Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3332203d3e203536383736.roa
File:                     3138352e3138352e38312e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier:          D+3OGXE0+frABFb2w/M+jTWXnLhuooOaSB+DGYdOqvY=
Subject key identifier:   1C:45:71:6B:DF:CB:2C:A5:5F:8A:37:47:13:66:8A:C3:EC:E7:C6:7E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6C0FF43D8DCDC0FCCBCDDC23C2432B0C7B3B11AA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3332203d3e203536383736.roa
Signing time:             Sat 22 Oct 2022 04:34:11 +0000
ROA not before:           Sat 22 Oct 2022 04:29:11 +0000
ROA not after:            Sat 21 Oct 2023 04:34:11 +0000
asID:                     56876
IP address blocks:        185.185.81.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:f4:3d:8d:cd:c0:fc:cb:cd:dc:23:c2:43:2b:0c:7b:3b:11:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:11 2022 GMT
            Not After : Oct 21 04:34:11 2023 GMT
        Subject: CN=1C45716BDFCB2CA55F8A374713668AC3ECE7C67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:31:a7:ea:dc:53:cc:94:ab:c0:b1:62:58:ed:
                    d5:ba:23:ca:b0:43:90:84:00:7d:ec:d2:0a:6b:10:
                    a1:77:95:6e:4d:7d:37:ea:9f:c9:29:b0:f8:78:ae:
                    4a:59:5a:8c:04:cf:f6:91:0e:d6:81:3e:d4:f6:62:
                    8c:2f:28:96:84:a2:8a:40:37:63:59:ff:3e:23:fa:
                    d9:e5:b6:ae:6e:ab:f0:d9:a1:08:4f:e1:b7:28:da:
                    63:bb:ab:41:5f:f9:73:c7:b8:09:18:71:ab:52:39:
                    f3:59:9c:db:0e:3f:41:4b:31:d0:f9:0c:58:06:bc:
                    9e:44:7b:d8:ec:fa:85:52:6a:cf:5c:0c:cf:7c:bd:
                    a4:6f:65:0e:6b:7d:2b:b8:4c:5b:79:39:b3:20:17:
                    94:7f:77:50:49:2e:b7:0f:33:c6:57:0c:26:2b:8d:
                    6a:b4:8e:36:b0:7f:2e:ab:d4:c8:93:ad:3c:74:fc:
                    1b:fd:0d:24:32:bf:8d:4a:7a:6f:67:7f:db:3c:65:
                    59:d4:15:2b:ae:ff:41:3b:aa:ac:ae:4a:13:10:04:
                    a7:82:08:e4:7a:18:39:ec:25:06:82:6e:7d:8a:2a:
                    63:1f:71:fe:0a:d5:5a:dc:d9:8d:cc:66:36:b8:82:
                    f6:38:4e:4f:f6:39:d3:87:86:70:a1:76:e4:2a:34:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:71:6B:DF:CB:2C:A5:5F:8A:37:47:13:66:8A:C3:EC:E7:C6:7E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:76:fc:f8:c0:5b:46:bd:62:5f:24:82:30:3a:6b:fc:89:d2:
         21:e9:4c:5e:37:86:8c:ee:9f:d9:01:c4:33:d1:51:e2:86:b5:
         07:a7:99:b7:8b:ca:cd:73:aa:16:82:69:22:fd:33:5c:60:88:
         e2:f4:6f:b5:17:f9:c9:3b:33:62:07:c5:35:77:33:0b:8c:a4:
         4e:3e:28:dc:6c:c2:7a:f9:b1:ac:0e:13:68:07:ff:44:83:1b:
         d5:bf:65:20:28:51:59:0b:1f:f1:2e:c6:77:be:f1:aa:37:01:
         af:ec:89:56:90:e3:2a:99:5f:e2:b2:3f:06:13:db:8b:24:dd:
         4b:d3:71:1b:7a:86:77:88:e9:60:fa:ef:39:12:dd:bc:78:e6:
         f2:8c:17:ea:59:ad:48:0f:49:78:7b:5c:84:89:ed:a2:55:41:
         44:b6:a3:dc:a3:5c:c1:78:e3:8b:19:86:00:7f:84:1a:02:e5:
         9a:9c:cc:7c:40:6b:1a:2b:35:d6:f9:70:64:94:0c:4e:0f:61:
         3c:43:42:2c:19:29:e6:76:12:4a:bb:5c:84:43:3e:cf:3d:11:
         3a:1f:6a:16:47:de:1e:3f:d2:8c:7d:cf:3d:68:3f:7f:2a:b8:
         7a:11:c4:0b:87:a6:bc:6c:e5:53:36:ce:fa:d8:e3:cb:d0:72:
         f9:15:2d:0b
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUbA/0PY3NwPzLzdwjwkMrDHs7EaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MTFaFw0yMzEwMjEwNDM0MTFaMDMxMTAvBgNV
BAMTKDFDNDU3MTZCREZDQjJDQTU1RjhBMzc0NzEzNjY4QUMzRUNFN0M2N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMafq3FPMlKvAsWJY7dW6I8qw
Q5CEAH3s0gprEKF3lW5NfTfqn8kpsPh4rkpZWowEz/aRDtaBPtT2YowvKJaEoopA
N2NZ/z4j+tnltq5uq/DZoQhP4bco2mO7q0Ff+XPHuAkYcatSOfNZnNsOP0FLMdD5
DFgGvJ5Ee9js+oVSas9cDM98vaRvZQ5rfSu4TFt5ObMgF5R/d1BJLrcPM8ZXDCYr
jWq0jjawfy6r1MiTrTx0/Bv9DSQyv41Kem9nf9s8ZVnUFSuu/0E7qqyuShMQBKeC
COR6GDnsJQaCbn2KKmMfcf4K1Vrc2Y3MZja4gvY4Tk/2OdOHhnChduQqNDyBAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUHEVxa9/LLKVfijdHE2aKw+znxn4wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMxMzgzNTJlMzgzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzYzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC5uVEwDQYJKoZIhvcNAQELBQADggEBALZ2/PjA
W0a9Yl8kgjA6a/yJ0iHpTF43hozun9kBxDPRUeKGtQenmbeLys1zqhaCaSL9M1xg
iOL0b7UX+ck7M2IHxTV3MwuMpE4+KNxswnr5sawOE2gH/0SDG9W/ZSAoUVkLH/Eu
xne+8ao3Aa/siVaQ4yqZX+KyPwYT24sk3UvTcRt6hneI6WD67zkS3bx45vKMF+pZ
rUgPSXh7XISJ7aJVQUS2o9yjXMF444sZhgB/hBoC5ZqczHxAaxorNdb5cGSUDE4P
YTxDQiwZKeZ2Ekq7XIRDPs89ETofahZH3h4/0ox9zz1oP38quHoRxAuHprxs5VM2
zvrY48vQcvkVLQs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net