Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3233203d3e2031323339.roa
File:                     3138352e3139322e39362e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier:          ZSWqxwLAchKctE5juQF64CZ22u+qjj4y0MHABrut7co=
Subject key identifier:   67:E1:68:9E:D9:26:C6:18:A3:71:EF:B6:B8:57:49:E8:2D:50:F1:45
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       353155BA03215FB93EDC1B309F8CA57C104F19BD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3233203d3e2031323339.roa
Signing time:             Tue 28 Jun 2022 04:40:35 +0000
ROA not before:           Tue 28 Jun 2022 04:35:35 +0000
ROA not after:            Tue 27 Jun 2023 04:40:35 +0000
asID:                     1239
IP address blocks:        185.192.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:31:55:ba:03:21:5f:b9:3e:dc:1b:30:9f:8c:a5:7c:10:4f:19:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:35 2022 GMT
            Not After : Jun 27 04:40:35 2023 GMT
        Subject: CN=67E1689ED926C618A371EFB6B85749E82D50F145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:53:af:0e:7a:a4:4f:da:0d:ef:5a:cc:fe:
                    9d:b1:e0:49:b6:8f:78:fa:e1:76:12:a3:bb:cd:97:
                    ee:66:30:fe:4d:28:40:af:06:2b:b2:5c:82:5c:8a:
                    1c:46:6f:e6:75:f8:a4:f4:8e:a3:9c:1f:49:86:94:
                    57:28:ef:ba:a9:1a:f0:14:61:b5:2b:9e:a0:9f:18:
                    60:19:75:a2:74:2d:d7:0f:b4:31:23:29:ec:98:d3:
                    ed:e4:13:a7:ad:a4:36:8b:ec:cb:ce:7f:dc:f8:94:
                    e5:9a:01:3d:6d:79:a6:30:6f:97:55:18:2b:52:f2:
                    23:d4:e2:72:3f:37:05:87:14:76:ec:dc:0b:91:11:
                    2c:e2:e4:60:c7:d1:b3:7d:d7:73:0f:b9:8e:77:c9:
                    73:93:82:36:c6:e9:9f:7b:b7:d0:c5:03:77:3f:0d:
                    2a:35:f7:9b:63:d9:c4:35:e9:32:33:f2:37:84:e2:
                    07:f3:c7:8d:86:07:20:68:33:68:f1:c2:0c:5a:9e:
                    1c:77:cd:73:ea:51:e4:d7:9d:0a:00:4e:6f:c0:5d:
                    fc:c0:bc:35:6c:05:d4:56:11:f7:e7:a7:52:ae:f2:
                    49:78:65:b3:49:38:58:4d:2d:b5:fa:c4:a6:39:40:
                    43:16:d3:7d:9d:fb:f9:6a:30:66:ed:0e:31:69:fa:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E1:68:9E:D9:26:C6:18:A3:71:EF:B6:B8:57:49:E8:2D:50:F1:45
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3233203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:79:a1:9c:b4:fb:c9:40:06:c4:8e:c3:40:11:39:fa:28:c5:
         b9:c5:35:58:b0:97:c6:ff:ad:7d:c1:7d:63:e8:54:ce:c3:39:
         63:79:8e:a2:97:1c:c8:d8:e2:1f:60:56:c8:0f:1a:06:42:f8:
         85:7b:34:9a:2c:80:cb:b6:cb:2d:4b:6c:e2:73:18:8c:34:53:
         5a:b0:ee:1c:8a:82:f8:81:21:80:83:66:64:67:19:56:80:56:
         34:b6:7b:60:38:76:9b:00:02:d3:47:01:a1:5f:9c:64:c0:3e:
         dd:59:be:89:fc:5e:a3:cc:e8:01:d4:b8:78:5e:25:9a:34:3b:
         e6:05:a2:10:90:bb:98:dd:fe:7d:60:b1:ff:61:4d:33:c8:ce:
         58:5d:90:57:ce:2c:05:34:50:fb:03:6b:8c:b0:05:47:c6:b3:
         8e:4c:eb:5e:9f:e9:77:40:ec:d2:ee:5a:91:33:9b:0e:dc:85:
         b3:b3:af:bb:c8:50:87:59:5d:0d:e0:03:ed:d1:de:90:0c:87:
         e8:bb:69:c8:a4:70:d3:06:c9:72:42:c7:34:52:5e:7e:86:e1:
         b6:50:18:43:3a:8c:c5:7f:e2:6a:0b:90:af:39:e8:2d:86:d0:
         16:ec:e0:e4:b4:35:4c:00:1f:19:24:d7:a9:e5:5c:ea:0f:51:
         b8:02:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net