Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/107/352e3138332e382e302f32322d3234203d3e203437353833.roa
File:                     352e3138332e382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          b+9jzrY76rJpurlK0L0GXBQjHwFdaA0dqGqbNr91J1U=
Subject key identifier:   AB:82:97:1C:30:5F:33:18:14:FF:E7:79:0C:3A:42:16:47:98:11:CA
Certificate issuer:       /CN=efbb7362096ced21b789f5e6c20bddc6861dea53
Certificate serial:       1231E6166E70DA3FC48DD04EF6E084D0BDAF5D83
Authority key identifier: EF:BB:73:62:09:6C:ED:21:B7:89:F5:E6:C2:0B:DD:C6:86:1D:EA:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/77tzYgls7SG3ifXmwgvdxoYd6lM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/107/352e3138332e382e302f32322d3234203d3e203437353833.roa
Signing time:             Tue 01 Dec 2020 23:27:03 +0000
ROA not before:           Tue 01 Dec 2020 23:22:03 +0000
ROA not after:            Tue 30 Nov 2021 23:27:03 +0000
asID:                     47583
IP address blocks:        5.183.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:31:e6:16:6e:70:da:3f:c4:8d:d0:4e:f6:e0:84:d0:bd:af:5d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efbb7362096ced21b789f5e6c20bddc6861dea53
        Validity
            Not Before: Dec  1 23:22:03 2020 GMT
            Not After : Nov 30 23:27:03 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:86:70:a3:da:12:6c:4a:4b:c7:3c:07:cd:
                    d6:c0:32:3f:f0:c7:0f:da:19:5f:63:c2:58:c1:d6:
                    48:a5:dc:c8:70:1a:a1:d6:fe:74:07:c8:97:ec:e4:
                    62:bd:0f:75:33:4f:5e:ad:b3:ef:4d:8b:32:f4:dc:
                    94:b9:58:ff:e1:9d:a4:06:83:cc:d0:e9:9c:13:17:
                    c9:1d:04:c7:bc:ab:02:c5:52:44:d6:03:b1:96:da:
                    4f:ac:53:c9:27:9e:6e:54:fd:28:5f:db:07:88:a3:
                    89:8c:39:02:0f:08:23:93:2a:ce:44:06:01:ee:1b:
                    8b:0f:fd:72:e1:d8:97:ce:a9:2e:91:64:85:cb:55:
                    8f:4a:f1:fd:dc:b0:bd:4c:cd:42:96:ba:7a:ae:7e:
                    a4:49:32:2e:2a:04:40:99:3f:b3:2c:be:0a:49:f5:
                    e0:1b:0b:00:1c:b2:8a:e0:ef:7b:49:8b:5e:5e:f3:
                    5b:29:1e:db:64:a4:38:18:88:0b:18:e5:02:d4:ea:
                    d7:74:77:de:39:76:76:3f:05:64:44:f6:30:f7:2a:
                    a1:cb:72:4f:f0:97:b0:21:a3:fa:b2:7f:46:db:07:
                    15:d1:4f:16:32:27:91:77:9f:3c:dc:7a:96:01:26:
                    5b:42:b2:b5:7f:97:30:ef:49:2e:cc:ef:d3:ed:48:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:82:97:1C:30:5F:33:18:14:FF:E7:79:0C:3A:42:16:47:98:11:CA
            X509v3 Authority Key Identifier:
                keyid:EF:BB:73:62:09:6C:ED:21:B7:89:F5:E6:C2:0B:DD:C6:86:1D:EA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/107/EFBB7362096CED21B789F5E6C20BDDC6861DEA53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77tzYgls7SG3ifXmwgvdxoYd6lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/107/352e3138332e382e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:16:64:eb:38:ab:83:15:bf:59:cc:36:94:81:bc:d7:f0:6e:
         13:41:a4:97:72:2a:93:78:6e:5d:a5:06:78:1c:57:e1:86:9a:
         12:11:aa:0b:3b:b0:f0:eb:c3:20:56:1b:70:36:47:74:c7:ad:
         50:f2:d9:ec:8e:45:38:32:a7:4b:8e:8e:68:b5:6f:44:bb:7c:
         d8:62:d0:36:b4:e2:05:db:4f:f5:35:c1:e1:a4:b2:98:8c:03:
         50:77:fa:fa:4c:8d:82:29:25:43:64:8b:a7:d7:04:c8:b7:9f:
         48:b7:ee:91:1e:a3:1e:93:52:e6:17:0e:e0:a9:e6:e0:68:05:
         a7:f1:09:74:75:3f:90:dc:ba:f5:da:83:08:8a:4f:2d:72:8f:
         8c:2b:06:d2:1c:54:e5:fd:4f:e9:6b:af:12:33:e1:ac:68:3b:
         07:b8:d9:e2:2a:22:c4:eb:f2:2a:48:99:75:d8:90:64:93:67:
         d2:75:3a:15:5a:5d:3e:aa:d9:f8:af:58:1a:01:d0:b7:35:4e:
         5e:cc:80:f4:3b:56:b3:06:bd:23:69:ea:49:b8:b3:80:36:84:
         76:5f:90:38:14:8d:bb:0d:ea:d3:15:b3:49:6c:42:79:f7:3f:
         d2:fb:92:8b:ea:16:95:23:41:ec:07:0a:f0:69:31:df:63:8e:
         ac:77:7a:08
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUEjHmFm5w2j/EjdBO9uCE0L2vXYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWZiYjczNjIwOTZjZWQyMWI3ODlmNWU2YzIwYmRkYzY4
NjFkZWE1MzAeFw0yMDEyMDEyMzIyMDNaFw0yMTExMzAyMzI3MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTAzRDg2NzBBM0RBMTI2QzRB
NEJDNzNDMDdDREQ2QzAzMjNGRjBDNzBGREExOTVGNjNDMjU4QzFENjQ4QTVEQ0M4
NzAxQUExRDZGRTc0MDdDODk3RUNFNDYyQkQwRjc1MzM0RjVFQURCM0VGNEQ4QjMy
RjREQzk0Qjk1OEZGRTE5REE0MDY4M0NDRDBFOTlDMTMxN0M5MUQwNEM3QkNBQjAy
QzU1MjQ0RDYwM0IxOTZEQTRGQUM1M0M5Mjc5RTZFNTRGRDI4NUZEQjA3ODhBMzg5
OEMzOTAyMEYwODIzOTMyQUNFNDQwNjAxRUUxQjhCMEZGRDcyRTFEODk3Q0VBOTJF
OTE2NDg1Q0I1NThGNEFGMUZERENCMEJENENDRDQyOTZCQTdBQUU3RUE0NDkzMjJF
MkEwNDQwOTkzRkIzMkNCRTBBNDlGNUUwMUIwQjAwMUNCMjhBRTBFRjdCNDk4QjVF
NUVGMzVCMjkxRURCNjRBNDM4MTg4ODBCMThFNTAyRDRFQUQ3NzQ3N0RFMzk3Njc2
M0YwNTY0NDRGNjMwRjcyQUExQ0I3MjRGRjA5N0IwMjFBM0ZBQjI3RjQ2REIwNzE1
RDE0RjE2MzIyNzkxNzc5RjNDREM3QTk2MDEyNjVCNDJCMkI1N0Y5NzMwRUY0OTJF
Q0NFRkQzRUQ0OEMzODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4D2GcKPaEmxKS8c8B83WwDI/8McP2hlfY8JYwdZIpdzIcBqh1v50
B8iX7ORivQ91M09erbPvTYsy9NyUuVj/4Z2kBoPM0OmcExfJHQTHvKsCxVJE1gOx
ltpPrFPJJ55uVP0oX9sHiKOJjDkCDwgjkyrORAYB7huLD/1y4diXzqkukWSFy1WP
SvH93LC9TM1Clrp6rn6kSTIuKgRAmT+zLL4KSfXgGwsAHLKK4O97SYteXvNbKR7b
ZKQ4GIgLGOUC1OrXdHfeOXZ2PwVkRPYw9yqhy3JP8JewIaP6sn9G2wcV0U8WMieR
d5883HqWASZbQrK1f5cw70kuzO/T7UjDiQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FKuClxwwXzMYFP/neQw6QhZHmBHKMB8GA1UdIwQYMBaAFO+7c2IJbO0ht4n15sIL
3caGHepTMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMDcvRUZC
QjczNjIwOTZDRUQyMUI3ODlGNUU2QzIwQkREQzY4NjFERUE1My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxULzc3dHpZZ2xzN1NHM2lmWG13Z3ZkeG9ZZDZsTS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTA3LzM1MmUzMTM4MzMyZTM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW3
CDANBgkqhkiG9w0BAQsFAAOCAQEABxZk6zirgxW/Wcw2lIG81/BuE0Gkl3Iqk3hu
XaUGeBxX4YaaEhGqCzuw8OvDIFYbcDZHdMetUPLZ7I5FODKnS46OaLVvRLt82GLQ
NrTiBdtP9TXB4aSymIwDUHf6+kyNgiklQ2SLp9cEyLefSLfukR6jHpNS5hcO4Knm
4GgFp/EJdHU/kNy69dqDCIpPLXKPjCsG0hxU5f1P6WuvEjPhrGg7B7jZ4ioixOvy
KkiZddiQZJNn0nU6FVpdPqrZ+K9YGgHQtzVOXsyA9DtWswa9I2nqSbizgDaEdl+Q
OBSNuw3q0xWzSWxCefc/0vuSi+oWlSNB7AcK8Gkx32OOrHd6CA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net