Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138332e38372e302f32342d3234203d3e2030.roa
File:                     3138352e3138332e38372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          EM2xD1yiGYDC1MYvjtesxw2xrDz6BM41/Pfn4OXgFH4=
Subject key identifier:   F9:8F:68:B7:FB:97:C1:2F:22:FC:D5:AE:A0:05:21:9B:1F:95:98:EF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4062742690D96F021AF8E6B818CE56EAF673972D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138332e38372e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:33:39 +0000
ROA not before:           Fri 03 Mar 2023 15:28:39 +0000
ROA not after:            Fri 01 Mar 2024 15:33:39 +0000
asID:                     0
IP address blocks:        185.183.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:62:74:26:90:d9:6f:02:1a:f8:e6:b8:18:ce:56:ea:f6:73:97:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar  3 15:28:39 2023 GMT
            Not After : Mar  1 15:33:39 2024 GMT
        Subject: CN=F98F68B7FB97C12F22FCD5AEA005219B1F9598EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:85:d4:2b:29:ac:21:0e:8b:26:9a:1c:6c:
                    ae:82:00:b8:2d:f6:2f:eb:ad:c9:46:de:fb:6c:7d:
                    44:db:09:de:44:11:d4:7c:10:40:2c:9a:dd:97:f4:
                    a5:72:10:ae:88:04:6e:41:68:76:3f:5a:9a:67:17:
                    e8:8f:03:ed:4e:69:b0:9b:bb:f6:b0:98:46:ee:83:
                    1f:85:7a:b3:76:77:e0:57:94:4a:37:12:99:01:7a:
                    66:0c:15:bf:be:3b:df:d3:35:70:8c:bd:bf:82:47:
                    af:50:f3:87:7d:8f:2e:eb:8e:ef:6f:6f:b8:b3:3f:
                    00:79:5b:ef:8c:fa:d8:a0:1f:8f:4a:7d:7f:d8:36:
                    b3:28:2e:38:14:28:9d:cc:0b:7c:d1:95:33:60:bf:
                    b6:f5:e0:64:1a:f0:c2:c6:cc:aa:c3:22:30:f1:bb:
                    83:83:a4:11:12:ca:13:0e:37:00:17:f5:76:c5:6d:
                    b9:14:07:98:51:29:ad:e7:6e:b8:e3:3e:aa:29:1e:
                    9d:3f:24:c2:0e:cd:09:6e:0d:51:48:54:bf:a8:8c:
                    99:43:59:20:2f:f0:ed:9f:0e:2f:b6:bd:04:d4:7a:
                    09:fb:aa:53:35:44:6a:4c:e2:1a:ac:ab:47:73:24:
                    4d:36:38:be:ed:30:c5:97:fc:86:1d:68:90:87:12:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:68:B7:FB:97:C1:2F:22:FC:D5:AE:A0:05:21:9B:1F:95:98:EF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138332e38372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:82:78:46:99:f7:37:ae:41:05:4d:ef:d7:77:09:80:cd:
         e4:7d:c4:95:d4:8a:55:ea:3f:7b:dc:ee:2d:b4:a7:59:43:f7:
         df:d0:4a:53:9b:8c:fd:99:59:76:6c:4c:66:0d:22:57:ab:5c:
         46:c9:e4:8c:d7:49:a3:78:20:86:e7:31:06:e8:b9:52:82:08:
         db:86:2d:ba:6b:bd:a8:d7:9b:0e:28:4a:8f:51:12:e0:69:ea:
         51:3b:8d:52:21:96:ca:2b:14:00:b9:3f:88:99:99:f5:23:73:
         c6:55:ce:e0:3c:c1:99:b2:1a:12:e6:72:bc:6d:24:87:91:c1:
         ba:dc:0d:a8:b0:24:a8:e0:5c:7f:44:d2:22:69:98:0c:22:3c:
         1b:be:bd:cf:d4:54:87:63:26:50:1b:1a:87:2d:2e:46:80:09:
         5d:d2:99:d8:6a:8c:4a:c3:bf:28:7d:8b:c0:93:98:ee:da:77:
         5c:88:75:73:c3:75:af:b0:80:42:ba:e4:96:cd:6d:b2:7a:20:
         46:eb:71:2d:6d:d9:d4:79:d2:87:c1:c9:a3:ce:b0:07:fa:a7:
         1c:12:b8:19:a8:de:0f:f6:75:e1:67:c0:a4:ab:1b:01:b7:a6:
         b2:9b:55:88:a1:45:74:01:3a:d7:4f:d7:d8:ac:8a:13:a9:df:
         5d:8a:f1:f4
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUQGJ0JpDZbwIa+Oa4GM5W6vZzly0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAzMDMxNTI4MzlaFw0yNDAzMDExNTMzMzlaMDMxMTAvBgNV
BAMTKEY5OEY2OEI3RkI5N0MxMkYyMkZDRDVBRUEwMDUyMTlCMUY5NTk4RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLIXUKymsIQ6LJpocbK6CALgt
9i/rrclG3vtsfUTbCd5EEdR8EEAsmt2X9KVyEK6IBG5BaHY/WppnF+iPA+1OabCb
u/awmEbugx+FerN2d+BXlEo3EpkBemYMFb++O9/TNXCMvb+CR69Q84d9jy7rju9v
b7izPwB5W++M+tigH49KfX/YNrMoLjgUKJ3MC3zRlTNgv7b14GQa8MLGzKrDIjDx
u4ODpBESyhMONwAX9XbFbbkUB5hRKa3nbrjjPqopHp0/JMIOzQluDVFIVL+ojJlD
WSAv8O2fDi+2vQTUegn7qlM1RGpM4hqsq0dzJE02OL7tMMWX/IYdaJCHEvELAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQU+Y9ot/uXwS8i/NWuoAUhmx+VmO8wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMxMzgzMzJlMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAubdXMA0GCSqGSIb3DQEBCwUAA4IBAQBbBYJ4Rpn3N65BBU3v
13cJgM3kfcSV1IpV6j973O4ttKdZQ/ff0EpTm4z9mVl2bExmDSJXq1xGyeSM10mj
eCCG5zEG6LlSggjbhi26a72o15sOKEqPURLgaepRO41SIZbKKxQAuT+ImZn1I3PG
Vc7gPMGZshoS5nK8bSSHkcG63A2osCSo4Fx/RNIiaZgMIjwbvr3P1FSHYyZQGxqH
LS5GgAld0pnYaoxKw78ofYvAk5ju2ndciHVzw3WvsIBCuuSWzW2yeiBG63EtbdnU
edKHwcmjzrAH+qccErgZqN4P9nXhZ8CkqxsBt6aym1WIoUV0ATrXT9fYrIoTqd9d
ivH0
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net