Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
File:                     3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          Lm0tWRnNjjKCZMPBvTgqESbF5SvRtjythrI1YidRI2k=
Subject key identifier:   78:ED:F3:BC:AF:8F:F4:0A:37:8B:81:34:0E:F9:D1:57:8D:41:57:CC
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       03D019B5E58B5538C6EF4256B0206FABDE0D9459
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:28 +0000
ROA not before:           Sat 22 Oct 2022 04:29:28 +0000
ROA not after:            Sat 21 Oct 2023 04:34:28 +0000
asID:                     47583
IP address blocks:        109.106.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d0:19:b5:e5:8b:55:38:c6:ef:42:56:b0:20:6f:ab:de:0d:94:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:28 2022 GMT
            Not After : Oct 21 04:34:28 2023 GMT
        Subject: CN=78EDF3BCAF8FF40A378B81340EF9D1578D4157CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:07:df:1c:45:70:3a:8c:d4:9d:b0:96:bf:
                    7a:c0:b7:f4:24:25:f4:1e:d4:eb:cb:ab:c0:0e:74:
                    9a:53:11:1c:44:cf:9d:1b:d5:48:de:09:8a:00:ee:
                    ad:91:90:4b:ca:71:a0:fe:28:47:08:f1:55:fb:5d:
                    5e:2b:be:a4:8e:0e:99:77:b2:7a:4e:49:1b:bb:72:
                    ef:52:c6:ad:f3:86:00:fb:8b:70:27:2a:3e:7a:e0:
                    48:25:d2:95:61:24:7f:3a:23:85:51:79:58:9d:3a:
                    9d:40:63:0e:9a:27:9b:4a:6e:44:9b:d5:de:61:8c:
                    1a:89:ec:c1:4a:51:20:b2:ac:8c:28:97:27:b2:04:
                    65:93:b7:42:57:9b:81:de:de:8b:e1:cc:01:8c:04:
                    d1:61:d6:d7:3f:0c:34:43:60:b4:13:11:6e:01:b7:
                    c0:08:ef:0b:6a:2e:b8:65:3a:9b:61:60:67:66:cb:
                    f0:df:b8:83:50:b5:f4:7e:83:19:cc:6f:f1:42:bb:
                    64:d2:69:e4:a6:95:f2:55:69:90:e3:3e:c7:15:6b:
                    a9:0f:83:1d:5c:aa:d4:b8:3e:76:f0:3a:a4:34:b7:
                    58:a5:28:e5:c7:f0:e3:b4:ed:5d:0f:1a:f3:cc:13:
                    64:d6:b0:93:c0:bf:84:91:1d:b7:ed:4c:8c:61:e6:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:ED:F3:BC:AF:8F:F4:0A:37:8B:81:34:0E:F9:D1:57:8D:41:57:CC
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.106.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:92:23:13:78:38:4a:e4:b5:7c:ee:fb:be:e0:05:73:e2:e5:
         a7:30:f3:3b:e4:9d:9e:7b:4a:cb:3b:af:04:46:2c:90:f4:cb:
         b7:e6:59:c1:a5:5d:55:75:3c:36:6f:0d:68:84:65:98:fc:02:
         ee:d4:ea:41:5f:a2:07:92:95:0c:73:3b:6b:fd:3e:c5:ef:39:
         0c:ba:c1:21:81:1e:83:74:be:1a:70:0c:ef:71:19:1a:3d:04:
         20:c6:4a:3d:5b:88:e2:41:5e:e0:07:d9:22:6b:c0:1f:23:42:
         62:a1:81:b8:a2:9c:d9:4c:e2:ba:da:67:3a:9b:7f:60:c4:2d:
         77:da:74:3f:ff:8c:67:4f:5e:2f:e9:3b:61:fe:8d:bc:fc:b7:
         3f:b0:3d:60:f7:57:5a:e9:d4:46:7b:b0:85:cd:ac:5f:c4:de:
         35:e1:bb:25:5e:2a:8f:47:29:3e:18:6d:b8:36:0f:f7:c2:6f:
         1d:38:7c:1b:bd:67:92:aa:2f:47:31:2c:60:f4:17:51:cd:a8:
         6c:e3:d7:6f:d5:2d:fe:a7:62:2c:2c:65:c4:02:1a:36:16:95:
         54:2d:8f:4f:d3:c2:36:8b:e8:03:c7:79:b7:0a:39:59:5d:ef:
         31:96:3c:0c:05:03:fa:4c:56:48:3f:9d:07:66:bf:48:46:36:
         20:82:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net