Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa
File:                     3135352e3133332e32322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          qZ0B0S2Z9FphdRs73KitEoMkon97IXE0QfGFSK7fxq4=
Subject key identifier:   23:EA:CE:D0:86:FD:0F:57:09:BE:EA:5B:DE:A9:55:B2:BD:B1:F2:29
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       62C2049D615E108E06D98FCFFBD9F1248CA8A322
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:12 +0000
ROA not before:           Sat 22 Oct 2022 04:29:12 +0000
ROA not after:            Sat 21 Oct 2023 04:34:12 +0000
asID:                     51167
IP address blocks:        155.133.22.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c2:04:9d:61:5e:10:8e:06:d9:8f:cf:fb:d9:f1:24:8c:a8:a3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:12 2022 GMT
            Not After : Oct 21 04:34:12 2023 GMT
        Subject: CN=23EACED086FD0F5709BEEA5BDEA955B2BDB1F229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:17:b4:c4:03:fa:6e:0d:de:a0:77:db:2f:
                    18:89:c2:a6:ce:61:5c:dd:a0:c6:53:95:ca:c3:a1:
                    0b:34:e8:10:25:dd:a6:12:b6:35:0a:ed:cc:65:8c:
                    f0:57:dc:0f:96:ef:33:22:da:21:cf:c9:c9:be:6f:
                    83:45:17:45:d9:b2:d7:3a:eb:f8:b2:f1:c0:12:8e:
                    82:71:a8:b1:9e:da:ee:eb:48:7d:ee:ed:26:e1:99:
                    61:d5:20:d0:f4:68:1e:62:04:35:e4:2b:90:f0:c2:
                    16:d4:04:0a:60:54:34:b5:1d:93:79:a4:e9:1b:dc:
                    7e:5d:d2:ed:1e:ef:0d:03:79:fe:07:48:68:ac:21:
                    d8:dc:0b:ca:d3:59:17:60:ac:39:20:95:bf:24:a8:
                    bd:f1:d6:20:ce:48:dc:ba:ae:a5:08:1d:6d:b7:d5:
                    aa:6c:37:da:93:47:32:1f:24:16:78:3d:da:1f:e1:
                    4b:16:72:db:9c:bf:76:74:5f:90:ac:1a:03:e3:45:
                    ff:22:c9:cc:e0:58:93:ec:ee:2a:c3:88:2b:6e:a1:
                    37:13:02:19:09:44:57:40:b0:e0:5a:a0:05:eb:ac:
                    32:d3:4f:5c:d5:91:10:0f:fc:63:9c:46:82:9a:e4:
                    98:f9:84:15:32:cc:f8:92:fd:f5:2d:37:30:a3:87:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EA:CE:D0:86:FD:0F:57:09:BE:EA:5B:DE:A9:55:B2:BD:B1:F2:29
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:f6:10:e3:41:39:b4:18:a2:ef:9c:58:c4:f1:3d:6e:59:
         a5:58:35:df:4f:f6:fd:75:a3:4b:f5:1b:2c:97:c2:03:9e:82:
         62:28:19:b2:77:29:a6:b7:a9:d7:40:97:dc:4a:ee:aa:ac:6b:
         9b:ea:b5:81:48:d8:4a:79:d9:82:7b:8e:88:59:0d:61:6d:66:
         78:cc:77:48:fc:8b:f4:67:b6:69:c0:d7:22:57:35:5e:b8:da:
         65:f9:75:ac:15:c2:c5:f5:b6:09:72:2e:c4:09:9c:2c:c9:b8:
         d1:2a:2c:45:32:6a:a0:c1:cf:b6:2e:f3:84:48:08:b4:02:bc:
         55:b2:d0:7d:a3:d0:54:0c:90:ee:62:6f:16:e7:2b:58:c9:db:
         27:5a:e2:d5:fe:09:02:15:0e:68:c9:0c:b7:7b:63:1f:9d:91:
         a3:f8:80:d6:cd:20:aa:63:67:81:47:3b:92:a5:57:56:10:4f:
         dc:6f:93:6a:36:db:42:ac:16:23:41:ca:41:3e:0a:d5:2c:23:
         4a:8e:03:5b:17:36:12:52:a8:c8:79:ab:ab:74:ee:1e:c8:b0:
         4a:2f:9b:06:5e:f2:14:24:d2:e0:b8:73:e6:10:b5:fa:e8:09:
         6b:aa:b3:1d:92:c9:b3:dc:fa:c3:0a:ed:3c:79:4e:29:ac:4a:
         4c:ca:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net