Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          zu8b6fJdxy2iumjcVXG46M4xhmtCWIlSaJNG5aTpfLE=
Subject key identifier:   D6:73:D7:F3:19:14:50:FA:AF:00:F7:99:ED:8A:95:1B:B9:36:AD:E9
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       174AB32A07683333D951FF14F4FB9E13D8F37D69
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:25:00 +0000
ROA not before:           Wed 28 Dec 2022 09:20:00 +0000
ROA not after:            Wed 27 Dec 2023 09:25:00 +0000
asID:                     136787
IP address blocks:        185.169.254.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4a:b3:2a:07:68:33:33:d9:51:ff:14:f4:fb:9e:13:d8:f3:7d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Dec 28 09:20:00 2022 GMT
            Not After : Dec 27 09:25:00 2023 GMT
        Subject: CN=D673D7F3191450FAAF00F799ED8A951BB936ADE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:82:5d:57:97:8a:2f:08:58:10:ef:7e:e9:ad:
                    61:bb:c8:46:5d:cd:ed:5c:ac:45:ba:7e:99:b3:e8:
                    eb:57:07:1a:74:96:aa:e4:c3:0c:c7:89:a8:2f:a4:
                    e7:d3:a7:47:64:c0:19:36:d8:77:b9:f3:6e:db:aa:
                    57:62:61:d2:f2:4a:23:32:92:44:1d:0a:19:4d:a9:
                    8e:19:95:ec:75:b3:2e:7c:2e:d1:23:3e:ce:de:54:
                    59:8c:cf:dd:57:61:10:8f:0c:9d:a3:39:65:02:e6:
                    4a:72:a2:10:07:7e:28:bd:b6:b6:9c:d7:d4:fe:04:
                    d0:78:99:37:62:e3:bf:f6:c1:fa:8b:93:8e:f1:57:
                    1c:05:dc:e7:09:b2:bd:6a:d8:5e:15:c5:9c:af:c5:
                    2c:4d:d2:f9:76:63:46:2d:95:e1:8a:74:39:b9:5f:
                    fe:1e:f8:6a:6f:ab:a0:70:d7:21:5c:7c:90:3b:c4:
                    01:53:10:69:24:58:b3:e6:5e:c2:a2:68:59:12:2f:
                    a9:9e:3a:9a:87:0f:5b:8d:2c:40:07:28:6e:82:43:
                    49:8f:6d:4c:90:a2:fb:c2:19:d9:a4:a6:80:78:50:
                    05:f0:ea:33:e8:e7:43:3d:37:23:cd:a8:a9:13:67:
                    af:8b:8b:98:2d:8b:f9:1b:4f:93:c5:5a:fa:05:1f:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:73:D7:F3:19:14:50:FA:AF:00:F7:99:ED:8A:95:1B:B9:36:AD:E9
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:06:16:d8:3d:34:95:f0:8b:54:4c:c2:b0:40:8e:31:5e:96:
         f8:12:3f:4a:f2:b4:20:1c:9d:47:e1:fa:c3:0a:8e:15:b6:f9:
         37:c7:e6:8a:12:19:50:bf:fc:46:e2:ad:18:cd:f4:f2:30:2b:
         b0:28:73:8a:4d:99:90:4b:ab:58:6b:9b:fc:b1:1a:f2:26:18:
         4c:a4:20:16:c4:24:08:a1:b1:14:f9:8a:b9:a2:a2:f4:ed:f7:
         09:c0:a0:a4:d9:56:b9:79:bd:3d:f0:2a:3f:27:e0:da:76:3d:
         4f:15:f5:c4:a0:4e:e9:68:96:eb:d2:f2:ac:56:dc:3b:90:cd:
         84:cd:e2:68:bb:f0:12:96:14:3c:11:e9:d3:37:c6:29:69:51:
         0f:e9:41:97:fd:a0:d5:be:f0:8f:26:dd:39:33:8b:b8:24:7e:
         e2:03:fe:8c:5e:26:0c:60:3c:f0:a3:d3:c5:c8:40:d6:49:3e:
         3b:45:97:64:78:62:55:bb:3d:e0:5c:ea:32:ce:42:e3:ce:3f:
         a6:8a:7e:fc:68:be:0e:e6:f0:a7:a2:06:64:e0:7c:cc:b3:2f:
         18:a7:d6:14:52:79:68:ec:0a:56:c2:13:b2:dd:3d:70:1e:24:
         9d:65:5c:01:79:1a:fc:3a:5d:2b:18:cc:b7:55:74:53:fd:b1:
         8f:07:7e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net