:e5:8c:05:45:da:67:04:6a:fd:c2:fc:
                    6e:70:c6:70:8b:d6:0b:8f:27:51:da:57:eb:41:4b:
                    c9:09:aa:0e:92:b7:e5:3f:f3:92:57:0a:c7:13:1a:
                    09:57:7c:f2:82:14:e5:20:53:1e:4a:c0:04:a1:4e:
                    2b:68:7e:0d:f6:cf:64:43:9c:9f:e8:6c:57:89:d3:
                    9d:90:ee:58:81:cd:57:8e:92:a2:7d:88:84:cb:e6:
                    79:e3:76:9e:bd:f6:0c:75:19:31:29:e2:df:94:05:
                    93:7f:a6:bc:9e:ea:f6:6b:34:99:ee:90:b6:bd:cc:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:42:54:6C:7F:3E:42:15:B1:F2:B5:38:C1:D4:AA:E2:2A:A3:CE:16
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:17:7e:ae:10:f5:dd:26:60:f3:15:c7:ab:45:03:4e:58:
         11:d3:4a:6f:e7:bf:94:8b:5c:63:9e:c2:4f:5f:f7:31:ea:a8:
         68:b2:2b:a4:8e:b9:18:5e:fa:d3:29:36:42:a0:f4:29:ed:16:
         85:78:11:d9:af:5b:44:ba:61:5b:97:24:5a:ab:0e:36:ce:35:
         97:58:77:ab:c9:82:e5:6d:70:3c:08:ae:26:9d:07:16:8e:0b:
         61:48:0b:66:21:18:f8:63:48:8b:af:5b:57:e5:64:ea:e6:eb:
         d7:dd:40:28:b6:b4:42:e6:03:46:30:d7:c2:88:3e:48:5f:54:
         b8:0c:38:1f:97:ad:e8:fe:7c:c9:95:3b:5b:e9:80:aa:96:46:
         c1:03:aa:32:96:10:53:a9:92:3a:a6:bc:22:9a:ef:4d:a9:2d:
         24:14:f2:16:1c:1f:40:31:f4:71:ff:36:c1:e4:30:8c:fe:f2:
         42:73:73:46:af:18:37:cf:d0:e9:fd:83:fa:e8:a5:27:c5:d2:
         9a:c3:29:6c:40:c6:1c:5a:52:2c:55:55:9a:12:af:35:31:a8:
         c0:e7:91:be:8e:4e:c2:88:d4:01:a9:75:cf:23:b1:84:4e:ce:
         9c:8a:2c:c1:66:1b:a7:b8:52:5a:2a:72:eb:6b:9b:ba:fa:b6:
         ac:1c:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 00:29:02 2023 by rpki-client on console-ams.rpki-client.org