Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e32302e302f32322d3232203d3e203135343139.roa
File:                     38392e3131362e32302e302f32322d3232203d3e203135343139.roa (raw, json)
Hash identifier:          9oP8V8k6jtP+T8IjUGfKjDGYwynZ6xHB38bYQzIHUyU=
Subject key identifier:   68:12:75:E6:EB:01:17:32:48:B8:D6:5B:1E:6A:A2:ED:70:90:58:9C
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       13E63F24DB190DA8AE9B14B35CB3EDDD8D74977A
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e32302e302f32322d3232203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:31:22 +0000
ROA not before:           Thu 03 Nov 2022 13:26:22 +0000
ROA not after:            Thu 02 Nov 2023 13:31:22 +0000
asID:                     15419
IP address blocks:        89.116.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e6:3f:24:db:19:0d:a8:ae:9b:14:b3:5c:b3:ed:dd:8d:74:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:26:22 2022 GMT
            Not After : Nov  2 13:31:22 2023 GMT
        Subject: CN=681275E6EB01173248B8D65B1E6AA2ED7090589C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:ce:3c:e1:66:97:7c:20:3c:3a:b3:07:e2:
                    94:f8:4b:8c:bb:2e:63:34:fc:3c:b0:7c:57:eb:86:
                    00:63:73:e0:12:a9:67:ec:fd:f5:be:85:83:5d:0c:
                    00:cc:9e:f1:a8:8e:ab:03:92:c2:47:d2:41:41:e4:
                    ad:cb:9b:29:02:31:0e:3f:05:ea:73:9f:b8:fc:49:
                    c4:27:a7:b3:60:59:29:54:cc:5a:48:b8:6d:6b:db:
                    50:f5:5f:96:c6:12:d7:ee:a4:74:3d:95:f6:58:c3:
                    61:1b:64:28:34:6d:20:ba:b2:7e:94:16:f9:4d:46:
                    92:35:be:a8:e4:c2:67:c2:a5:09:20:df:07:bf:7c:
                    45:e7:fc:34:e7:8b:7f:9e:99:3e:97:55:e6:60:0b:
                    94:e8:4d:a8:25:d3:ea:16:8d:45:9d:d3:9c:a5:cb:
                    05:6f:47:85:62:6c:9a:c8:86:50:a9:59:3b:c7:91:
                    9c:9c:33:88:84:79:92:df:cd:8a:c7:d9:1a:4f:af:
                    51:fe:f6:8a:37:65:ff:74:03:8c:f7:a2:06:83:b6:
                    4b:f4:de:b3:97:0f:58:cd:03:c2:59:f1:c9:97:d7:
                    32:1f:4e:e4:01:ba:37:00:a8:0b:9d:a9:a7:62:b5:
                    03:5d:90:a8:3c:9a:90:29:00:dc:89:04:87:aa:b9:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:12:75:E6:EB:01:17:32:48:B8:D6:5B:1E:6A:A2:ED:70:90:58:9C
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e32302e302f32322d3232203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:e8:41:f0:e4:1c:5d:ce:a9:0a:c5:94:b5:f5:04:85:d6:
         06:76:c8:4e:ca:c2:d9:b7:64:c4:f4:17:42:a8:5b:29:77:d5:
         af:a5:c0:77:a2:ab:ee:7e:d6:ee:1c:3a:56:f9:3a:71:87:0b:
         6b:3d:83:41:a0:40:94:d4:bb:3d:b0:08:75:4a:90:c7:e8:2c:
         99:24:60:21:70:8f:49:31:15:e5:b2:8d:24:1e:55:d2:30:07:
         7a:0c:cb:29:27:02:fc:3e:58:13:42:03:d5:46:6f:22:ba:aa:
         89:cd:54:c6:75:c2:2f:07:bc:4b:52:a6:6d:72:69:e5:70:f7:
         ed:33:73:3a:d3:b5:59:8f:14:fa:22:c3:c5:5d:4e:d5:a1:d6:
         b7:be:19:06:86:1f:49:69:ec:35:fb:06:8a:ff:a5:c8:5a:8d:
         e3:da:c9:79:06:9b:0d:f7:51:af:27:0c:22:35:07:87:96:88:
         e4:ca:54:6b:45:cb:ed:1b:1d:ea:09:90:33:3f:fb:82:97:0d:
         9a:94:3e:1e:03:a0:9c:f1:22:01:54:56:e8:ca:e9:69:b2:33:
         72:26:19:ca:ef:48:28:08:86:70:3e:20:9f:db:c1:24:5c:ef:
         1c:91:ae:f9:4c:fc:17:a0:8a:79:44:40:00:e1:6f:03:ac:e4:
         ce:94:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:30 2023 by rpki-client on console-ams.rpki-client.org