Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa
File:                     3134352e31342e3135322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          L11wsos9Z2S51+mml1ltLiCT4MpTMKElRq/WHN2ipvw=
Subject key identifier:   84:66:F3:47:FF:5E:74:E2:10:B4:33:A1:A1:C9:D1:EB:E6:5E:36:D7
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       627C071519FABEF347043DB455E9538F3186A49E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:22 +0000
ROA not before:           Sat 22 Oct 2022 04:29:22 +0000
ROA not after:            Sat 21 Oct 2023 04:34:22 +0000
asID:                     47583
IP address blocks:        145.14.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7c:07:15:19:fa:be:f3:47:04:3d:b4:55:e9:53:8f:31:86:a4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:22 2022 GMT
            Not After : Oct 21 04:34:22 2023 GMT
        Subject: CN=8466F347FF5E74E210B433A1A1C9D1EBE65E36D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:45:f6:27:1b:cd:7b:38:4f:f4:9e:32:5a:
                    6e:7d:17:22:df:dd:49:80:c7:69:5d:97:1c:71:d1:
                    af:3d:b4:9e:e0:6e:75:b9:4b:47:70:b3:a0:74:a6:
                    a5:84:ee:79:fa:89:e4:b9:0d:0f:a4:45:a5:7d:63:
                    cc:48:5a:5e:b7:66:3e:95:cc:85:b3:e5:2e:94:47:
                    19:74:50:ae:d5:ac:2b:1d:e3:92:e5:0c:7b:56:c2:
                    f1:0c:d5:ec:45:14:df:04:90:ec:83:7a:ee:2c:05:
                    b6:34:d3:a6:01:84:75:e3:09:6a:43:e2:5b:7c:0f:
                    db:2e:7b:74:6b:2f:a3:3f:aa:9c:5f:ab:44:6e:e0:
                    55:8a:f8:e8:cb:92:46:15:ae:3c:60:c2:63:6a:1b:
                    d0:b9:dc:33:49:18:16:94:63:40:85:ff:56:63:f3:
                    9c:d6:aa:6b:b0:68:49:8e:2d:56:12:60:aa:ca:84:
                    00:88:a5:28:3e:36:2c:2e:bb:5b:eb:a2:38:01:f1:
                    87:eb:3a:b5:94:18:1a:fd:a2:91:cf:c2:1a:e2:bb:
                    f3:fa:ac:a1:f5:25:99:30:51:72:83:5b:79:e1:06:
                    4b:62:91:3c:d7:f2:3d:22:2f:6d:c0:ad:bf:ac:a0:
                    2e:f5:6c:8c:63:07:ff:e3:1a:a2:8b:81:03:e3:99:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:66:F3:47:FF:5E:74:E2:10:B4:33:A1:A1:C9:D1:EB:E6:5E:36:D7
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.14.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:18:e3:ef:c4:61:e3:06:98:f7:a9:ed:ac:eb:1b:9b:16:cd:
         95:d8:1e:7f:c2:d6:29:21:80:81:d8:37:6d:45:34:17:cc:81:
         49:d4:17:12:8a:73:9c:83:b2:da:13:6a:59:21:d1:ef:4c:18:
         d9:83:e1:ff:e2:07:21:1c:51:73:27:77:0d:35:e9:cc:e7:da:
         b8:43:1e:06:15:e6:2a:02:bb:27:8d:ef:61:60:a5:4e:7a:fe:
         cd:3c:ec:5f:01:ad:0d:95:f6:50:ed:b9:16:d8:0e:ae:91:51:
         f7:e7:ea:2f:55:16:60:fc:3b:99:6b:c3:d9:04:a6:00:7f:4a:
         b5:b6:86:2e:03:72:c9:f6:19:54:56:bd:2a:12:a2:1a:03:54:
         a5:0e:f4:3b:d4:6e:7a:f5:79:27:0a:0c:5d:b2:18:66:e0:f8:
         4b:92:10:b1:aa:3f:af:d2:1f:07:1f:de:82:95:66:6c:f7:0c:
         bb:c8:8f:e1:d3:25:67:51:05:1e:21:51:12:9d:82:c5:b4:c5:
         1e:b9:9d:52:75:ad:41:cf:7c:c2:9c:50:3c:14:6d:d1:33:56:
         8b:e8:0a:52:01:cf:8d:99:9e:f1:3c:4f:df:72:51:01:1e:cf:
         f0:b5:75:73:04:85:c1:ec:60:37:01:e7:f8:3a:df:b6:07:1a:
         5a:2f:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net