Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/38362e33382e382e302f32312d3231203d3e203135343139.roa
File:                     38362e33382e382e302f32312d3231203d3e203135343139.roa (raw, json)
Hash identifier:          kOHq22uG2uHTwQiRZIzueEsrenZ1EsEk2nqjQ1lDoaI=
Subject key identifier:   F1:15:8C:25:B7:A8:49:48:D2:C4:1F:F4:CD:36:D7:2D:FA:0F:D1:CF
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       26E645901B93037C8935D607FF9ACB2A65A61E35
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38362e33382e382e302f32312d3231203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:30:10 +0000
ROA not before:           Thu 03 Nov 2022 13:25:10 +0000
ROA not after:            Thu 02 Nov 2023 13:30:10 +0000
asID:                     15419
IP address blocks:        86.38.8.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e6:45:90:1b:93:03:7c:89:35:d6:07:ff:9a:cb:2a:65:a6:1e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:25:10 2022 GMT
            Not After : Nov  2 13:30:10 2023 GMT
        Subject: CN=F1158C25B7A84948D2C41FF4CD36D72DFA0FD1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:fd:c0:b0:ee:27:6d:43:5f:85:6a:88:03:
                    a4:04:e2:f6:aa:ea:d3:d4:60:b3:6f:6d:f7:54:c3:
                    7e:d5:50:b5:11:3b:be:6b:63:18:9b:94:25:0d:b2:
                    b5:95:00:e2:12:a6:4d:dc:9e:c4:74:8c:88:22:5c:
                    90:3f:63:e6:b4:01:97:1d:59:56:07:3e:89:7d:5d:
                    c1:b0:58:55:8b:e7:fd:b9:34:9a:8b:7e:37:1c:73:
                    81:6f:29:05:dc:e4:46:a5:f4:59:c3:a4:7f:42:97:
                    d9:ad:d8:0b:a2:d3:99:27:b2:de:c3:90:67:7b:13:
                    0e:83:e6:48:5a:44:e2:18:f8:1a:40:20:25:9f:77:
                    cb:68:4d:c6:4a:2d:eb:14:11:6d:d1:d9:ec:5d:3d:
                    19:fb:05:d9:0d:f2:cc:4b:02:ac:8b:a0:4a:11:67:
                    1e:e5:bc:35:57:19:fa:64:2c:9c:ed:60:3c:ef:26:
                    a0:24:fb:d8:0b:d5:fa:6a:3b:cf:c1:b4:eb:a8:a7:
                    cc:98:f7:ca:db:dd:d5:53:cf:50:fd:9c:b5:01:11:
                    2e:64:91:29:5a:ed:ee:d7:7d:7a:48:5d:b3:dd:4a:
                    de:5d:8b:83:94:2a:ce:22:48:40:62:ce:5b:3d:41:
                    c9:38:5d:80:99:79:bd:bb:d6:ec:81:e9:a6:51:09:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:8C:25:B7:A8:49:48:D2:C4:1F:F4:CD:36:D7:2D:FA:0F:D1:CF
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38362e33382e382e302f32312d3231203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:84:77:5c:95:f6:9f:1d:26:47:f9:e8:49:cb:e6:78:60:04:
         28:43:a3:75:6f:21:3e:ef:6d:72:56:b3:32:5c:cc:8f:11:04:
         e5:b2:c2:f0:92:a0:3c:a3:07:48:c7:81:3b:b1:75:7f:62:2f:
         ed:bd:68:ec:80:38:b4:1f:a9:b6:bf:d3:c4:30:4d:9f:26:4f:
         0c:be:7c:9d:fb:92:88:f7:d0:b0:d0:5e:38:eb:64:f8:13:8c:
         13:39:2d:60:8b:b1:f1:fa:75:8a:ac:ce:9c:fc:d9:a7:2b:c4:
         cd:4d:fd:8f:e4:7b:16:b7:e8:9c:a9:ec:a7:99:d3:7a:b3:d2:
         77:78:7f:a0:0c:70:5c:d6:3f:93:6b:3e:00:5e:8c:05:29:a8:
         59:ba:49:48:14:22:75:08:f4:c1:e9:9e:ab:7b:ce:d1:c3:fa:
         25:47:12:c0:78:10:b2:92:5e:a0:ec:07:0e:2b:f4:a2:5f:96:
         a4:8c:2f:aa:13:ee:b7:56:49:88:79:f7:20:23:f5:0d:d1:ef:
         10:80:41:3f:1c:58:04:4c:4a:a5:0a:45:d2:8e:26:07:bd:9a:
         b5:26:c4:c2:31:fe:09:96:54:98:e0:bf:f5:fa:8a:98:63:19:
         19:3b:31:00:21:63:f6:e3:20:df:89:ba:8c:79:5e:ec:05:b5:
         da:7b:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:40 2023 by rpki-client on console-fra.rpki-client.org