Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3332203d3e20313431393935.roa
File:                     3138352e3131312e3135362e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier:          DrcZgNzpVpLTVk22joKhx4ENM1BM8STZdgSqO4IklqE=
Subject key identifier:   21:C5:7D:5C:C1:78:A1:9B:83:EB:10:D3:72:0D:28:BA:B0:D4:8E:D7
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       26BD76B606334CEC6A566B8F57DB4B85AC3F0843
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3332203d3e20313431393935.roa
Signing time:             Sat 22 Oct 2022 04:34:36 +0000
ROA not before:           Sat 22 Oct 2022 04:29:36 +0000
ROA not after:            Sat 21 Oct 2023 04:34:36 +0000
asID:                     141995
IP address blocks:        185.111.156.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bd:76:b6:06:33:4c:ec:6a:56:6b:8f:57:db:4b:85:ac:3f:08:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:36 2022 GMT
            Not After : Oct 21 04:34:36 2023 GMT
        Subject: CN=21C57D5CC178A19B83EB10D3720D28BAB0D48ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:e3:a8:eb:46:af:48:78:5b:27:eb:ba:1c:
                    d4:78:7d:64:b7:6c:4f:ba:09:c0:44:0c:a8:ca:02:
                    56:6c:7c:0c:9a:e7:00:b1:6d:a0:06:18:52:c9:9d:
                    52:7a:1e:41:4a:7e:b1:aa:ec:1f:ff:1c:3f:01:a1:
                    d0:d9:97:c3:2c:cb:60:a4:5e:32:1a:8c:c6:94:c8:
                    92:7c:ca:17:6f:44:6b:25:63:29:fc:b8:6a:94:07:
                    23:45:77:a5:ba:79:ba:ce:cf:c8:49:6c:d6:05:41:
                    16:50:c2:ee:31:c2:5e:74:39:b0:03:8a:bb:16:42:
                    eb:9f:f5:1b:24:93:79:7c:3b:a2:0b:a1:c3:67:12:
                    1b:eb:76:4b:fc:ab:b9:c2:48:a6:97:b4:f1:6c:29:
                    6a:9c:8b:dd:77:0c:a0:64:56:ec:5f:69:cc:ed:5b:
                    62:a0:f2:79:a0:b7:49:c4:47:b4:dc:81:8c:30:08:
                    d4:44:85:d0:39:6f:a2:03:d6:ad:b2:a2:d3:6c:2f:
                    27:2c:5b:69:07:e0:d5:d7:ff:db:98:98:a6:e8:eb:
                    2d:40:04:d8:93:ad:e8:9d:44:bb:aa:88:7e:be:cb:
                    f3:e5:54:f6:86:0e:fc:29:3a:96:1e:19:65:be:da:
                    f7:13:0d:8f:ca:e8:a6:d7:92:48:d8:46:63:fb:ab:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:7D:5C:C1:78:A1:9B:83:EB:10:D3:72:0D:28:BA:B0:D4:8E:D7
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3332203d3e20313431393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:d7:90:6d:20:01:0e:71:85:f5:a2:6b:99:56:97:00:a1:
         c1:25:49:5c:df:10:64:b7:55:24:ee:a6:ba:c8:8a:c8:22:42:
         7b:b9:e2:3c:4d:70:0e:47:a8:40:6a:60:71:e8:e4:1e:29:ac:
         9b:a8:86:6d:b1:c3:28:f3:8f:d9:b4:15:f8:70:8f:18:f2:5f:
         d2:7b:f6:f4:1c:d3:de:9f:8e:e6:c4:5f:f7:89:4f:cf:dd:c1:
         ce:f0:78:97:46:a3:c1:f8:40:eb:45:1f:3b:17:02:02:88:d4:
         5e:4a:14:b9:56:63:10:a1:17:97:17:f3:63:27:b0:6c:8e:8b:
         fa:2f:5a:59:b4:97:2e:72:db:7d:91:fd:e7:1d:82:4e:f5:b6:
         7e:fe:66:10:4b:c7:6e:a9:23:29:99:2c:b5:0e:1e:05:cd:5d:
         69:11:7c:81:9c:02:72:b6:b5:54:2d:dd:60:17:36:7d:df:79:
         03:ea:3b:b0:d5:f8:72:da:be:a2:81:50:f6:6e:31:31:79:96:
         62:54:12:e8:b2:6d:3f:72:d9:ba:ef:e3:c5:d8:2b:21:6a:c9:
         0f:8a:f3:48:01:85:f9:2f:d7:d6:32:16:e7:00:00:28:31:97:
         03:7b:0a:59:26:38:cc:23:89:00:82:59:a2:cb:33:82:5a:c4:
         a6:f5:1a:3d
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUJr12tgYzTOxqVmuPV9tLhaw/CEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzZaFw0yMzEwMjEwNDM0MzZaMDMxMTAvBgNV
BAMTKDIxQzU3RDVDQzE3OEExOUI4M0VCMTBEMzcyMEQyOEJBQjBENDhFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4aOOo60avSHhbJ+u6HNR4fWS3
bE+6CcBEDKjKAlZsfAya5wCxbaAGGFLJnVJ6HkFKfrGq7B//HD8BodDZl8Msy2Ck
XjIajMaUyJJ8yhdvRGslYyn8uGqUByNFd6W6ebrOz8hJbNYFQRZQwu4xwl50ObAD
irsWQuuf9Rskk3l8O6ILocNnEhvrdkv8q7nCSKaXtPFsKWqci913DKBkVuxfaczt
W2Kg8nmgt0nER7TcgYwwCNREhdA5b6ID1q2yotNsLycsW2kH4NXX/9uYmKbo6y1A
BNiTreidRLuqiH6+y/PlVPaGDvwpOpYeGWW+2vcTDY/K6KbXkkjYRmP7q6n9AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUIcV9XMF4oZuD6xDTcg0ourDUjtcwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzODM1MmUzMTMxMzEyZTMxMzUzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2Uy
MDMxMzQzMTM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlvnDANBgkqhkiG9w0BAQsFAAOCAQEA
nqXXkG0gAQ5xhfWia5lWlwChwSVJXN8QZLdVJO6musiKyCJCe7niPE1wDkeoQGpg
cejkHimsm6iGbbHDKPOP2bQV+HCPGPJf0nv29BzT3p+O5sRf94lPz93BzvB4l0aj
wfhA60UfOxcCAojUXkoUuVZjEKEXlxfzYyewbI6L+i9aWbSXLnLbfZH95x2CTvW2
fv5mEEvHbqkjKZkstQ4eBc1daRF8gZwCcra1VC3dYBc2fd95A+o7sNX4ctq+ooFQ
9m4xMXmWYlQS6LJtP3LZuu/jxdgrIWrJD4rzSAGF+S/X1jIW5wAAKDGXA3sKWSY4
zCOJAIJZosszglrEpvUaPQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net