Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa
File:                     3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa (raw, json)
Hash identifier:          qF51U2eQd0N0bE3VFG0ve44lOCmrdgwgkhWOch8ZlzM=
Subject key identifier:   29:2F:B2:67:9B:E4:6F:A5:4B:FF:2E:09:59:EF:C1:27:DE:85:C3:F8
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       54F9CA60EDD77880B2C20DE22F1D651B2F623D90
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa
Signing time:             Sat 22 Oct 2022 04:34:07 +0000
ROA not before:           Sat 22 Oct 2022 04:29:07 +0000
ROA not after:            Sat 21 Oct 2023 04:34:07 +0000
asID:                     200064
IP address blocks:        185.241.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f9:ca:60:ed:d7:78:80:b2:c2:0d:e2:2f:1d:65:1b:2f:62:3d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:07 2022 GMT
            Not After : Oct 21 04:34:07 2023 GMT
        Subject: CN=292FB2679BE46FA54BFF2E0959EFC127DE85C3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:43:0a:a2:c1:97:da:a2:79:98:eb:83:56:
                    0f:f6:0e:18:bd:cc:dc:1a:51:33:27:62:6e:16:1e:
                    79:eb:91:ee:06:1e:64:ed:90:b7:0a:4f:b5:58:fe:
                    2a:31:f8:58:3e:e3:e5:32:b5:0d:0c:d5:52:20:6e:
                    3b:32:86:eb:f0:aa:02:ae:7d:0a:d4:a0:cc:9d:a4:
                    f3:b8:cf:68:dc:45:a8:6e:2c:78:4a:bc:e1:63:54:
                    bf:9d:0c:2b:4a:80:59:62:eb:25:02:d0:4c:14:e0:
                    19:26:3d:86:d7:f5:d9:5b:a2:4e:76:40:ed:56:f7:
                    4f:8b:37:c8:d3:fb:3b:40:d3:b7:58:36:95:75:20:
                    53:51:9d:a8:71:c8:2b:7a:0a:35:89:7c:a8:78:24:
                    11:5a:d9:b2:29:74:dc:e1:23:e2:9e:b2:6f:16:97:
                    41:9f:3e:60:03:c4:72:5a:21:12:15:e1:bc:d5:f6:
                    70:aa:61:ef:d8:d5:f0:15:67:cd:be:ac:d1:18:0c:
                    53:bf:61:77:30:bb:f8:31:83:93:0d:26:59:f6:e4:
                    ea:5a:b1:ee:e0:7a:55:e7:98:a0:0d:f4:e2:5c:07:
                    f8:11:15:0a:6b:90:5a:b5:2e:2a:7b:03:01:f4:43:
                    6e:97:89:f1:42:12:c3:c8:db:d8:39:44:a9:a6:38:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2F:B2:67:9B:E4:6F:A5:4B:FF:2E:09:59:EF:C1:27:DE:85:C3:F8
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:23:95:78:63:a5:94:4b:32:28:2a:1c:0a:7e:06:96:80:57:
         e6:ff:c6:b6:10:8f:c6:f3:75:8c:82:b2:ef:97:d7:df:13:ea:
         66:e4:1f:bd:4f:28:72:0c:4a:d5:63:26:67:c2:fd:e3:bd:cc:
         f4:55:52:3b:c6:e9:fe:fc:79:1a:d6:31:11:0a:2b:61:74:fb:
         28:7d:1c:9b:1d:af:c6:1a:16:34:3e:66:55:46:43:88:cf:58:
         d5:5e:5d:16:01:57:04:84:95:3b:c6:6a:d8:de:90:a2:89:f1:
         4b:46:a2:00:e7:fe:3a:78:34:f9:7c:b0:02:a5:b2:f6:14:ab:
         cc:c7:d5:a0:52:ac:b4:16:41:15:17:fe:ce:1c:67:84:ad:7f:
         41:2d:06:37:a4:fa:d6:57:20:56:c1:5f:ad:d9:c2:ef:ea:57:
         ac:a3:da:49:46:98:31:09:bb:30:78:59:d3:99:9c:71:87:2e:
         10:f3:42:07:5d:2b:5c:b3:2d:ec:2b:c2:9b:06:02:f6:92:63:
         a6:46:2b:1c:11:81:b4:69:86:5d:14:0c:e4:28:44:53:5e:a3:
         72:9a:56:d5:0f:6d:8a:7a:62:11:93:5d:19:4c:6a:98:a7:07:
         45:64:2e:bd:0f:24:57:2e:b9:be:b7:ce:8e:42:a6:43:ea:3e:
         61:ae:b9:e1
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUVPnKYO3XeICywg3iLx1lGy9iPZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMjEwMjIwNDI5MDdaFw0yMzEwMjEwNDM0MDdaMDMxMTAvBgNV
BAMTKDI5MkZCMjY3OUJFNDZGQTU0QkZGMkUwOTU5RUZDMTI3REU4NUMzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIw0MKosGX2qJ5mOuDVg/2Dhi9
zNwaUTMnYm4WHnnrke4GHmTtkLcKT7VY/iox+Fg+4+UytQ0M1VIgbjsyhuvwqgKu
fQrUoMydpPO4z2jcRahuLHhKvOFjVL+dDCtKgFli6yUC0EwU4BkmPYbX9dlbok52
QO1W90+LN8jT+ztA07dYNpV1IFNRnahxyCt6CjWJfKh4JBFa2bIpdNzhI+Kesm8W
l0GfPmADxHJaIRIV4bzV9nCqYe/Y1fAVZ82+rNEYDFO/YXcwu/gxg5MNJln25Opa
se7gelXnmKAN9OJcB/gRFQprkFq1Lip7AwH0Q26XifFCEsPI29g5RKmmOE6zAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUKS+yZ5vkb6VL/y4JWe/BJ96Fw/gwHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzMvMzEzODM1MmUzMjM0MzEyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2Uy
MDMyMzAzMDMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnx7DANBgkqhkiG9w0BAQsFAAOCAQEA
ryOVeGOllEsyKCocCn4GloBX5v/GthCPxvN1jIKy75fX3xPqZuQfvU8ocgxK1WMm
Z8L9473M9FVSO8bp/vx5GtYxEQorYXT7KH0cmx2vxhoWND5mVUZDiM9Y1V5dFgFX
BISVO8Zq2N6QoonxS0aiAOf+Ong0+XywAqWy9hSrzMfVoFKstBZBFRf+zhxnhK1/
QS0GN6T61lcgVsFfrdnC7+pXrKPaSUaYMQm7MHhZ05mccYcuEPNCB10rXLMt7CvC
mwYC9pJjpkYrHBGBtGmGXRQM5ChEU16jcppW1Q9tinpiEZNdGUxqmKcHRWQuvQ8k
Vy65vrfOjkKmQ+o+Ya654Q==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net