Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38342e302f32342d3234203d3e20323039313831.roa
File:                     37372e3234332e38342e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier:          MnHXpcVe4+F4UrBEIB6GwN4ZtRLZBrkcBztr9V1UZv0=
Subject key identifier:   43:65:AF:0A:3D:A1:F8:E5:DB:CD:FB:A2:09:5D:58:95:FB:F5:4F:F8
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       123DB3C99A9E4E4819F8EFB4929DA8AAB2C7D0DD
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38342e302f32342d3234203d3e20323039313831.roa
Signing time:             Tue 28 Jun 2022 04:41:18 +0000
ROA not before:           Tue 28 Jun 2022 04:36:18 +0000
ROA not after:            Tue 27 Jun 2023 04:41:18 +0000
asID:                     209181
IP address blocks:        77.243.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3d:b3:c9:9a:9e:4e:48:19:f8:ef:b4:92:9d:a8:aa:b2:c7:d0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:18 2022 GMT
            Not After : Jun 27 04:41:18 2023 GMT
        Subject: CN=4365AF0A3DA1F8E5DBCDFBA2095D5895FBF54FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:93:3a:ac:db:60:f7:43:ed:1e:9e:28:5a:
                    4a:f2:04:d1:31:8d:12:64:b5:72:6d:2b:1c:9c:87:
                    b8:78:4b:a0:20:86:4b:26:88:0e:34:61:0f:dd:e4:
                    28:93:ee:a5:66:4b:9b:bb:d4:a7:43:f2:f4:e4:a6:
                    2c:f2:e0:25:ca:8b:92:dc:d8:57:89:f0:ed:21:3b:
                    77:4f:a3:d5:b7:84:20:f0:38:b0:f8:bb:9a:38:d0:
                    5a:c8:f9:17:1f:8b:02:63:8e:9d:93:9f:8d:e3:eb:
                    2e:09:d4:d6:cb:2c:56:86:d6:32:c9:e8:22:27:72:
                    90:14:97:21:8d:13:84:3e:a8:ab:a3:0d:d2:10:a1:
                    54:8c:d3:04:00:45:aa:5d:d4:19:5d:31:55:9f:41:
                    16:44:22:f3:18:ba:2d:e8:ea:fe:3d:9b:22:52:ce:
                    32:39:59:91:70:ca:78:88:56:93:a8:6c:51:df:f7:
                    fe:78:a4:94:22:ef:4f:d3:9b:4c:91:58:49:c0:7f:
                    b9:02:22:fd:9c:4b:56:62:67:7d:42:42:94:75:12:
                    64:12:38:5d:86:81:70:21:29:29:32:18:16:66:02:
                    25:2c:2a:a9:5a:a3:53:97:12:ce:65:45:86:ec:05:
                    ef:62:4d:58:68:c4:63:06:a5:57:26:7c:45:8e:8e:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:65:AF:0A:3D:A1:F8:E5:DB:CD:FB:A2:09:5D:58:95:FB:F5:4F:F8
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38342e302f32342d3234203d3e20323039313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.243.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:e9:23:d3:4e:a6:7e:cd:aa:ed:bc:19:cd:75:0d:84:6a:
         b0:ff:4b:86:ef:ec:1e:71:7f:9c:e8:60:98:d7:7b:fe:b4:32:
         7c:fb:fa:c3:cf:ac:98:fb:2d:48:15:f2:14:82:88:86:ff:86:
         34:8f:cd:df:16:66:d6:7a:3e:71:3f:d6:91:42:57:13:4c:aa:
         ee:21:e4:bd:46:f7:81:d4:e7:d6:b4:e3:71:f0:fe:56:81:4b:
         b0:b2:ef:29:73:10:58:0d:a6:49:9f:b6:d3:34:f2:b4:ab:d7:
         2f:41:5a:c2:9d:43:6a:4c:ca:6d:c4:41:a8:f1:c8:dd:5e:e9:
         90:4f:8d:45:1a:ee:68:9f:63:b8:22:e3:45:69:ec:79:0d:ac:
         84:25:78:bb:6f:93:a4:d0:b9:d7:f4:e9:c4:77:a5:6c:7d:fd:
         c4:89:7c:eb:ba:aa:5c:49:9d:11:c7:16:34:ee:6a:0a:16:75:
         c6:64:b9:cc:8e:be:99:af:41:ed:ce:52:4a:10:21:87:b5:64:
         95:6d:d7:0b:70:ed:f6:3d:f9:16:26:e4:02:38:d5:95:be:10:
         6a:07:9e:d1:68:8a:40:50:92:ed:5d:a2:c6:c4:05:f8:77:f0:
         5b:d5:4a:2b:91:40:bd:b4:15:ee:e2:47:77:29:b7:74:d1:3b:
         1e:ce:30:5d
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUEj2zyZqeTkgZ+O+0kp2oqrLH0N0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjA2MjgwNDM2MThaFw0yMzA2MjcwNDQxMThaMDMxMTAvBgNV
BAMTKDQzNjVBRjBBM0RBMUY4RTVEQkNERkJBMjA5NUQ1ODk1RkJGNTRGRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDZM6rNtg90PtHp4oWkryBNEx
jRJktXJtKxych7h4S6AghksmiA40YQ/d5CiT7qVmS5u71KdD8vTkpizy4CXKi5Lc
2FeJ8O0hO3dPo9W3hCDwOLD4u5o40FrI+RcfiwJjjp2Tn43j6y4J1NbLLFaG1jLJ
6CIncpAUlyGNE4Q+qKujDdIQoVSM0wQARapd1BldMVWfQRZEIvMYui3o6v49myJS
zjI5WZFwyniIVpOobFHf9/54pJQi70/Tm0yRWEnAf7kCIv2cS1ZiZ31CQpR1EmQS
OF2GgXAhKSkyGBZmAiUsKqlao1OXEs5lRYbsBe9iTVhoxGMGpVcmfEWOjrxRAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUQ2WvCj2h+OXbzfuiCV1Ylfv1T/gwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNzM3MmUzMjM0MzMyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMw
MzkzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABN81QwDQYJKoZIhvcNAQELBQADggEBAILr6SPT
TqZ+zartvBnNdQ2EarD/S4bv7B5xf5zoYJjXe/60Mnz7+sPPrJj7LUgV8hSCiIb/
hjSPzd8WZtZ6PnE/1pFCVxNMqu4h5L1G94HU59a043Hw/laBS7Cy7ylzEFgNpkmf
ttM08rSr1y9BWsKdQ2pMym3EQajxyN1e6ZBPjUUa7mifY7gi40Vp7HkNrIQleLtv
k6TQudf06cR3pWx9/cSJfOu6qlxJnRHHFjTuagoWdcZkucyOvpmvQe3OUkoQIYe1
ZJVt1wtw7fY9+RYm5AI41ZW+EGoHntFoikBQku1dosbEBfh38FvVSiuRQL20Fe7i
R3cpt3TROx7OMF0=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net