Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa
File:                     3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          ILE+74wz7zRUDs8Vd5uP+QgYHwLr8EgNnj+UIcwQmtc=
Subject key identifier:   90:B3:86:31:5F:24:32:66:5E:F1:B1:E6:BB:6F:F6:58:98:2B:DC:3D
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6058D300BD5643B391697D3DA1A9922383CB1F82
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:17 +0000
ROA not before:           Sat 22 Oct 2022 04:29:17 +0000
ROA not after:            Sat 21 Oct 2023 04:34:17 +0000
asID:                     201341
IP address blocks:        185.161.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:58:d3:00:bd:56:43:b3:91:69:7d:3d:a1:a9:92:23:83:cb:1f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:17 2022 GMT
            Not After : Oct 21 04:34:17 2023 GMT
        Subject: CN=90B386315F2432665EF1B1E6BB6FF658982BDC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:25:78:03:e8:8d:db:2a:65:06:92:16:23:
                    08:c1:ec:06:42:7b:21:c6:17:0f:2e:f9:3e:df:c2:
                    ce:02:a3:c5:84:75:bc:e9:09:ec:91:31:d8:79:df:
                    06:bd:5a:8c:1a:6d:7d:c9:48:0d:5b:85:72:6e:a0:
                    a7:06:d3:c4:89:24:dd:9e:eb:03:62:6d:cc:f4:1e:
                    b8:80:40:21:55:18:1e:1b:22:2d:4b:3d:cd:f4:7b:
                    95:3c:95:4d:cf:f8:40:54:bd:d7:29:4f:d9:08:a7:
                    b5:a1:2b:cf:b9:8b:42:90:0d:0f:3b:0d:97:b9:7a:
                    5f:c4:c4:6d:cc:cf:14:57:7e:a1:8f:a1:fa:fa:61:
                    45:c8:af:47:01:e2:a3:03:83:ef:55:47:e9:33:66:
                    29:c3:69:53:96:b3:14:21:48:53:86:dc:ce:a5:8b:
                    73:32:21:ba:46:ed:c5:cd:8c:a0:25:08:63:94:0c:
                    4f:54:c1:f2:81:fc:37:24:76:a5:4a:fb:fa:48:dd:
                    e1:16:5e:7e:5a:e6:8d:89:20:3e:ee:78:89:7f:95:
                    0c:a1:97:e5:57:eb:45:56:32:d8:84:3f:19:5b:03:
                    0c:2b:d3:3e:13:66:0e:58:f9:de:d1:57:35:29:10:
                    f1:56:43:6d:c9:73:f7:2d:f8:0d:1b:d9:58:fa:7f:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:86:31:5F:24:32:66:5E:F1:B1:E6:BB:6F:F6:58:98:2B:DC:3D
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6c:dd:3c:e3:bd:f1:b6:46:73:8b:b8:42:0c:4f:31:5d:d4:
         0d:56:ea:36:91:18:2d:c8:42:67:e7:ca:de:d4:05:d1:83:75:
         4c:ad:f9:b1:82:f7:b7:de:54:cd:dc:ec:b5:61:de:9c:43:2a:
         b9:a2:aa:e3:8b:4d:58:9d:17:d8:1f:17:69:fe:80:88:ce:51:
         a3:c4:4a:dc:61:b5:30:a6:f4:62:98:db:fb:47:71:7d:6c:8e:
         57:d0:3f:94:19:27:5d:0c:93:1a:64:ea:70:e3:12:63:b3:88:
         5e:15:fe:29:b4:10:41:b9:5b:e4:ae:4b:2f:de:a6:9e:a5:46:
         e9:d2:32:41:4c:dc:32:24:b4:ec:58:da:23:f4:2a:7b:ea:cb:
         80:c5:6e:75:5c:ed:6d:8f:1a:84:3f:ba:ac:38:9e:7b:0a:b0:
         df:53:d1:22:f0:93:58:35:a6:e9:21:85:1b:99:54:12:98:11:
         44:e4:4a:67:2a:64:13:2a:51:88:38:df:52:3b:3c:7f:ba:e3:
         4b:83:43:ea:6d:7e:3c:a9:6a:2d:ca:fe:d9:1a:fd:17:cb:0d:
         30:57:a4:a8:14:81:df:25:58:d9:12:62:c3:75:4a:10:14:63:
         37:3d:bd:b8:93:9a:8a:48:44:0e:51:9e:b0:30:4a:7a:cf:d1:
         5a:ea:4b:5a
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUYFjTAL1WQ7ORaX09oamSI4PLH4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MTdaFw0yMzEwMjEwNDM0MTdaMDMxMTAvBgNV
BAMTKDkwQjM4NjMxNUYyNDMyNjY1RUYxQjFFNkJCNkZGNjU4OTgyQkRDM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRiV4A+iN2yplBpIWIwjB7AZC
eyHGFw8u+T7fws4Co8WEdbzpCeyRMdh53wa9WowabX3JSA1bhXJuoKcG08SJJN2e
6wNibcz0HriAQCFVGB4bIi1LPc30e5U8lU3P+EBUvdcpT9kIp7WhK8+5i0KQDQ87
DZe5el/ExG3MzxRXfqGPofr6YUXIr0cB4qMDg+9VR+kzZinDaVOWsxQhSFOG3M6l
i3MyIbpG7cXNjKAlCGOUDE9UwfKB/DckdqVK+/pI3eEWXn5a5o2JID7ueIl/lQyh
l+VX60VWMtiEPxlbAwwr0z4TZg5Y+d7RVzUpEPFWQ23Jc/ct+A0b2Vj6f0z7AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUkLOGMV8kMmZe8bHmu2/2WJgr3D0wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzODM1MmUzMTM2MzEyZTMyMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmhyjANBgkqhkiG9w0BAQsFAAOCAQEA
vWzdPOO98bZGc4u4QgxPMV3UDVbqNpEYLchCZ+fK3tQF0YN1TK35sYL3t95Uzdzs
tWHenEMquaKq44tNWJ0X2B8Xaf6AiM5Ro8RK3GG1MKb0Ypjb+0dxfWyOV9A/lBkn
XQyTGmTqcOMSY7OIXhX+KbQQQblb5K5LL96mnqVG6dIyQUzcMiS07FjaI/Qqe+rL
gMVudVztbY8ahD+6rDieewqw31PRIvCTWDWm6SGFG5lUEpgRRORKZypkEypRiDjf
Ujs8f7rjS4ND6m1+PKlqLcr+2Rr9F8sNMFekqBSB3yVY2RJiw3VKEBRjNz29uJOa
ikhEDlGesDBKes/RWupLWg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net