Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          xAuQEJD7HT4w16UuHSkOBbU7phf7jQ1EG/xTz20oJfQ=
Subject key identifier:   F4:5B:96:67:8B:56:89:46:39:31:8B:E4:F4:21:91:83:EF:C9:A0:99
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       58375667889BEA3E77E2B418A7470313F1529766
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS6939.roa
Signing time:             Thu 04 May 2023 05:54:06 +0000
ROA not before:           Thu 04 May 2023 05:49:06 +0000
ROA not after:            Thu 02 May 2024 05:54:06 +0000
asID:                     6939
IP address blocks:        89.116.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:37:56:67:88:9b:ea:3e:77:e2:b4:18:a7:47:03:13:f1:52:97:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May  4 05:49:06 2023 GMT
            Not After : May  2 05:54:06 2024 GMT
        Subject: CN=F45B96678B56894639318BE4F4219183EFC9A099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:a6:61:ab:d4:27:fe:b6:11:73:fc:35:dc:
                    93:ff:ff:eb:e7:76:fd:20:0d:c1:e4:49:2b:87:08:
                    5a:ed:28:4c:49:8a:9e:41:fa:a2:05:5f:ee:53:95:
                    4c:a9:86:f7:42:a4:a3:32:ce:cf:18:ca:4c:9d:56:
                    94:96:39:71:24:0c:b9:29:6f:cd:e9:c5:05:98:98:
                    73:a0:d6:7a:cf:ea:63:a6:12:4a:f6:a6:2c:bd:a4:
                    0e:5d:12:56:c1:50:61:db:a1:eb:ba:b3:a1:93:6b:
                    a4:12:4a:0e:6f:c5:6a:ee:4d:bd:a6:32:9c:40:05:
                    ee:ec:59:af:5c:ce:36:ad:af:84:9e:53:f4:78:52:
                    0a:4e:ab:24:de:b7:a0:fc:e9:89:3b:e3:d9:22:9a:
                    c3:93:e4:ff:de:7d:01:c2:a6:c4:45:c8:39:ee:53:
                    c7:17:db:74:72:3b:80:15:ab:9e:7f:b7:48:15:14:
                    03:00:05:5f:2d:1b:3b:b3:3e:ea:30:55:db:0c:5e:
                    83:a2:6a:ba:02:16:92:04:1c:26:75:6e:d2:f0:a3:
                    30:4c:c6:9d:36:c6:49:dd:d8:21:80:cd:ba:0d:d9:
                    a6:be:ba:29:32:41:b9:11:35:e9:02:fd:ee:bf:01:
                    3f:ce:cc:b9:5c:ed:24:dc:c7:41:c0:e9:71:92:89:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:96:67:8B:56:89:46:39:31:8B:E4:F4:21:91:83:EF:C9:A0:99
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:35:14:56:08:d1:7c:28:7c:3a:3b:81:13:c1:d1:b0:ed:eb:
         07:e2:3e:ab:ea:0e:79:4a:77:e1:0f:ea:30:a6:8a:24:bf:fb:
         32:01:0e:53:46:eb:ca:5b:bd:60:11:69:74:3e:05:5c:38:15:
         ed:e1:5e:63:a3:c5:8d:cb:7c:4f:1c:76:16:17:e8:4f:89:db:
         a1:e3:81:21:86:cd:ba:23:ad:c8:7a:bf:ea:58:93:3a:c6:43:
         11:8d:4a:f7:a6:a1:5e:24:bd:35:d9:39:b7:c8:c7:ad:ef:ad:
         71:43:82:2a:0a:36:70:b7:ad:6d:c1:80:b7:00:35:45:db:96:
         ab:8d:eb:70:bc:e3:56:cf:04:88:02:93:b5:0f:17:24:5c:6f:
         06:30:f2:1e:1b:ec:b1:46:21:5e:2c:5d:7c:7d:38:67:f4:d5:
         ba:78:9b:ea:30:79:d3:e1:a7:e2:a8:14:65:39:85:21:69:c2:
         b3:8f:11:02:f1:6c:1c:8d:71:46:56:6a:6d:aa:cb:0e:ea:e7:
         26:10:d0:0e:15:3d:5c:13:3d:28:df:0a:cf:3d:e9:07:b9:c7:
         bb:81:8d:2c:30:7d:a9:10:8a:3f:11:4a:a7:81:ec:88:97:91:
         7a:1b:0d:d1:41:1c:d3:16:9d:16:2b:93:6d:1b:80:88:bf:fe:
         39:79:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 00:35:06 2023 by rpki-client on console-fra.rpki-client.org