Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3234203d3e20323132313735.roa
File:                     3138352e3131312e3135392e302f32342d3234203d3e20323132313735.roa (raw, json)
Hash identifier:          so/u4XPv21ztgx7dt1WSU2iJruzLkKUKfIyClprx+PA=
Subject key identifier:   C9:9C:85:B9:0F:69:F3:92:D6:6F:E6:3F:9B:49:1D:7D:57:41:7B:DE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       49E7178D8A8D591CDD6866F13AD92841933AB2C9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3234203d3e20323132313735.roa
Signing time:             Tue 28 Jun 2022 04:40:43 +0000
ROA not before:           Tue 28 Jun 2022 04:35:43 +0000
ROA not after:            Tue 27 Jun 2023 04:40:43 +0000
asID:                     212175
IP address blocks:        185.111.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e7:17:8d:8a:8d:59:1c:dd:68:66:f1:3a:d9:28:41:93:3a:b2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:43 2022 GMT
            Not After : Jun 27 04:40:43 2023 GMT
        Subject: CN=C99C85B90F69F392D66FE63F9B491D7D57417BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:84:5c:84:0a:c6:af:26:ba:eb:d3:cb:f2:
                    e2:66:44:f8:9c:b4:a1:4d:5a:9a:3d:2e:4e:80:55:
                    cb:9c:8d:f2:4f:df:e9:6f:3f:82:aa:76:b8:27:8f:
                    dd:40:a6:5f:22:9b:a9:4a:9a:7a:60:b5:e3:cf:99:
                    f1:6d:11:6a:b0:b3:e8:22:01:41:4b:23:83:6c:09:
                    cf:89:5b:be:76:7e:d5:65:86:b3:75:0b:6a:f2:3f:
                    e8:3a:e2:2f:a3:31:98:66:93:07:54:ac:d0:e5:a2:
                    80:11:e9:c0:40:2a:02:f3:eb:38:42:41:26:0c:f9:
                    ca:f3:ef:8f:4b:17:71:d7:77:a2:39:a6:e8:ce:2d:
                    f4:08:ed:d1:3b:49:5c:e5:97:79:94:55:2d:45:89:
                    b6:b2:89:d5:56:3e:81:08:93:83:35:40:88:a8:1d:
                    da:e1:f3:7b:1c:ca:09:c1:3c:94:cf:21:14:5c:95:
                    a7:92:7d:63:cd:f1:0c:9b:b0:cf:6e:db:f7:9f:bc:
                    56:2e:a4:56:3b:33:6e:75:ac:ed:54:7a:eb:1c:0a:
                    b5:73:9a:79:df:c9:3d:54:80:9f:b4:37:42:cc:a2:
                    7d:88:6a:5b:d3:61:dc:52:61:16:65:1b:03:75:36:
                    24:2e:d2:c9:a8:50:59:3b:2b:2c:6f:53:8f:65:43:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:85:B9:0F:69:F3:92:D6:6F:E6:3F:9B:49:1D:7D:57:41:7B:DE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3234203d3e20323132313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:92:8e:77:87:fe:d8:ff:3e:bc:dd:23:1a:59:1f:06:ca:14:
         50:14:bf:77:d9:a8:59:7a:b2:34:c0:3f:c7:c4:83:5b:a3:b5:
         86:67:af:d1:ce:d0:d3:2e:88:41:07:0e:2c:df:78:ee:c2:f6:
         48:3b:e9:bf:fd:a9:a2:a5:f5:c6:80:2b:43:dc:4b:7b:d6:72:
         67:bf:25:3a:11:73:d8:d2:c8:31:e1:d2:69:15:f8:95:37:4a:
         b9:ca:e0:a7:dc:09:2b:72:ba:94:bd:e2:64:19:4c:a9:24:de:
         9f:5a:3c:ba:97:cc:55:2e:9e:65:5f:5c:f6:d2:fb:b1:ea:fe:
         bf:84:4d:f6:06:c1:f3:e1:f3:c9:dc:25:3d:15:a1:33:4e:1a:
         7e:56:99:50:df:d6:72:28:ba:db:62:97:95:4a:6b:4c:39:97:
         aa:18:72:27:b1:81:1d:8c:21:03:fa:3c:9a:6f:32:66:b1:64:
         03:7b:f2:aa:72:d5:c0:4a:1c:6a:b1:c8:26:33:14:f8:da:bc:
         fb:79:9f:fb:6b:a1:fb:ba:5c:e0:a0:01:d9:49:10:4b:d5:18:
         67:b9:61:3b:00:4b:cf:ab:86:f7:13:62:31:1b:dd:a3:89:4f:
         45:29:c1:68:b9:9e:72:82:87:91:70:b4:a6:52:8a:9f:1c:a6:
         6f:24:71:82
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUSecXjYqNWRzdaGbxOtkoQZM6sskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDNaFw0yMzA2MjcwNDQwNDNaMDMxMTAvBgNV
BAMTKEM5OUM4NUI5MEY2OUYzOTJENjZGRTYzRjlCNDkxRDdENTc0MTdCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5IRchArGrya669PL8uJmRPic
tKFNWpo9Lk6AVcucjfJP3+lvP4Kqdrgnj91Apl8im6lKmnpgtePPmfFtEWqws+gi
AUFLI4NsCc+JW752ftVlhrN1C2ryP+g64i+jMZhmkwdUrNDlooAR6cBAKgLz6zhC
QSYM+crz749LF3HXd6I5pujOLfQI7dE7SVzll3mUVS1FibayidVWPoEIk4M1QIio
Hdrh83scygnBPJTPIRRclaeSfWPN8QybsM9u2/efvFYupFY7M251rO1UeuscCrVz
mnnfyT1UgJ+0N0LMon2IalvTYdxSYRZlGwN1NiQu0smoUFk7KyxvU49lQ6cxAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUyZyFuQ9p85LWb+Y/m0kdfVdBe94wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzODM1MmUzMTMxMzEyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMyMzEzMjMxMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlvnzANBgkqhkiG9w0BAQsFAAOCAQEA
w5KOd4f+2P8+vN0jGlkfBsoUUBS/d9moWXqyNMA/x8SDW6O1hmev0c7Q0y6IQQcO
LN947sL2SDvpv/2poqX1xoArQ9xLe9ZyZ78lOhFz2NLIMeHSaRX4lTdKucrgp9wJ
K3K6lL3iZBlMqSTen1o8upfMVS6eZV9c9tL7ser+v4RN9gbB8+HzydwlPRWhM04a
flaZUN/Wcii622KXlUprTDmXqhhyJ7GBHYwhA/o8mm8yZrFkA3vyqnLVwEocarHI
JjMU+Nq8+3mf+2uh+7pc4KAB2UkQS9UYZ7lhOwBLz6uG9xNiMRvdo4lPRSnBaLme
coKHkXC0plKKnxymbyRxgg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net