Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/38362e33382e332e302f32342d3234203d3e203135343139.roa
File:                     38362e33382e332e302f32342d3234203d3e203135343139.roa (raw, json)
Hash identifier:          Xp6vU7MQdp6lCgzlk1MPAPrZWB+1z2JzXQrRbJcJxSw=
Subject key identifier:   03:47:91:51:6E:85:70:A7:9E:D4:B5:77:D1:EE:C4:79:33:B3:27:35
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       61C2B390986ECFACE1591FAD14663DECFE4CCEEE
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38362e33382e332e302f32342d3234203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:30:00 +0000
ROA not before:           Thu 03 Nov 2022 13:25:00 +0000
ROA not after:            Thu 02 Nov 2023 13:30:00 +0000
asID:                     15419
IP address blocks:        86.38.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c2:b3:90:98:6e:cf:ac:e1:59:1f:ad:14:66:3d:ec:fe:4c:ce:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:25:00 2022 GMT
            Not After : Nov  2 13:30:00 2023 GMT
        Subject: CN=034791516E8570A79ED4B577D1EEC47933B32735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:90:f0:70:11:b8:ae:b1:7b:62:27:f8:0c:
                    7d:3a:4d:39:18:b0:4b:c2:48:3b:e4:e5:2b:41:45:
                    f4:1c:06:27:6b:a5:6d:e9:f4:6c:d8:2c:61:6a:7f:
                    69:86:d7:52:6d:2e:b0:af:3f:43:0a:61:87:38:d5:
                    10:ab:78:ed:c7:e1:7e:5e:63:ab:0e:ef:24:0e:4e:
                    8a:1d:43:0b:19:f4:01:6f:b1:33:35:2a:f2:b9:ba:
                    45:e9:c6:c7:72:f8:9e:bf:52:fa:ec:81:33:3a:d1:
                    7a:b0:53:50:cb:2b:c3:a8:ad:2e:95:83:57:e8:d5:
                    31:b3:20:21:ee:04:7c:93:07:70:95:dd:0f:d1:f0:
                    32:6f:e1:2c:1e:4d:a2:8e:05:ba:53:ab:e4:60:ce:
                    2a:eb:fc:ab:67:5d:e0:14:09:0f:8f:b4:61:48:b7:
                    09:0f:1b:75:d9:98:9a:0f:80:7c:f8:d6:35:32:06:
                    53:73:2a:d9:fc:65:f5:3c:24:92:07:73:52:82:23:
                    67:84:c4:52:06:4e:4e:de:1c:cb:90:ec:58:55:aa:
                    8b:3e:59:91:48:78:31:79:41:ce:f1:1d:63:61:e0:
                    11:51:ba:f4:93:c7:09:63:58:35:69:80:83:89:b5:
                    96:88:69:7a:6d:10:b8:3e:02:b4:c2:50:5d:b3:7b:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:91:51:6E:85:70:A7:9E:D4:B5:77:D1:EE:C4:79:33:B3:27:35
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38362e33382e332e302f32342d3234203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:39:b7:ca:0d:a5:9a:32:85:63:e3:5c:ef:6a:44:19:ab:
         ae:c6:9d:88:95:d2:d1:01:33:d6:38:21:a2:d4:6c:1a:c3:80:
         ff:d5:22:08:3f:e4:51:00:5b:5f:b5:1b:be:f7:30:9c:85:81:
         99:d7:e2:e3:9e:00:89:b6:5c:19:f8:59:9d:c0:bd:a0:24:c7:
         52:c5:c8:57:2d:ba:2c:ae:ba:6b:d3:3e:d6:07:60:8a:1d:c0:
         cc:4b:a8:70:8b:94:8d:3c:3f:51:89:2a:f1:6f:57:dc:e9:a4:
         cc:6d:0a:98:c8:f6:9c:f4:b8:d4:9c:1a:ec:c6:50:ce:d2:56:
         08:fa:f7:11:1c:73:66:4e:d4:95:fd:6e:34:e4:b1:5f:65:82:
         1b:e0:e4:2b:05:0d:d6:cb:dd:1b:19:7c:06:b5:8f:c2:c7:bb:
         44:4b:e9:15:12:ed:31:39:ce:30:6c:fc:33:a4:8b:de:94:a8:
         7a:41:c8:0d:01:19:5d:f9:d9:b6:dc:41:c6:4b:c8:18:26:2f:
         a2:44:8f:3e:6c:b6:a6:d9:8d:e6:6c:31:21:f8:99:a6:3f:11:
         d1:40:b0:1e:d8:ab:e6:11:a1:09:0c:da:5f:9d:82:88:1e:39:
         3e:05:f4:8c:ae:e1:4e:ec:41:df:7f:1d:64:c7:49:65:19:1d:
         f2:ca:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:30 2023 by rpki-client on console-ams.rpki-client.org