Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e203333333837.roa
File:                     3138352e3139372e3235302e302f32332d3233203d3e203333333837.roa (raw, json)
Hash identifier:          cv6lvly4K4RmLhJrWUT5jLQthmYHgth0U59qBS7icdg=
Subject key identifier:   41:27:16:FA:8F:EF:85:8D:52:99:C5:E7:96:49:CF:2B:11:95:B0:B5
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5B810D05019400F239DA65276315C4D8E3424A28
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e203333333837.roa
Signing time:             Tue 28 Jun 2022 04:40:48 +0000
ROA not before:           Tue 28 Jun 2022 04:35:48 +0000
ROA not after:            Tue 27 Jun 2023 04:40:48 +0000
asID:                     33387
IP address blocks:        185.197.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:81:0d:05:01:94:00:f2:39:da:65:27:63:15:c4:d8:e3:42:4a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:48 2022 GMT
            Not After : Jun 27 04:40:48 2023 GMT
        Subject: CN=412716FA8FEF858D5299C5E79649CF2B1195B0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:42:d5:31:f6:18:5f:f0:b1:66:b0:71:b0:
                    88:96:dc:41:05:e1:34:fd:68:56:fa:6e:24:3d:1f:
                    11:3c:59:f2:71:0e:8b:b8:aa:a3:a8:d3:47:5e:79:
                    56:9c:e0:0b:ae:3a:83:b0:4d:6a:20:ee:d8:8f:bf:
                    cd:81:89:00:ce:ea:d4:b8:f3:b8:b5:7a:64:7a:76:
                    ed:d2:ab:51:a5:c0:f3:3c:06:f0:2d:04:24:dd:24:
                    2f:93:4d:10:59:94:e5:a6:b1:91:5e:61:9e:78:60:
                    bf:99:b3:8e:6d:80:cd:bd:15:94:7c:06:f0:b6:f7:
                    b9:27:48:17:a2:bc:16:b8:bf:df:ed:22:48:5e:f0:
                    63:9c:4b:ad:16:3b:6d:2b:40:13:78:8a:45:ad:21:
                    b4:32:0e:61:11:44:f2:78:f7:aa:07:10:bc:7f:3b:
                    0c:4c:a2:82:34:d0:ec:54:e5:fa:a7:c0:54:16:b0:
                    ae:f6:05:3f:dc:ad:39:7c:1d:08:8b:68:5e:00:c5:
                    5c:9e:c6:1a:b2:bd:da:4f:ac:7f:fa:03:88:bb:39:
                    7f:4d:9c:f0:a9:22:2b:08:97:30:21:03:06:1b:75:
                    03:37:15:ee:66:43:ce:1d:cc:71:e4:a0:f4:10:62:
                    2c:6c:3a:40:4b:0d:22:d2:71:e7:91:c5:dd:2c:cd:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:16:FA:8F:EF:85:8D:52:99:C5:E7:96:49:CF:2B:11:95:B0:B5
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3233203d3e203333333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:2a:aa:91:50:25:e2:d1:f8:c1:3a:52:11:be:a6:ff:b8:
         e9:bb:65:ac:e1:59:5c:4f:5d:e5:b9:7d:ed:a8:fa:e6:ea:b9:
         e5:a8:a2:94:fe:2a:04:c1:06:60:a0:5d:3b:e0:84:c4:76:6f:
         f0:ac:b5:b4:de:c9:38:e0:78:79:b1:18:66:87:2a:aa:08:0f:
         14:98:f0:a8:98:0f:86:63:73:ef:e8:c6:cd:e9:61:4c:60:61:
         b9:93:9d:b1:3b:1e:68:d2:cc:87:91:3f:bb:d7:73:cc:cc:53:
         31:8b:e1:a6:86:00:df:76:94:00:ae:24:9b:f9:28:3f:d6:60:
         48:83:86:03:70:bd:cf:43:c8:09:96:fe:03:5a:80:88:fd:86:
         71:ca:70:c8:23:26:ab:39:12:43:7f:a7:7c:32:99:ea:68:fc:
         a5:dd:21:b8:e5:d7:bd:e1:65:5c:61:97:82:fc:02:8b:0a:2b:
         8e:94:d9:37:82:94:f4:ab:61:02:a5:fd:3b:8a:c0:e3:83:65:
         32:e5:51:6b:58:fe:1e:c8:06:d8:45:34:e1:b1:89:16:ed:85:
         8f:e3:19:91:25:ae:8f:f1:f3:2b:d2:0c:29:b6:64:4c:ae:c8:
         fc:4b:ef:c2:fc:f1:a7:29:f1:ef:f8:eb:81:74:8a:6e:ee:6a:
         ea:0c:71:a4
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUW4ENBQGUAPI52mUnYxXE2ONCSigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDhaFw0yMzA2MjcwNDQwNDhaMDMxMTAvBgNV
BAMTKDQxMjcxNkZBOEZFRjg1OEQ1Mjk5QzVFNzk2NDlDRjJCMTE5NUIwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0A0LVMfYYX/CxZrBxsIiW3EEF
4TT9aFb6biQ9HxE8WfJxDou4qqOo00deeVac4AuuOoOwTWog7tiPv82BiQDO6tS4
87i1emR6du3Sq1GlwPM8BvAtBCTdJC+TTRBZlOWmsZFeYZ54YL+Zs45tgM29FZR8
BvC297knSBeivBa4v9/tIkhe8GOcS60WO20rQBN4ikWtIbQyDmERRPJ496oHELx/
OwxMooI00OxU5fqnwFQWsK72BT/crTl8HQiLaF4AxVyexhqyvdpPrH/6A4i7OX9N
nPCpIisIlzAhAwYbdQM3Fe5mQ84dzHHkoPQQYixsOkBLDSLSceeRxd0szZvjAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUQScW+o/vhY1SmcXnlknPKxGVsLUwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMxMzkzNzJlMzIzNTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIw
MzMzMzMzMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnF+jANBgkqhkiG9w0BAQsFAAOCAQEAfT0q
qpFQJeLR+ME6UhG+pv+46btlrOFZXE9d5bl97aj65uq55aiilP4qBMEGYKBdO+CE
xHZv8Ky1tN7JOOB4ebEYZocqqggPFJjwqJgPhmNz7+jGzelhTGBhuZOdsTseaNLM
h5E/u9dzzMxTMYvhpoYA33aUAK4km/koP9ZgSIOGA3C9z0PICZb+A1qAiP2Gccpw
yCMmqzkSQ3+nfDKZ6mj8pd0huOXXveFlXGGXgvwCiworjpTZN4KU9KthAqX9O4rA
44NlMuVRa1j+HsgG2EU04bGJFu2Fj+MZkSWuj/HzK9IMKbZkTK7I/Evvwvzxpynx
7/jrgXSKbu5q6gxxpA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net