Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3135332e39322e34302e302f32342d3234203d3e20313437303439.roa
File:                     3135332e39322e34302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          jHtLC5WY2wG9Zjhb73fV20oCuQavuZOvgH0Je2x3h9Y=
Subject key identifier:   F5:A3:70:4C:47:C4:07:72:10:E8:93:26:2C:55:CD:29:CF:21:78:0C
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       452512CF7CB77123D13FB208E3007FFFC30B1D38
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3135332e39322e34302e302f32342d3234203d3e20313437303439.roa
Signing time:             Fri 24 Feb 2023 07:41:32 +0000
ROA not before:           Fri 24 Feb 2023 07:36:32 +0000
ROA not after:            Fri 23 Feb 2024 07:41:32 +0000
asID:                     147049
IP address blocks:        153.92.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:25:12:cf:7c:b7:71:23:d1:3f:b2:08:e3:00:7f:ff:c3:0b:1d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Feb 24 07:36:32 2023 GMT
            Not After : Feb 23 07:41:32 2024 GMT
        Subject: CN=F5A3704C47C4077210E893262C55CD29CF21780C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:05:5e:28:9d:91:6e:b7:f9:69:c4:51:2d:
                    9d:e2:93:d7:7f:15:27:3e:f0:3e:d1:13:9e:ac:7c:
                    a8:fb:ed:2d:59:cd:d8:95:27:74:a4:ab:e2:c5:bd:
                    d0:0c:7a:31:d2:55:0a:16:89:d2:f2:03:e2:4e:cd:
                    2e:64:31:80:28:ab:7f:67:b9:dc:d5:5d:c7:77:f3:
                    f7:a2:38:f6:94:90:cd:8e:14:ec:28:44:da:e6:ce:
                    43:7e:5c:02:14:a3:4a:87:26:42:ea:16:45:84:ef:
                    19:8e:e2:31:95:58:e1:69:a4:1d:db:c1:45:5e:ed:
                    d4:fc:86:ec:6e:de:c9:1c:d1:de:c8:d8:2e:2f:b8:
                    5c:23:07:3f:0e:d9:69:2d:19:8a:39:56:3c:9e:cd:
                    24:08:ac:f6:f3:33:60:ac:2e:ab:86:63:3f:ae:89:
                    80:ab:50:86:e8:e8:d6:96:94:bf:6b:ba:de:1b:1b:
                    65:d9:32:ea:55:6d:e1:9d:0e:c5:80:8b:85:2b:1b:
                    84:c4:46:cf:bb:82:89:ca:13:cc:d4:34:1b:70:d9:
                    04:d8:6f:07:2f:3b:7b:c2:36:fd:21:1d:6b:10:1f:
                    73:ba:26:86:65:4c:cf:c7:b9:53:e4:d1:d7:e0:7c:
                    c3:95:62:13:9e:fa:c1:5a:2b:9a:90:62:09:50:0a:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A3:70:4C:47:C4:07:72:10:E8:93:26:2C:55:CD:29:CF:21:78:0C
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3135332e39322e34302e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.92.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:99:6e:a2:45:fb:59:65:14:04:23:69:39:50:d5:01:e0:
         46:c0:eb:8b:f2:45:c2:72:7a:98:a8:08:9d:9c:f2:74:c3:d0:
         91:b8:99:26:8d:6b:18:89:07:3a:6c:72:c0:9d:0c:1e:5c:9b:
         2f:7f:24:93:96:35:4d:11:6c:8f:78:d2:cd:eb:8a:73:7b:7e:
         5b:a6:a6:0a:95:3f:7a:75:15:f3:90:d0:03:dc:4f:b8:e3:27:
         98:ca:8f:01:43:d6:ec:f4:83:92:92:1f:27:6a:19:1a:d1:ad:
         6a:e0:ac:56:f3:76:9a:c2:d5:96:9f:2c:17:2b:24:c7:26:f2:
         08:3e:98:7d:bb:68:cd:47:9d:25:63:d5:17:4a:34:64:7c:dc:
         9d:88:dc:5e:ed:f0:9a:cf:db:47:4f:57:e4:bc:4d:97:8b:50:
         ee:42:b4:1a:8e:6c:f5:b1:92:52:7f:ed:20:b3:9e:00:6e:be:
         92:65:e6:f4:7c:d2:02:ba:73:98:b9:24:6e:22:38:fa:62:4d:
         48:f5:62:2e:de:00:ab:e9:57:c0:cc:4e:00:bf:d7:8b:7c:fa:
         da:5c:fc:76:e3:72:1e:a2:fd:ff:4c:de:73:11:ce:88:e9:a8:
         f3:79:88:9f:06:ea:10:09:5e:71:e7:4a:4b:ef:7c:19:81:3b:
         74:5e:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net