Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135332e39322e3138382e302f32342d3234203d3e20323031333431.roa
File:                     3135332e39322e3138382e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          SjleXGXZPfXvjbmZsQaN7St6+YTCNVtx4owDcfjJHxk=
Subject key identifier:   CC:E3:76:DE:1F:3A:18:74:C7:44:00:F6:98:7F:A6:8D:C6:9D:88:2F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6B85088489D0167D3AADF8335E40E06AFE1B3587
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135332e39322e3138382e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:13 +0000
ROA not before:           Sat 22 Oct 2022 04:29:13 +0000
ROA not after:            Sat 21 Oct 2023 04:34:13 +0000
asID:                     201341
IP address blocks:        153.92.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:08:84:89:d0:16:7d:3a:ad:f8:33:5e:40:e0:6a:fe:1b:35:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:13 2022 GMT
            Not After : Oct 21 04:34:13 2023 GMT
        Subject: CN=CCE376DE1F3A1874C74400F6987FA68DC69D882F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:3e:5e:95:20:c5:d1:0e:78:85:95:f3:d9:
                    5f:86:fb:a4:ce:77:4f:e1:7f:61:71:4b:91:9b:b9:
                    ee:9b:85:29:6d:5b:9e:11:3d:95:aa:5b:dd:9d:5e:
                    cb:fe:c6:0c:4a:60:89:39:85:d4:a0:54:3f:d8:51:
                    2b:21:82:0c:56:2e:a4:25:c3:ca:14:82:5d:c8:7a:
                    fc:d1:70:7d:23:91:e8:43:97:e2:f3:77:b9:61:8f:
                    1c:3f:3f:0d:65:d0:b0:94:6a:f8:31:81:5d:db:3d:
                    df:90:3a:1f:bb:56:ff:bc:e4:8f:13:0b:66:b7:fa:
                    8c:6a:29:ff:d5:03:86:5b:0e:fd:14:20:83:f2:a0:
                    3b:e9:86:f3:b4:cc:a7:d7:30:e3:df:cf:4b:2a:49:
                    1a:08:37:8b:10:e2:bd:d9:b8:42:3a:b6:9e:91:dd:
                    c3:fc:51:58:12:35:ad:b3:b9:b5:9b:3b:6c:4b:64:
                    11:4c:c0:f8:a1:57:df:6b:ae:3b:0d:1e:f0:8a:03:
                    79:2d:31:5d:3d:7b:d1:1b:22:37:47:06:ec:d7:df:
                    cb:ed:3d:fe:4b:c1:91:07:df:4a:ff:04:e6:dd:13:
                    06:34:cb:24:64:16:38:86:48:4c:00:95:78:c2:ff:
                    41:99:ec:db:52:b0:cf:f0:26:47:bf:a7:55:b3:bc:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E3:76:DE:1F:3A:18:74:C7:44:00:F6:98:7F:A6:8D:C6:9D:88:2F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135332e39322e3138382e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.92.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:1b:5d:4d:ef:37:7b:4d:a8:10:0d:37:76:e1:49:98:7e:
         45:24:2d:b6:bd:65:84:97:cc:c6:db:62:9b:80:20:10:1b:25:
         dd:b9:f5:f9:80:88:8d:e7:aa:13:e7:27:06:f6:25:2a:ec:5f:
         af:f0:22:18:d1:9a:ea:b2:17:5a:9f:47:bd:5d:e6:1b:08:3c:
         ac:8c:40:70:ff:a9:ae:40:dd:e6:c0:0b:db:0b:b2:28:e6:56:
         bb:c1:a0:4e:db:01:06:e4:39:75:8e:80:98:6d:c4:ae:a9:de:
         13:68:d7:bb:3c:bb:b5:96:da:71:42:7d:86:cf:a4:a1:32:0f:
         9d:38:cf:25:13:6a:c2:70:45:00:aa:c8:82:3a:9b:d9:21:15:
         1b:af:41:80:49:1d:0f:6b:38:97:ea:d7:49:bf:70:02:56:d2:
         67:2f:9c:ae:5a:2e:0f:9f:16:7d:ce:9a:b9:72:a6:50:b2:c8:
         f8:c7:18:59:a6:ef:3f:3f:fd:ea:47:f5:1e:7e:88:a8:6c:16:
         0f:df:1a:fd:97:d5:98:fc:06:d9:95:2e:77:71:b6:a4:e3:ea:
         85:56:22:8d:5f:24:fa:13:4b:e9:f9:11:99:d0:dc:66:03:f8:
         ac:68:93:a9:20:12:57:f1:18:18:b6:63:09:be:fa:27:21:22:
         3b:d0:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net