Route Origin Authorization

$ rpki-client -vvf rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e382e302f32322d3232203d3e203135343139.roa
File:                     38392e3131362e382e302f32322d3232203d3e203135343139.roa (raw, json)
Hash identifier:          htkQm3YD7J2JcJmX90NFOmaNm95ZZVLw76xvVl3B5rc=
Subject key identifier:   E4:FD:33:85:D7:01:94:54:1E:78:57:84:2D:F4:2C:D6:1A:3D:AA:6B
Certificate issuer:       /CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
Certificate serial:       07F2FE77B762187B106EFC92D24ED8D907BDF8C1
Authority key identifier: B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
Subject info access:      rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e382e302f32322d3232203d3e203135343139.roa
Signing time:             Thu 03 Nov 2022 13:30:45 +0000
ROA not before:           Thu 03 Nov 2022 13:25:45 +0000
ROA not after:            Thu 02 Nov 2023 13:30:45 +0000
asID:                     15419
IP address blocks:        89.116.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f2:fe:77:b7:62:18:7b:10:6e:fc:92:d2:4e:d8:d9:07:bd:f8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e126f80fd68622ba733d13d8e6abfabcefbc95
        Validity
            Not Before: Nov  3 13:25:45 2022 GMT
            Not After : Nov  2 13:30:45 2023 GMT
        Subject: CN=E4FD3385D70194541E7857842DF42CD61A3DAA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:57:40:b9:0c:ba:5d:55:ba:fe:86:60:a6:
                    6e:da:3f:49:00:91:44:72:c5:41:4d:11:5b:a4:b6:
                    91:2f:f2:5f:35:fd:74:a1:36:98:3d:8f:d7:03:9b:
                    61:3f:f1:a5:b3:81:51:10:0d:07:36:80:42:43:4a:
                    5b:26:e2:6d:3f:cc:cc:2e:96:ea:b5:df:e1:26:f5:
                    04:36:af:5d:08:44:21:e5:67:de:a7:15:33:22:67:
                    22:8a:61:b4:9a:0c:8a:f7:61:a7:8c:17:ad:6d:9a:
                    cb:8f:9d:f6:9f:60:8d:e0:1f:77:cd:63:ee:f6:aa:
                    60:12:f8:c5:a4:be:98:9e:50:55:4b:e7:81:35:5d:
                    d8:4f:15:8d:cc:2e:e5:1e:94:3d:77:d0:10:60:82:
                    af:ce:45:49:23:25:79:91:52:22:37:c1:06:fa:8a:
                    c3:2b:30:b8:12:44:38:cc:3a:7f:16:fc:dd:86:9c:
                    e8:49:c4:56:b6:e8:28:1b:65:87:97:bc:13:58:c6:
                    6f:e3:9e:eb:01:62:de:d3:93:04:c2:99:c4:1a:22:
                    f2:68:f2:d0:b2:47:fc:f4:ec:13:47:d0:a2:df:77:
                    06:66:71:21:f1:6b:f9:1a:b8:0f:c7:bc:42:fb:65:
                    e4:c3:94:65:9d:8f:fc:05:0c:fe:d5:72:07:76:ed:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FD:33:85:D7:01:94:54:1E:78:57:84:2D:F4:2C:D6:1A:3D:AA:6B
            X509v3 Authority Key Identifier:
                keyid:B6:E1:26:F8:0F:D6:86:22:BA:73:3D:13:D8:E6:AB:FA:BC:EF:BC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/38392e3131362e382e302f32322d3232203d3e203135343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:95:93:10:61:7b:da:54:d5:d7:72:47:f3:22:f3:36:8d:
         c3:fe:2b:fb:70:60:8c:7a:3c:46:90:a1:8d:c2:ae:56:7c:59:
         49:86:ad:6b:0f:1f:f0:82:41:3c:c1:1f:2f:32:88:13:53:df:
         33:74:8b:20:45:cb:b4:50:19:1e:39:2f:0b:67:ef:3d:9d:2c:
         89:29:d2:63:64:c2:cd:19:67:7a:e6:04:d8:d0:40:67:4f:13:
         1f:4f:69:bd:01:20:ed:02:23:ac:f2:f4:b7:f6:c2:9f:97:84:
         ce:2e:43:60:85:4d:8b:1c:c5:58:e5:32:f7:c0:fe:6b:eb:62:
         78:87:e2:2b:a5:73:76:4c:18:2f:fd:5d:bb:b5:8c:11:9a:1a:
         cf:be:a7:1f:da:0c:d7:2d:c4:1f:5b:8e:93:6d:50:02:80:06:
         1a:fc:fc:d2:00:45:49:23:39:d0:da:c7:ef:35:d4:63:71:8c:
         09:f7:43:78:48:86:53:69:15:b4:90:ec:a6:35:8d:cd:19:ee:
         38:10:52:bd:f9:4c:a4:15:3c:69:a3:f2:d2:4a:64:fe:b1:b8:
         50:73:b2:fc:71:4e:83:97:f5:18:bf:ec:1a:b0:c8:4f:c7:2e:
         46:f0:ef:0b:12:9d:20:bc:d9:97:22:a0:46:f0:35:47:9a:dc:
         78:d9:c6:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----