Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e31362e302f32332d3233203d3e203135343139.roa
File:                     38392e3131362e31362e302f32332d3233203d3e203135343139.roa (raw, json)
Hash identifier:          pFf0gabEm+1oK61IUP2MOJOMv6EDBBACiSj5HKUwqRQ=
Subject key identifier:   3B:27:12:A6:7C:4A:4C:98:55:99:91:7E:33:E3:21:D9:91:E2:44:D5
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       4C09C7FC4F2C43F6E09E044537A0B7D214690131
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e31362e302f32332d3233203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:31:06 +0000
ROA not before:           Thu 03 Nov 2022 13:26:06 +0000
ROA not after:            Thu 02 Nov 2023 13:31:06 +0000
asID:                     15419
IP address blocks:        89.116.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:09:c7:fc:4f:2c:43:f6:e0:9e:04:45:37:a0:b7:d2:14:69:01:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:26:06 2022 GMT
            Not After : Nov  2 13:31:06 2023 GMT
        Subject: CN=3B2712A67C4A4C985599917E33E321D991E244D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d4:bc:46:3c:73:0a:05:37:80:8e:cf:26:83:
                    49:0d:b5:f5:68:38:f2:be:d1:42:4a:6c:2d:66:cb:
                    8f:19:85:d2:f8:c2:52:6b:5b:1b:45:c5:54:f7:33:
                    31:40:d4:92:c1:bc:65:79:1d:f1:a2:a2:65:d9:c6:
                    7c:e2:6b:ae:ba:7b:49:5c:2d:3d:62:eb:8e:e0:21:
                    9a:df:b5:8a:52:71:bb:d3:df:64:90:65:62:bf:6b:
                    6b:b2:31:95:f8:f4:4c:f5:e3:ca:ae:af:67:60:da:
                    c4:ef:cb:4f:2d:fa:1b:15:1a:04:fc:7f:50:2b:52:
                    06:cd:4d:6c:93:26:f7:cb:d2:16:fe:df:6a:78:8f:
                    73:89:71:85:05:7e:37:aa:77:c4:e9:6e:70:15:0b:
                    35:04:a8:a8:a5:f2:d9:8a:1e:92:2d:2b:4e:c6:56:
                    f9:01:07:e5:b1:57:77:29:6e:75:64:44:35:4a:bd:
                    22:89:11:8b:42:72:59:3d:87:5a:1f:46:57:07:7e:
                    4d:4b:64:75:d5:71:7c:49:bb:2b:9e:d7:ca:7e:ec:
                    81:da:7f:c1:a1:df:f8:5d:aa:ba:52:43:5a:c7:d5:
                    3b:35:77:c8:82:cc:bd:18:89:7f:b5:21:ac:25:40:
                    78:98:1b:73:b1:3c:47:1f:53:51:26:3c:67:72:4b:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:27:12:A6:7C:4A:4C:98:55:99:91:7E:33:E3:21:D9:91:E2:44:D5
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e31362e302f32332d3233203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:cd:be:16:0d:30:45:d7:ef:c3:1d:36:f5:46:15:e9:ef:
         ab:ef:83:89:f7:94:6f:63:0c:ab:ff:7f:0e:f5:25:96:29:a6:
         ab:73:9a:cb:31:e8:d2:f3:23:75:0c:ed:a3:ca:d8:5b:04:56:
         47:3f:0b:07:fe:9f:c9:da:e4:b2:28:05:ae:25:8c:7b:ae:b7:
         b7:9e:f8:18:66:b5:f1:78:6b:26:f4:74:2c:b4:ff:ab:a9:16:
         98:86:8b:b9:50:9d:97:41:4b:04:cd:65:f9:3c:77:ac:73:b0:
         42:db:b8:34:0a:8c:64:ef:af:10:e3:5a:ed:61:f8:51:23:ae:
         e5:1f:68:e3:b4:a5:b9:7f:06:08:2b:53:32:3d:47:66:6a:a6:
         87:a0:6d:8d:ff:9d:2a:a2:a0:99:79:c2:d3:a7:be:0a:0e:4c:
         79:e6:cb:57:9c:e8:92:bf:34:7b:08:cb:81:7d:dc:ce:60:9c:
         c3:b5:65:6c:f0:48:94:92:70:c4:3c:6a:b3:ec:e2:25:4a:5b:
         04:d5:8b:8a:01:4d:33:ce:fd:c5:91:a9:61:97:64:5c:61:64:
         30:77:23:f0:10:6e:2f:4f:5b:8c:b4:57:7b:14:92:9c:ce:77:
         02:3c:84:7e:30:c8:97:bf:9e:e9:3e:6d:c1:16:00:af:be:54:
         f2:fd:d6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:40 2023 by rpki-client on console-fra.rpki-client.org