Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa
File:                     3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          YYMlksqEDtWYV6iqGIO3qo2abwGA0348Bcu/qX7v5cM=
Subject key identifier:   3F:AB:3E:EF:F3:94:E6:9B:70:92:F8:32:FB:B0:A6:0D:7C:F5:31:3D
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       56DA6848058F4FF237DE06DD922DD50F6CCBDDDF
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:51 +0000
ROA not before:           Sat 22 Oct 2022 04:28:51 +0000
ROA not after:            Sat 21 Oct 2023 04:33:51 +0000
asID:                     201341
IP address blocks:        185.163.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:da:68:48:05:8f:4f:f2:37:de:06:dd:92:2d:d5:0f:6c:cb:dd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Oct 22 04:28:51 2022 GMT
            Not After : Oct 21 04:33:51 2023 GMT
        Subject: CN=3FAB3EEFF394E69B7092F832FBB0A60D7CF5313D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:bf:66:2e:d9:4c:21:95:ae:52:6f:9b:b5:
                    f7:36:3f:11:18:be:3c:92:e1:3f:ff:b5:33:83:9d:
                    3f:6e:15:55:61:f4:31:8b:8a:07:7d:55:0f:a7:5d:
                    f0:f2:5b:c4:e5:e1:d0:51:f4:f5:5b:af:81:12:04:
                    b9:76:7e:e9:42:71:90:42:b7:6c:80:66:f7:4d:d5:
                    94:f4:48:44:83:39:48:6f:12:57:4b:f5:ed:0c:b4:
                    64:e8:70:21:a9:b7:c1:f3:cf:5d:64:df:55:78:b2:
                    d8:64:1e:41:cb:94:d0:cd:b0:30:c4:6e:ed:d0:1f:
                    54:9b:6f:0d:e8:67:e1:29:a4:b1:1f:42:f1:f8:5c:
                    59:36:5f:be:f6:2b:6a:d9:d9:93:c5:70:6f:41:ae:
                    69:33:2c:0f:bf:d0:44:bd:69:fe:32:ff:9c:dc:d4:
                    0f:d6:7b:2e:fa:5f:7a:41:62:eb:9f:c8:98:38:eb:
                    cc:02:97:11:b8:ba:fe:4a:ad:1e:34:9a:3b:49:9a:
                    0c:dc:a6:27:9f:5f:ef:e2:cf:c0:59:e5:ea:c9:29:
                    df:16:d3:a1:fa:78:6f:a6:20:13:2b:e9:c4:4c:14:
                    f1:d3:30:2d:9c:2e:90:14:a4:13:de:7f:b7:8d:7e:
                    ce:1b:bb:15:78:6e:f3:f0:62:2d:9e:9e:fd:75:20:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:3E:EF:F3:94:E6:9B:70:92:F8:32:FB:B0:A6:0D:7C:F5:31:3D
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:dc:a1:5c:8b:d8:e7:5b:72:c3:5b:b1:30:69:7f:ec:96:
         1a:06:5f:52:34:1d:e3:be:f9:af:ec:7e:29:88:30:fd:ad:78:
         dd:98:25:d6:c9:b1:6b:cc:3c:0c:e9:56:cc:12:37:75:50:9a:
         5e:89:df:4e:5b:8a:dd:07:ce:89:e2:9f:99:ff:eb:18:f5:d8:
         c1:f4:2e:b4:6d:73:7e:c6:28:60:5c:24:bb:ec:02:87:49:36:
         35:7e:ef:b3:3f:4a:7f:6f:c4:ea:65:80:04:f7:af:ba:11:89:
         5a:aa:99:f8:e4:4b:b7:be:85:01:7e:bd:a5:87:0c:a5:6c:85:
         a6:fa:96:fa:07:1c:55:17:72:2a:dd:e8:56:6c:a1:62:8e:fa:
         6c:0f:1f:51:94:b9:a6:62:79:ac:46:51:4d:6f:8c:62:26:bb:
         5a:55:1e:ed:3c:6d:2d:2e:4f:be:0f:5b:76:0f:48:67:b3:75:
         0e:31:e5:71:1c:c2:b5:ab:28:bd:99:58:a9:6c:b9:b7:52:8c:
         85:64:ab:8b:50:2e:72:c9:b5:d0:f5:a4:de:34:48:85:bf:8a:
         a6:00:db:a5:e0:22:e5:02:34:c4:13:99:d4:62:b8:49:89:67:
         59:46:d7:5f:93:46:38:65:cd:ff:37:af:60:f5:11:85:be:ef:
         fa:02:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net