Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e20313431303339.roa
File:                     3138352e3136392e302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          pYItiPAJ5YvCmpK7GjaED6FbuQyhZ5yVPyDWGBl8cw0=
Subject key identifier:   54:89:65:74:CE:56:8C:78:62:9D:D8:43:8B:D9:2A:7B:E5:42:2F:E9
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       5CD8FA9EB4815065F200F85C280E745193A76B38
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e20313431303339.roa
Signing time:             Sat 22 Oct 2022 04:33:52 +0000
ROA not before:           Sat 22 Oct 2022 04:28:52 +0000
ROA not after:            Sat 21 Oct 2023 04:33:52 +0000
asID:                     141039
IP address blocks:        185.169.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d8:fa:9e:b4:81:50:65:f2:00:f8:5c:28:0e:74:51:93:a7:6b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Oct 22 04:28:52 2022 GMT
            Not After : Oct 21 04:33:52 2023 GMT
        Subject: CN=54896574CE568C78629DD8438BD92A7BE5422FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:97:7e:db:96:ce:ad:7f:c4:52:ee:59:9c:
                    5e:aa:76:9c:4f:1e:20:bf:f8:d8:f3:7d:2f:97:84:
                    7b:96:ab:97:a4:d0:fe:9c:a6:c6:6e:bc:7e:93:96:
                    bb:7c:65:89:36:84:58:ab:96:e9:e4:9c:f6:ed:44:
                    18:9f:12:69:04:40:49:24:d7:de:0e:4f:4e:1e:eb:
                    f8:4e:86:44:4b:e2:b0:18:54:f8:e9:af:89:ec:6e:
                    33:c8:32:7f:43:98:1a:9c:34:94:3f:0f:cf:bc:be:
                    0a:dc:c5:c6:07:78:3a:2a:2b:52:05:06:fd:b3:ce:
                    df:62:d0:4c:23:77:b1:28:86:41:8f:59:30:28:74:
                    f2:69:c6:81:ec:12:45:9f:b6:05:aa:ba:63:4d:22:
                    c6:f7:ca:68:67:33:8a:87:49:e8:87:b9:9a:67:aa:
                    19:b7:3a:2c:5e:dd:6b:c4:6b:75:34:d6:1c:87:c7:
                    97:a7:2e:f0:21:ed:a2:9c:55:48:4a:4c:1a:7f:25:
                    39:96:9b:d7:50:13:b4:09:47:66:5b:22:23:1f:99:
                    a2:b9:fe:52:47:36:ac:ad:56:01:28:15:87:6c:e7:
                    65:69:fc:48:d2:af:55:33:1d:45:97:15:e2:2b:48:
                    4f:15:b9:10:f2:1e:c5:cc:97:3f:87:6e:5c:d6:3a:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:65:74:CE:56:8C:78:62:9D:D8:43:8B:D9:2A:7B:E5:42:2F:E9
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:80:9d:7b:ef:ad:e8:6c:56:2f:0d:ae:c9:ff:b8:36:99:91:
         02:26:0e:7f:ef:5e:dc:bc:b9:7f:45:b1:ad:0a:15:56:99:a9:
         eb:1d:fd:17:38:3b:57:99:94:2a:28:c8:2e:09:55:3e:8c:a0:
         e9:7c:f5:d2:b8:cf:59:ff:38:e0:df:6c:32:a5:8a:da:90:c8:
         cc:c2:23:08:91:d0:cb:e9:b3:d6:68:3a:f2:28:40:57:f1:c6:
         0c:e6:a2:51:e9:8b:ee:73:84:dd:fb:30:e7:e8:29:20:86:34:
         da:ca:87:33:ef:18:e2:20:6d:6e:75:4b:78:d4:b6:ea:b5:08:
         90:e1:20:d5:5e:29:88:da:c4:1f:2d:36:5d:2c:0c:da:c3:35:
         e0:ba:a5:dc:9d:8a:57:ef:75:30:cf:e8:40:4c:a1:7b:90:a4:
         f5:81:6e:77:0c:03:27:cd:1c:2c:0a:05:8d:38:c6:93:f5:42:
         f5:94:c8:fb:6e:17:03:e8:17:52:3c:e0:81:49:52:08:0d:84:
         fd:54:da:3b:17:d0:3e:40:8b:e8:88:17:0f:d3:21:58:21:7d:
         91:71:b6:3a:4c:82:6a:7a:41:39:bb:02:2e:a6:bc:f5:19:3d:
         79:31:42:89:47:4d:3c:2a:cc:90:3e:97:27:84:df:e0:bd:a8:
         e3:63:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net