Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa
File:                     3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (raw, json)
Hash identifier:          BIY1Y77gcGJ0fIMxh4PFOYdVtkMKOVEmv/1rcDw1U2g=
Subject key identifier:   4B:F2:87:C6:BC:8E:7F:6E:24:D2:44:05:49:09:8E:01:6E:E4:59:45
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       4CE3824F062F961BE008AAB2AB74E46A0DA20221
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa
Signing time:             Thu 03 Nov 2022 13:32:38 +0000
ROA not before:           Thu 03 Nov 2022 13:27:38 +0000
ROA not after:            Thu 02 Nov 2023 13:32:38 +0000
asID:                     44771
IP address blocks:        185.149.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:82:4f:06:2f:96:1b:e0:08:aa:b2:ab:74:e4:6a:0d:a2:02:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:27:38 2022 GMT
            Not After : Nov  2 13:32:38 2023 GMT
        Subject: CN=4BF287C6BC8E7F6E24D2440549098E016EE45945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:be:3d:7a:4f:3e:90:5d:2a:e3:fe:34:28:
                    26:f2:25:3b:1e:6e:6a:d2:80:f6:a0:ce:ad:54:0f:
                    57:ab:24:c7:13:a7:0d:61:7a:5a:57:0e:16:de:f9:
                    ec:00:be:6c:2d:47:71:cc:19:67:be:d3:52:93:b1:
                    41:97:42:8a:8e:40:7b:ea:cf:54:9c:bb:77:a0:58:
                    77:9f:d1:79:a4:74:3e:bc:c1:17:b5:3f:64:a9:c7:
                    c9:44:cd:37:f9:8f:99:09:0b:68:95:a2:fb:94:dd:
                    e3:f8:96:45:60:80:10:df:fb:c5:0c:95:97:99:2a:
                    d4:ec:e2:53:9c:dc:b2:31:5e:05:c6:b4:f5:64:8f:
                    3f:d8:94:64:06:0a:42:e9:fc:4a:4d:2d:9d:30:6e:
                    8d:04:21:72:0b:d7:b9:59:8b:13:f0:ce:20:da:03:
                    af:42:9d:f2:cc:d8:50:90:c3:2d:9b:ca:6c:83:b2:
                    62:d7:d8:37:db:e8:d4:00:10:12:f9:f8:f1:17:f9:
                    e2:2b:8b:e1:c6:6f:a0:c4:62:e4:7c:a1:3d:01:66:
                    99:a7:3f:a1:39:44:9b:71:a8:6c:be:54:41:37:7f:
                    49:26:d5:97:ec:16:01:b4:f7:52:6d:a2:e1:50:be:
                    d5:13:6c:f2:09:27:7d:ac:95:9f:cc:8e:2b:ef:a7:
                    9e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F2:87:C6:BC:8E:7F:6E:24:D2:44:05:49:09:8E:01:6E:E4:59:45
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:94:d8:74:b8:6f:d0:25:fc:f2:7e:cf:d0:a2:a9:db:43:c5:
         ce:7d:88:27:52:6a:96:f1:ae:7c:d5:ed:50:9c:2e:97:f6:fb:
         4d:1c:7e:d3:6d:68:21:a9:85:b3:0b:b3:64:ec:3f:e4:2a:95:
         90:78:36:6b:2f:19:a2:af:1c:ea:8e:1f:8a:a5:a0:2d:af:f4:
         1d:b7:fc:b4:48:7b:84:08:df:3c:60:2f:ea:4c:08:2c:30:f1:
         a5:ba:77:8c:5e:63:df:1e:2f:23:44:a3:50:56:c9:a7:ec:54:
         f7:af:84:f3:a3:ca:3e:32:06:2d:3e:99:f4:b6:95:84:67:13:
         c3:5b:38:64:c3:a6:d6:1c:fe:26:c3:2a:59:f1:6d:95:03:41:
         7d:d7:17:ad:46:95:89:e8:f7:4d:d7:19:06:90:04:0b:45:fb:
         eb:d8:63:b2:86:d2:c8:d8:89:b9:5c:a5:a7:70:9c:79:69:80:
         76:a7:a2:a6:03:68:fc:dd:56:91:da:16:b4:1c:87:c3:fa:4c:
         4d:34:e3:cf:09:91:47:ed:6a:95:5c:2e:67:2f:0c:3b:f0:3f:
         b0:93:aa:46:2d:b4:4b:88:32:1a:14:d8:07:aa:ec:b8:d3:99:
         bf:2a:22:0b:a8:2d:be:5c:b4:f2:dd:65:28:20:02:dc:49:71:
         80:8e:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:40 2023 by rpki-client on console-fra.rpki-client.org