Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa
File:                     3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (raw, json)
Hash identifier:          /T0tyJlWEdxOCTqfjOtuBTW3nBEn+2RELBzZtp+96cg=
Subject key identifier:   9D:5E:DF:5F:55:EF:9D:3E:F9:F0:16:DD:F2:DD:70:B5:BE:D1:F1:1C
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       0839C7FB074488DF0DDFC53DF382AE90DDA4AE74
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa
Signing time:             Thu 03 Nov 2022 13:28:58 +0000
ROA not before:           Thu 03 Nov 2022 13:23:58 +0000
ROA not after:            Thu 02 Nov 2023 13:28:58 +0000
asID:                     13194
IP address blocks:        185.149.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:c7:fb:07:44:88:df:0d:df:c5:3d:f3:82:ae:90:dd:a4:ae:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:23:58 2022 GMT
            Not After : Nov  2 13:28:58 2023 GMT
        Subject: CN=9D5EDF5F55EF9D3EF9F016DDF2DD70B5BED1F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:8e:83:30:09:01:68:da:e7:a7:fa:d9:2d:
                    da:f1:39:c3:81:82:47:2d:47:57:80:43:96:de:5a:
                    f3:dd:43:d2:6e:f7:c8:a1:84:64:2c:f6:f3:60:5a:
                    35:e3:16:86:9c:12:d8:55:22:21:a5:fd:7e:b6:d6:
                    79:8e:e0:8b:d7:92:4c:c7:f5:19:ea:55:61:16:16:
                    08:48:2d:1f:20:f5:5a:02:4d:33:73:01:62:cd:2e:
                    80:6b:c4:1c:bc:11:7e:68:65:52:cc:21:32:6f:fe:
                    f8:ae:5f:d1:66:e1:28:bb:e6:fd:1b:ea:ff:f1:b3:
                    f4:51:e0:b0:69:77:f0:de:06:3e:1e:bd:3c:02:2b:
                    8e:46:95:39:a4:1a:57:5d:38:70:d8:7d:bb:61:2f:
                    a5:89:e8:d1:82:1d:c5:24:8b:cb:c5:72:2b:19:8b:
                    7e:81:ca:2e:1b:8f:45:9b:7c:a7:b9:9a:6a:40:14:
                    fa:b8:5b:b4:c5:1e:4d:6f:46:d9:e1:9a:d2:7e:f5:
                    20:cb:74:13:cf:f8:85:9c:5b:9f:e8:a7:b6:38:80:
                    3f:a5:d3:a4:5b:92:1d:93:d0:9e:dd:b2:ce:8d:72:
                    96:af:87:56:8d:87:5f:63:10:eb:53:4e:49:1e:ce:
                    da:ca:0e:d1:a4:0b:84:32:a4:29:98:49:2e:84:b7:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5E:DF:5F:55:EF:9D:3E:F9:F0:16:DD:F2:DD:70:B5:BE:D1:F1:1C
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:f4:29:f8:7f:e6:83:dd:bb:8b:ba:13:61:e8:8f:4f:f2:25:
         49:f5:90:86:85:45:e0:6d:6a:d5:9f:e9:8b:00:29:e6:43:59:
         f8:09:b0:a2:47:2c:26:ca:8a:01:65:4f:11:e1:e2:ac:8b:c9:
         f9:07:1a:37:8a:9b:2d:a9:09:af:8f:91:73:88:8d:f2:a4:9b:
         44:c4:b1:ad:66:13:20:34:30:3c:fa:24:d9:25:96:fb:10:52:
         18:40:72:2c:1f:a1:8c:2e:47:26:8b:95:6b:8d:fb:cc:4e:f0:
         a2:72:40:ee:b9:28:82:85:e8:9d:a7:ad:5c:fd:f4:96:25:24:
         4a:c8:93:82:43:6c:a4:e7:24:34:a4:33:1a:e6:ee:9b:2c:76:
         c1:e6:1d:a6:79:1a:b5:27:40:2b:ba:2a:7e:30:73:94:21:66:
         82:6a:85:78:49:7c:52:5c:f0:32:df:03:68:83:93:5c:51:53:
         78:84:39:c7:29:43:cb:f3:65:1f:77:f6:d5:ae:f0:64:aa:82:
         44:06:8f:75:33:60:4d:fd:36:3d:8d:74:4a:47:17:55:01:2b:
         40:70:0c:6c:79:50:0c:80:f3:c2:8d:bb:b6:bf:84:77:44:3b:
         2a:df:e4:23:5f:70:6c:9f:0e:25:8e:e4:e7:04:20:dc:30:98:
         c6:37:6f:70
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUCDnH+wdEiN8N38U984KukN2krnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjZlMTI2ZjgwZmQ2ODYyMmJhNzMzZDEzZDhlNmFiZmFi
Y2VmYmM5NTAeFw0yMjExMDMxMzIzNThaFw0yMzExMDIxMzI4NThaMDMxMTAvBgNV
BAMTKDlENUVERjVGNTVFRjlEM0VGOUYwMTZEREYyREQ3MEI1QkVEMUYxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0iY6DMAkBaNrnp/rZLdrxOcOB
gkctR1eAQ5beWvPdQ9Ju98ihhGQs9vNgWjXjFoacEthVIiGl/X621nmO4IvXkkzH
9RnqVWEWFghILR8g9VoCTTNzAWLNLoBrxBy8EX5oZVLMITJv/viuX9Fm4Si75v0b
6v/xs/RR4LBpd/DeBj4evTwCK45GlTmkGlddOHDYfbthL6WJ6NGCHcUki8vFcisZ
i36Byi4bj0WbfKe5mmpAFPq4W7TFHk1vRtnhmtJ+9SDLdBPP+IWcW5/op7Y4gD+l
06Rbkh2T0J7dss6Ncpavh1aNh19jEOtTTkkeztrKDtGkC4QypCmYSS6Et9RVAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUnV7fX1XvnT758Bbd8t1wtb7R8RwwHwYDVR0j
BBgwFoAUtuEm+A/WhiK6cz0T2Oar+rzvvJUwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9yZXBvL2x0
LWxydGMtY2EvMy9CNkUxMjZGODBGRDY4NjIyQkE3MzNEMTNEOEU2QUJGQUJDRUZC
Qzk1LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvdHVFbS1BX1doaUs2Y3owVDJP
YXItcnp2dkpVLmNlcjCBhgYIKwYBBQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3lu
YzovL3Jwa2kudGVsZWNlbnRyYXMubHQvcmVwby9sdC1scnRjLWNhLzMvMzEzODM1
MmUzMTM0MzkyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM5
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC5lZkwDQYJKoZIhvcNAQELBQADggEBAKL0Kfh/5oPdu4u6
E2Hoj0/yJUn1kIaFReBtatWf6YsAKeZDWfgJsKJHLCbKigFlTxHh4qyLyfkHGjeK
my2pCa+PkXOIjfKkm0TEsa1mEyA0MDz6JNkllvsQUhhAciwfoYwuRyaLlWuN+8xO
8KJyQO65KIKF6J2nrVz99JYlJErIk4JDbKTnJDSkMxrm7pssdsHmHaZ5GrUnQCu6
Kn4wc5QhZoJqhXhJfFJc8DLfA2iDk1xRU3iEOccpQ8vzZR939tWu8GSqgkQGj3Uz
YE39Nj2NdEpHF1UBK0BwDGx5UAyA88KNu7a/hHdEOyrf5CNfcGyfDiWO5OcEINww
mMY3b3A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org