Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61003.roa
File:                     AS61003.roa (raw, json)
Hash identifier:          iwTLTqVTPY9JxXz8g83W+fj6m6YrgUFkWAE8fvJns4I=
Subject key identifier:   00:39:CE:8D:F5:BA:F5:93:1D:AB:8C:E4:7A:29:64:38:98:D4:8B:E1
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2BF6E26502580ED4DA10250AEF028EDC2E20AFE9
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61003.roa
Signing time:             Mon 16 Jan 2023 00:00:08 +0000
ROA not before:           Sun 15 Jan 2023 23:55:08 +0000
ROA not after:            Mon 15 Jan 2024 00:00:08 +0000
asID:                     61003
IP address blocks:        89.116.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f6:e2:65:02:58:0e:d4:da:10:25:0a:ef:02:8e:dc:2e:20:af:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 15 23:55:08 2023 GMT
            Not After : Jan 15 00:00:08 2024 GMT
        Subject: CN=0039CE8DF5BAF5931DAB8CE47A29643898D48BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:71:b3:19:9e:56:0f:44:a0:fb:bc:b6:20:
                    37:7f:c1:f2:01:49:96:e9:0a:ac:80:3e:70:c5:51:
                    d3:6d:89:ff:e6:71:28:e0:1d:91:59:b8:a4:a9:88:
                    6b:f5:70:a4:75:2e:61:c0:53:50:99:7d:c0:88:75:
                    07:0f:0f:f2:1e:8c:06:1b:47:84:8c:d7:05:3b:c3:
                    02:45:f0:97:b4:42:ae:99:1f:52:f0:eb:6f:c6:48:
                    b8:eb:ac:35:47:37:f9:a5:03:92:96:5a:74:33:88:
                    d0:e2:1e:45:df:50:30:cd:c9:05:61:8a:39:1d:31:
                    d0:ab:0d:97:aa:bb:d5:de:01:5f:d8:d3:3b:78:a6:
                    a6:ca:c8:d3:d5:9f:60:fb:c0:e0:6e:04:bb:73:e9:
                    64:f3:27:11:e8:2d:ec:43:79:64:f0:ae:9b:54:70:
                    4d:4f:a1:1b:02:07:c6:0b:99:1d:c3:b6:db:20:8c:
                    76:70:54:2b:86:99:1c:53:79:d9:10:d9:1a:1f:98:
                    35:f1:0d:2e:1d:26:90:0a:df:56:fe:cb:1c:42:b2:
                    75:3e:4f:85:06:74:0a:28:9c:92:3e:19:4a:7e:14:
                    2b:1c:52:e3:ff:08:a1:5b:c0:16:e0:15:27:5a:ff:
                    64:ea:75:cc:f6:f4:6e:de:78:df:2a:d9:b9:ec:49:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:39:CE:8D:F5:BA:F5:93:1D:AB:8C:E4:7A:29:64:38:98:D4:8B:E1
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61003.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:46:4a:ae:30:29:80:cf:f0:a5:b5:96:99:4c:57:08:8a:
         c0:fb:9d:0c:22:86:74:7c:4f:a6:f4:26:7c:5a:4f:a1:8e:ff:
         b5:c9:64:86:10:60:1e:f8:2a:13:a7:1e:7e:cb:5d:8b:81:47:
         7a:4f:22:41:80:3b:02:ee:b1:93:9b:5d:a7:3e:da:7b:6e:62:
         71:85:b5:c1:ac:80:97:ed:5f:7e:e6:be:9d:9f:a4:d3:67:51:
         8f:a1:44:34:77:e6:37:88:02:95:c9:dc:cd:e7:6d:cb:81:62:
         ee:6d:d7:40:17:a0:8c:23:ff:8f:63:f5:19:87:51:b3:63:c2:
         3f:89:05:04:7f:db:47:ab:3f:13:e5:5e:bf:08:58:34:f7:72:
         88:a3:42:18:67:a1:b4:08:90:a7:f3:6b:87:a1:8d:dc:02:a3:
         a8:46:de:d1:d7:c6:e1:21:a0:ab:f5:28:99:14:e0:8b:a4:66:
         4f:d0:37:44:28:6e:93:3b:ae:10:9c:7b:19:15:09:15:30:93:
         0c:cf:09:28:5b:55:12:92:78:0e:10:d2:01:bf:7f:c2:33:eb:
         e4:23:8b:83:c2:ee:4f:f3:f8:10:3f:86:43:0b:f5:74:e7:67:
         31:ce:dd:96:0d:1b:41:f6:a8:7e:a9:11:b8:54:dd:11:bf:1f:
         68:e0:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org