Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e34322e302f32332d3233203d3e203135343139.roa
File:                     38392e3131362e34322e302f32332d3233203d3e203135343139.roa (raw, json)
Hash identifier:          7S+a37+/RjSin1ijLMTX4xTo3AVQZvZJsZOQOP/iEGE=
Subject key identifier:   0F:63:07:D6:0A:9A:BA:60:91:42:FC:6D:2C:A6:8F:55:6C:0F:60:35
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       1EAABE7F822024A7DE68F8285559A20FA74726AC
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e34322e302f32332d3233203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:31:35 +0000
ROA not before:           Thu 03 Nov 2022 13:26:35 +0000
ROA not after:            Thu 02 Nov 2023 13:31:35 +0000
asID:                     15419
IP address blocks:        89.116.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:aa:be:7f:82:20:24:a7:de:68:f8:28:55:59:a2:0f:a7:47:26:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:26:35 2022 GMT
            Not After : Nov  2 13:31:35 2023 GMT
        Subject: CN=0F6307D60A9ABA609142FC6D2CA68F556C0F6035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:59:5c:fe:14:da:29:4f:7d:b9:f3:0a:0c:
                    99:aa:8b:7f:84:53:9f:25:7c:0a:11:75:c0:a7:8b:
                    8b:17:eb:72:3a:27:f2:85:24:1d:0f:8f:04:25:67:
                    61:b6:af:88:e6:cc:25:14:e4:ca:0b:30:09:a5:9a:
                    60:ed:08:d2:d1:c6:25:32:2e:df:b7:9b:80:eb:1f:
                    59:81:d9:a7:4f:ce:59:26:3a:2a:fd:06:a1:2d:db:
                    c7:5d:37:24:39:54:6c:3e:3c:38:32:8e:13:9c:cb:
                    7f:1c:a7:e2:db:3e:08:d1:68:14:90:f3:a5:b1:7b:
                    43:fc:42:2c:5f:79:3f:19:af:7a:d9:ee:aa:70:94:
                    23:a8:c9:4f:ed:4f:87:32:a2:4a:e2:5c:f5:13:92:
                    60:ee:a7:09:ef:e5:87:dc:d1:96:cd:de:09:f3:13:
                    0d:59:84:50:58:b7:d4:d1:f7:d0:f0:a7:78:c9:98:
                    26:1d:28:89:dd:3b:7b:9e:4a:6a:98:cf:e8:11:3c:
                    9f:cb:fd:13:0b:53:0a:55:f5:0c:b1:f7:f5:3f:d7:
                    9c:f3:35:9d:4b:42:3f:ad:01:20:bd:12:38:d9:89:
                    8b:00:b8:5c:c6:07:b5:4a:ce:ff:9b:25:82:29:d4:
                    ee:de:76:5c:c9:a8:c0:1d:7f:4d:18:05:44:3e:1e:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:07:D6:0A:9A:BA:60:91:42:FC:6D:2C:A6:8F:55:6C:0F:60:35
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e34322e302f32332d3233203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:4a:6e:02:c5:cb:39:8d:87:30:82:6d:ac:eb:60:41:c3:
         f6:b9:43:21:bb:04:d3:b1:12:ee:15:b4:b1:33:b7:37:4a:5a:
         dd:50:9c:f4:2d:53:5a:86:bb:16:87:74:e5:e0:57:21:55:f4:
         ab:0d:11:3d:69:dd:65:ea:bf:00:f6:9d:f8:d9:f4:75:7b:a6:
         ca:a7:7c:b4:05:15:21:d2:6b:86:74:1c:0a:2a:8b:d1:fc:1d:
         f9:fd:20:3e:e6:fd:1c:ff:36:df:cb:85:55:2f:a6:a9:b4:ea:
         db:3b:4e:7a:17:b6:16:1c:f6:9c:8d:6e:8c:11:fb:76:35:e8:
         42:5e:3f:c7:5a:3b:cd:8c:08:cc:3d:15:75:ab:ec:ad:b5:ad:
         f2:5b:6a:49:cd:9d:86:f6:01:80:b5:32:45:6c:d5:7d:60:ac:
         0d:46:86:ea:f9:92:35:29:9e:8c:88:49:47:4f:2d:c2:45:f4:
         1e:ad:43:01:2e:38:33:82:63:2d:24:6b:0a:3f:9f:c8:0e:fc:
         e4:0c:d1:ff:5d:df:b0:f2:f9:85:27:40:0e:1c:a0:49:5c:e7:
         75:30:df:b8:ea:f8:d4:a5:c1:68:e6:16:ed:e3:4f:67:28:37:
         96:27:5c:ed:d0:2c:e9:2e:59:dc:1a:ae:fa:c7:d5:b0:d1:60:
         94:5f:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----