Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/3231372e392e3234322e302f32342d3234203d3e203135343139.roa
File:                     3231372e392e3234322e302f32342d3234203d3e203135343139.roa (raw, json)
Hash identifier:          aet7KrWlnzwijot626q2cHMjTSvYa61eISaaCbgvWPY=
Subject key identifier:   74:A3:46:1F:E4:57:8B:2C:CA:F1:A2:4A:9B:80:BA:58:1A:30:49:95
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       227ABBE596C2143D88CB6CCC449E51165CFF7000
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3231372e392e3234322e302f32342d3234203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:32:04 +0000
ROA not before:           Thu 03 Nov 2022 13:27:04 +0000
ROA not after:            Thu 02 Nov 2023 13:32:04 +0000
asID:                     15419
IP address blocks:        217.9.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7a:bb:e5:96:c2:14:3d:88:cb:6c:cc:44:9e:51:16:5c:ff:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:27:04 2022 GMT
            Not After : Nov  2 13:32:04 2023 GMT
        Subject: CN=74A3461FE4578B2CCAF1A24A9B80BA581A304995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:d5:0c:00:62:28:43:8d:21:46:2e:f7:4b:
                    13:18:f1:9b:03:2e:50:6b:1d:38:ef:af:64:67:c4:
                    b9:f7:9a:60:48:19:d2:5f:61:37:16:a3:2d:d3:84:
                    84:64:8d:6d:77:94:59:41:f1:17:08:2d:ab:54:3d:
                    88:16:ae:13:06:fe:bc:b5:78:0a:b4:76:d8:ab:9f:
                    c1:d5:fe:e0:54:1f:66:85:97:fb:f9:40:3e:2b:ee:
                    ec:f0:12:bc:ec:19:8b:07:e4:e0:78:1b:e5:3f:c7:
                    d8:3d:85:77:cf:fa:67:6a:17:91:24:dc:11:c8:5d:
                    f2:e6:79:a0:fb:68:34:60:eb:f4:bc:e4:32:4f:60:
                    8f:3f:2c:2d:ce:28:66:03:0e:fc:1d:d5:03:a5:7e:
                    9b:b5:6c:58:5b:ec:dd:07:e8:d6:06:c7:47:46:35:
                    28:70:da:71:99:8a:75:f9:f6:ee:f8:62:40:f3:16:
                    ee:4a:d7:13:a9:0c:45:78:50:da:c9:ba:7d:23:82:
                    71:b5:db:af:ab:6e:8f:3c:0a:57:47:e0:c0:bf:bc:
                    50:66:c2:f6:43:00:44:e4:52:94:5a:46:2b:90:2e:
                    f5:41:cc:06:8c:42:c8:5d:d9:8b:15:0f:27:00:1e:
                    35:8a:47:ed:2d:1a:53:8b:b4:01:0a:60:e0:40:29:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:46:1F:E4:57:8B:2C:CA:F1:A2:4A:9B:80:BA:58:1A:30:49:95
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/3231372e392e3234322e302f32342d3234203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.9.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:14:db:ff:b5:b3:d5:de:5c:7e:0c:ba:e6:8d:34:de:16:2c:
         db:e5:94:66:55:cd:15:40:0d:a2:5b:8a:c6:f3:62:db:9f:ca:
         5d:88:53:4d:4f:7d:e3:a2:02:5f:18:3f:20:64:14:ef:08:f4:
         98:ad:72:59:e4:04:80:ca:97:72:99:fc:83:22:65:c9:cc:26:
         a6:8f:cb:bb:a6:d4:35:d2:bc:8b:34:da:8e:a7:a3:9f:0c:60:
         ba:48:a5:b9:26:51:6e:a7:8c:10:7a:85:8c:f9:eb:bf:9f:7b:
         f1:9d:2e:a7:4c:28:35:0c:05:b2:f7:73:1d:7f:ca:f8:71:45:
         0b:f6:f9:0e:fb:91:e7:7d:d4:76:35:da:e0:f1:3d:f7:fc:32:
         06:b1:36:24:0f:79:f8:6c:23:84:b9:c0:c3:07:e0:5c:03:c7:
         2e:d7:9a:43:55:b7:77:a7:1e:26:ef:41:56:1c:c4:5d:16:7d:
         12:32:63:b2:44:92:a8:82:e1:43:48:90:5f:fa:36:9b:f0:4c:
         e2:14:8f:0a:21:27:df:a3:06:1f:c5:d6:64:f3:e4:11:7f:ce:
         ea:e0:a8:6b:99:83:28:cd:aa:26:48:69:36:d6:fc:76:05:e5:
         48:9f:44:54:5d:8f:ff:42:06:98:7a:d6:71:61:98:59:79:ec:
         a0:f2:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:30 2023 by rpki-client on console-ams.rpki-client.org