Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa
File:                     3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          7lUEDU8WX2q8ocJ8ERs/dWniSI58RMfWu6iDEwPKr3M=
Subject key identifier:   0E:9F:67:09:A1:F3:86:2C:CD:AC:E8:94:5A:8D:AE:61:EF:06:7B:70
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       2D54F755396B374CD6033B22C6DD4B02EE545208
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:51 +0000
ROA not before:           Sat 22 Oct 2022 04:28:51 +0000
ROA not after:            Sat 21 Oct 2023 04:33:51 +0000
asID:                     201341
IP address blocks:        185.162.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:f7:55:39:6b:37:4c:d6:03:3b:22:c6:dd:4b:02:ee:54:52:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Oct 22 04:28:51 2022 GMT
            Not After : Oct 21 04:33:51 2023 GMT
        Subject: CN=0E9F6709A1F3862CCDACE8945A8DAE61EF067B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:84:c6:99:28:e6:d5:94:52:74:88:8d:69:bb:
                    2e:42:a9:db:b8:6b:ef:b0:34:57:a5:0c:41:a2:ab:
                    22:e1:99:4c:7a:c3:9d:a2:24:80:18:34:7f:98:99:
                    ab:83:cb:e9:8f:70:3c:ff:88:63:c9:cf:f3:a6:85:
                    a5:41:3e:1b:57:45:95:7e:52:77:3d:a4:62:96:d0:
                    72:01:e8:47:8d:46:59:88:ce:3a:66:75:21:c8:02:
                    8c:2f:46:25:c0:21:09:73:c9:2b:0b:89:55:40:d7:
                    d8:f0:60:3b:fc:7e:52:64:ab:1d:bd:0e:10:96:f5:
                    71:4b:48:5a:8b:0c:f9:08:b7:98:48:3e:b1:35:f3:
                    c0:e7:0e:a4:b3:08:ea:f4:d5:8b:d4:6b:cf:df:4f:
                    61:8b:ae:b9:41:7f:db:bc:f0:03:c9:ff:e8:1f:5f:
                    05:64:72:8d:ce:a5:97:49:55:49:d1:be:01:f7:5c:
                    09:cb:4c:39:65:7a:00:cc:dc:23:bf:b8:ba:02:51:
                    c2:8d:f5:da:aa:78:16:d8:2d:ef:07:3e:22:80:02:
                    e4:bf:45:e3:cc:86:8e:37:54:d2:45:ce:4c:c4:63:
                    5e:6c:16:85:7e:8e:e1:c7:0b:23:51:0d:7d:ae:00:
                    1e:f2:89:7e:b2:e6:d5:52:3a:98:4f:41:9f:12:c5:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:67:09:A1:F3:86:2C:CD:AC:E8:94:5A:8D:AE:61:EF:06:7B:70
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c8:d7:5b:b0:ad:ef:8d:ef:ac:c2:03:ca:58:9e:8c:65:4f:
         10:03:5d:63:07:e1:6e:4d:ba:6b:f8:da:4e:dd:e2:73:13:6d:
         3d:dd:4f:59:84:94:fe:b5:8e:67:56:6a:55:46:3a:7b:15:49:
         a4:bd:e3:4f:13:72:f0:8e:df:3f:bd:89:4a:11:82:60:7d:4b:
         9c:1d:09:25:d9:f5:75:56:8d:63:34:eb:4e:90:f2:6d:5f:cb:
         34:66:b4:6f:58:51:04:95:58:30:a7:e1:94:32:b2:ad:3d:ca:
         19:fa:a9:46:3a:4f:20:d3:68:35:4d:74:0e:79:7f:e0:fa:3c:
         6d:ad:a7:d0:4c:a7:85:3c:05:80:84:8d:2b:d4:86:d4:39:61:
         05:4f:8b:38:0e:d5:12:ac:9c:a8:ca:60:5e:17:bc:de:a6:47:
         48:92:7a:f8:ef:13:c1:c9:e5:80:08:96:9e:31:d5:21:81:77:
         9a:e2:da:fc:69:d7:64:b5:18:d1:c5:96:7d:da:dc:dc:9f:ee:
         fd:72:7f:01:f5:d0:d3:bb:a2:ba:62:79:50:30:30:e1:0a:24:
         61:34:6e:9a:af:ea:fd:dc:42:41:a2:80:b7:ac:21:a7:5f:a2:
         de:fc:ec:9b:19:bf:98:de:38:fc:e0:07:b5:32:a2:3b:1a:c0:
         62:e4:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net