Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa
File:                     3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier:          tP7O0E0b9aSrwLIMYgf4vox6NSki3HtdKDFzeTBTHAE=
Subject key identifier:   BD:5D:F7:FD:FC:CD:00:29:BE:00:D1:BB:2E:6A:B5:E8:3E:77:00:80
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       6D432478B3CE959CA7DA6CB20EC4B7BE4361C820
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa
Signing time:             Wed 28 Dec 2022 09:30:02 +0000
ROA not before:           Wed 28 Dec 2022 09:25:02 +0000
ROA not after:            Wed 27 Dec 2023 09:30:02 +0000
asID:                     62240
IP address blocks:        185.169.255.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:43:24:78:b3:ce:95:9c:a7:da:6c:b2:0e:c4:b7:be:43:61:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Dec 28 09:25:02 2022 GMT
            Not After : Dec 27 09:30:02 2023 GMT
        Subject: CN=BD5DF7FDFCCD0029BE00D1BB2E6AB5E83E770080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:11:d9:59:87:b2:34:8c:8d:92:c9:2a:33:74:
                    bc:fd:5d:8c:88:68:74:dc:5f:14:f3:44:0f:ea:84:
                    f5:d0:14:54:b9:a0:64:05:33:b2:4b:d7:95:7d:9e:
                    0f:a9:c2:9b:03:2b:0f:1f:50:54:ba:16:b2:b8:ad:
                    21:69:78:9f:61:f5:e1:29:dd:09:d4:a9:22:d7:03:
                    d3:65:1c:c2:d1:a2:3b:bf:54:65:43:b0:07:98:bc:
                    ba:02:aa:20:d9:c7:0f:d2:e0:71:f2:66:b3:c8:aa:
                    dd:83:60:6d:04:ab:8b:ca:89:49:76:a1:57:42:1b:
                    4f:64:ca:ad:1d:37:2e:db:bc:a0:7b:86:8e:31:df:
                    23:0f:75:b6:6f:b1:02:a0:39:a4:a0:42:24:ce:28:
                    9f:19:11:a8:59:b2:de:b0:f7:d1:d6:1f:35:0c:a0:
                    f2:98:e0:fc:28:6b:a9:53:9a:31:95:bc:60:a1:7c:
                    d6:7d:ce:a9:b9:89:1a:f7:c9:14:bf:9f:12:91:e4:
                    5a:f9:70:22:2f:b7:20:0d:76:5b:8b:c5:4c:60:f5:
                    2f:54:89:da:1c:d5:33:54:5a:9c:a9:2d:4a:86:15:
                    4c:75:d8:b5:6f:c8:e6:fe:fd:5e:61:07:75:57:58:
                    89:dd:cb:ff:ef:0f:61:9b:63:9d:6f:d2:bf:46:5e:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5D:F7:FD:FC:CD:00:29:BE:00:D1:BB:2E:6A:B5:E8:3E:77:00:80
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:a8:8d:4d:81:30:78:3a:91:1d:38:07:c4:0c:f6:35:10:
         11:dd:de:81:3e:32:0f:89:8b:a7:fc:c5:5f:07:1e:1b:7c:1f:
         0d:e0:b3:e4:5d:0c:4f:8c:3e:0a:d2:b1:0b:de:71:de:5a:c2:
         c8:50:97:28:30:01:ab:48:66:e1:6b:f8:f4:b3:ea:37:bb:13:
         8e:0b:c4:d5:d1:d4:8f:73:22:bb:6c:20:b1:49:7b:b1:5b:39:
         cf:86:f3:34:ad:66:5b:a3:7f:fa:9c:2e:36:f4:c6:e6:68:a0:
         29:88:57:2a:98:75:aa:3e:ab:20:e8:a4:98:1d:03:cb:2b:31:
         3c:ff:99:fc:57:1d:a0:30:8d:1e:5d:46:70:a5:85:40:70:b8:
         50:d1:f2:bd:8d:10:eb:87:a7:5b:0b:32:41:62:bf:81:68:a4:
         1f:ee:b4:fa:96:7c:a4:b6:67:30:1f:99:c7:7b:be:35:74:75:
         20:4c:6c:7b:3e:b4:a9:b6:e0:73:8e:40:69:5f:bf:2c:6a:1d:
         b6:43:d3:bc:27:6c:50:42:d8:f6:c1:20:a9:0f:a2:e6:ad:a8:
         fc:c1:3f:8b:97:e3:78:1d:82:0b:fc:34:b9:89:34:f3:c7:dc:
         4d:53:12:34:92:ab:59:8d:f8:c0:6d:7b:2a:66:3c:43:d1:37:
         67:38:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net