Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e20323132363330.roa
File:                     3138352e3230352e3234342e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          ev4sUQKLr3F8Bq73s8f3tu2KznKFOFiCU/QBfrUe8zI=
Subject key identifier:   38:F1:EF:2F:00:30:B5:03:36:6F:4C:74:36:2A:15:5D:D1:08:7A:56
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       32F28A446314833A187AA87BB46885FAEE02E037
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e20323132363330.roa
Signing time:             Fri 29 Oct 2021 16:00:11 +0000
ROA not before:           Fri 29 Oct 2021 15:55:11 +0000
ROA not after:            Fri 28 Oct 2022 16:00:11 +0000
asID:                     212630
IP address blocks:        185.205.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f2:8a:44:63:14:83:3a:18:7a:a8:7b:b4:68:85:fa:ee:02:e0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 29 15:55:11 2021 GMT
            Not After : Oct 28 16:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:97:3d:bc:12:6c:f4:98:05:86:52:d8:49:
                    c0:0f:23:9e:cb:db:0a:74:50:13:49:a0:e4:79:48:
                    5a:4e:5d:0b:56:e1:15:78:8c:3c:49:3e:8c:69:ca:
                    b1:91:4f:24:c7:78:8c:28:ae:24:43:3d:15:fb:ca:
                    77:75:92:20:4f:c4:44:f4:d6:ea:f9:ea:b1:61:1f:
                    cc:49:cc:a3:0f:eb:75:10:70:7b:c0:ae:9a:ef:c0:
                    65:da:15:81:1c:37:69:0d:3b:e7:f4:ea:d6:4f:cc:
                    d1:ae:8e:8b:8c:45:07:63:66:99:37:39:8a:88:33:
                    16:a9:d9:5b:b8:03:1f:6f:2e:95:e8:a7:86:f7:ef:
                    6a:ed:57:e3:4b:99:8a:fb:f4:94:7a:b4:eb:8d:b5:
                    99:cb:77:9a:bd:b6:2d:64:9f:e8:04:15:ff:d2:a1:
                    04:50:74:68:3a:52:32:13:7c:38:66:9c:2a:87:ec:
                    6a:7b:f5:81:2e:9d:f4:84:dc:84:ec:df:81:9f:0f:
                    3f:c4:69:8d:f9:e9:5e:64:ad:48:ad:49:2d:46:be:
                    53:7b:8e:6c:df:75:4b:8b:72:5a:de:ea:9e:b9:5d:
                    b3:25:57:c6:13:d0:ce:39:80:45:3c:32:38:de:a5:
                    21:57:f4:15:95:f1:19:a0:fc:14:bc:be:80:1f:fa:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F1:EF:2F:00:30:B5:03:36:6F:4C:74:36:2A:15:5D:D1:08:7A:56
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6e:ff:b0:5a:f6:51:2a:a7:05:e1:cf:bc:a6:9b:ea:dd:af:
         92:f9:b1:1a:4a:24:9f:46:2c:bf:3b:33:97:fb:f3:fc:5a:46:
         68:1a:48:19:3c:27:c2:ff:54:24:3a:dc:0b:a6:32:ba:14:19:
         5a:3a:97:ed:7d:28:06:e1:99:16:fa:f3:38:ee:a9:66:36:4d:
         31:ce:a6:ee:e1:82:33:ad:0e:2e:b3:34:ed:8d:ab:2a:b2:c0:
         33:be:4b:fd:1b:d6:98:00:55:64:ab:2f:7e:bc:22:16:a6:78:
         42:20:0b:d1:17:e3:8d:61:35:3c:f7:ec:79:39:1c:b4:28:22:
         5c:b9:6d:f7:ca:41:45:d9:5c:8b:71:e3:b8:3a:13:97:bb:93:
         dc:c4:de:57:6a:a2:02:41:6a:d8:7c:00:09:93:c7:3a:f9:33:
         e9:1a:c9:c1:76:fd:57:6b:0c:19:9f:19:5c:31:4b:45:1a:0c:
         28:e8:93:af:ec:d8:04:2b:46:70:a7:48:ca:74:51:fe:b5:83:
         a6:68:0d:69:62:8a:90:48:94:5b:f9:3f:ab:29:cd:89:ed:5a:
         fa:8e:63:61:aa:f9:db:a5:d3:48:73:d7:9f:80:01:2c:38:33:
         1b:c8:fa:09:51:25:1d:42:40:8e:70:be:c8:92:a8:42:02:fc:
         1f:0d:a7:30
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUMvKKRGMUgzoYeqh7tGiF+u4C4DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMTEwMjkxNTU1MTFaFw0yMjEwMjgxNjAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTM1RTk3M0RCQzEyNkNGNDk4
MDU4NjUyRDg0OUMwMEYyMzlFQ0JEQjBBNzQ1MDEzNDlBMEU0Nzk0ODVBNEU1RDBC
NTZFMTE1Nzg4QzNDNDkzRThDNjlDQUIxOTE0RjI0Qzc3ODhDMjhBRTI0NDMzRDE1
RkJDQTc3NzU5MjIwNEZDNDQ0RjRENkVBRjlFQUIxNjExRkNDNDlDQ0EzMEZFQjc1
MTA3MDdCQzBBRTlBRUZDMDY1REExNTgxMUMzNzY5MEQzQkU3RjRFQUQ2NEZDQ0Qx
QUU4RThCOEM0NTA3NjM2Njk5MzczOThBODgzMzE2QTlEOTVCQjgwMzFGNkYyRTk1
RThBNzg2RjdFRjZBRUQ1N0UzNEI5OThBRkJGNDk0N0FCNEVCOERCNTk5Q0I3NzlB
QkRCNjJENjQ5RkU4MDQxNUZGRDJBMTA0NTA3NDY4M0E1MjMyMTM3QzM4NjY5QzJB
ODdFQzZBN0JGNTgxMkU5REY0ODREQzg0RUNERjgxOUYwRjNGQzQ2OThERjlFOTVF
NjRBRDQ4QUQ0OTJENDZCRTUzN0I4RTZDREY3NTRCOEI3MjVBREVFQTlFQjk1REIz
MjU1N0M2MTNEMENFMzk4MDQ1M0MzMjM4REVBNTIxNTdGNDE1OTVGMTE5QTBGQzE0
QkNCRTgwMUZGQURFQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAk16XPbwSbPSYBYZS2EnADyOey9sKdFATSaDkeUhaTl0LVuEVeIw8
ST6MacqxkU8kx3iMKK4kQz0V+8p3dZIgT8RE9Nbq+eqxYR/MScyjD+t1EHB7wK6a
78Bl2hWBHDdpDTvn9OrWT8zRro6LjEUHY2aZNzmKiDMWqdlbuAMfby6V6KeG9+9q
7VfjS5mK+/SUerTrjbWZy3eavbYtZJ/oBBX/0qEEUHRoOlIyE3w4Zpwqh+xqe/WB
Lp30hNyE7N+Bnw8/xGmN+eleZK1IrUktRr5Te45s33VLi3Ja3uqeuV2zJVfGE9DO
OYBFPDI43qUhV/QVlfEZoPwUvL6AH/retQIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FDjx7y8AMLUDNm9MdDYqFV3RCHpWMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80LzMxMzgzNTJlMzIzMDM1MmUz
MjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNjMzMzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5zfQwDQYJKoZIhvcNAQELBQADggEBADRu/7Ba9lEqpwXhz7ymm+rdr5L5
sRpKJJ9GLL87M5f78/xaRmgaSBk8J8L/VCQ63AumMroUGVo6l+19KAbhmRb68zju
qWY2TTHOpu7hgjOtDi6zNO2NqyqywDO+S/0b1pgAVWSrL368IhameEIgC9EX441h
NTz37Hk5HLQoIly5bffKQUXZXItx47g6E5e7k9zE3ldqogJBath8AAmTxzr5M+ka
ycF2/VdrDBmfGVwxS0UaDCjok6/s2AQrRnCnSMp0Uf61g6ZoDWliipBIlFv5P6sp
zYntWvqOY2Gq+dul00hz15+AASw4MxvI+glRJR1CQI5wvsiSqEIC/B8NpzA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net