Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/3231372e392e3234312e302f32342d3234203d3e203135343139.roa
File:                     3231372e392e3234312e302f32342d3234203d3e203135343139.roa (raw, json)
Hash identifier:          3kLwPNnccut5A0b3nw6TIzjExzY9iSv88J1LAS9U2j8=
Subject key identifier:   20:A2:54:9C:1F:C1:D7:13:88:5E:23:56:F5:84:F7:4B:6E:0A:AE:D7
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       760811A9403370125558F8E77312AB1870408141
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3231372e392e3234312e302f32342d3234203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:31:59 +0000
ROA not before:           Thu 03 Nov 2022 13:26:59 +0000
ROA not after:            Thu 02 Nov 2023 13:31:59 +0000
asID:                     15419
IP address blocks:        217.9.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:08:11:a9:40:33:70:12:55:58:f8:e7:73:12:ab:18:70:40:81:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:26:59 2022 GMT
            Not After : Nov  2 13:31:59 2023 GMT
        Subject: CN=20A2549C1FC1D713885E2356F584F74B6E0AAED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:e9:a5:c6:f2:8c:d5:b1:0e:1b:6b:99:4d:
                    65:8c:a3:2c:24:31:a6:a3:fe:5a:fe:16:bc:64:90:
                    a2:8f:a0:11:33:9b:18:09:05:f7:2c:29:cf:2b:04:
                    46:91:3f:67:2b:c2:a0:0b:90:e8:87:7c:55:0d:18:
                    5a:37:c1:c3:7d:34:50:f6:9d:60:35:31:43:8a:6e:
                    dc:d6:4b:15:15:10:5c:cd:19:c8:2f:b4:08:d4:3b:
                    39:95:16:f6:f7:b2:29:ba:39:fc:0e:65:8c:1b:1a:
                    22:16:71:29:bb:ba:ab:c3:ce:fd:5f:82:d0:7f:19:
                    c7:f2:01:5c:56:ed:6c:63:94:58:81:5f:e3:84:35:
                    5c:c6:a2:a4:a9:87:0b:f4:3a:85:38:52:24:e6:8b:
                    d4:06:7a:d2:9b:57:28:16:7d:39:18:60:b5:d3:0e:
                    fa:15:42:59:91:d2:3c:8e:0d:dc:02:e3:e1:20:db:
                    eb:5b:32:f4:81:aa:40:60:af:0c:09:98:c2:74:c3:
                    e9:2a:2e:85:93:5a:fb:87:0e:c2:99:dd:35:84:48:
                    cf:77:fa:be:35:10:e8:46:57:82:4e:b7:d8:8b:4c:
                    cb:19:04:ae:0e:5b:97:83:7a:e1:23:64:22:63:56:
                    95:7b:4b:9c:b9:f4:b3:41:cb:7a:a9:a6:af:43:3e:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A2:54:9C:1F:C1:D7:13:88:5E:23:56:F5:84:F7:4B:6E:0A:AE:D7
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3231372e392e3234312e302f32342d3234203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.9.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:21:2c:30:fa:fe:d7:3d:e6:bd:6a:13:02:87:7c:b8:29:40:
         02:d6:a2:a7:76:16:58:b8:58:f1:11:a2:9a:88:52:ae:44:5f:
         8d:1b:85:eb:f1:50:83:ac:4a:cd:66:4a:41:31:83:17:9c:a4:
         3a:7c:66:b4:29:8c:d4:12:8f:2d:92:2b:3a:0d:7f:26:a3:03:
         38:56:ea:86:14:85:ff:a1:cb:fa:a6:d6:8e:a4:c1:8e:a1:13:
         82:04:b9:18:ee:58:ab:f2:54:96:38:f1:0a:9f:ea:73:5e:6e:
         c4:a2:99:6a:ae:d3:5b:c8:a4:28:5f:4c:8e:51:7d:80:93:1b:
         17:7c:0b:d6:88:ca:37:aa:ed:6f:00:b3:d2:95:dc:a5:33:5d:
         83:95:3a:c0:9e:4f:ba:9a:61:04:20:75:5a:e6:92:6f:10:b5:
         c2:48:b1:ff:cd:ed:05:f3:30:14:4d:8d:7e:8b:28:43:7a:19:
         cb:d2:54:de:2f:ed:f4:dc:ad:ac:cd:e0:21:86:0c:88:78:f2:
         32:42:21:e7:d6:99:1b:0a:60:42:32:d1:49:fc:c9:e8:21:59:
         a1:a5:f7:1f:9f:38:47:94:75:82:f8:8c:51:a9:b1:b5:25:35:
         a3:f4:0d:27:ba:97:ec:e7:46:2b:8b:19:c4:8c:a4:a4:14:56:
         b0:c2:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:30 2023 by rpki-client on console-ams.rpki-client.org