Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e203232373733.roa
File:                     3138352e3230382e3230372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          I2lPqipgGuGAMCpccSsv4CL08FibPKnNvCfsKh19b1M=
Subject key identifier:   85:D0:EF:BA:84:D7:2B:08:EB:D3:28:88:B1:D8:1D:EF:B8:45:AE:3A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       63DBA695E6CCCADB2B2C57A9A0E8C11906F7CC10
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:40:52 +0000
ROA not before:           Tue 28 Jun 2022 04:35:52 +0000
ROA not after:            Tue 27 Jun 2023 04:40:52 +0000
asID:                     22773
IP address blocks:        185.208.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:db:a6:95:e6:cc:ca:db:2b:2c:57:a9:a0:e8:c1:19:06:f7:cc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:52 2022 GMT
            Not After : Jun 27 04:40:52 2023 GMT
        Subject: CN=85D0EFBA84D72B08EBD32888B1D81DEFB845AE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:54:e2:3d:43:7c:4a:08:59:bc:9e:16:0f:
                    d2:42:23:83:91:7a:cc:3e:08:ab:be:a6:b1:f2:47:
                    e1:82:eb:ae:99:c7:c3:2c:41:ba:4b:fb:72:bb:d2:
                    dd:a2:c3:11:90:ce:e4:16:ba:06:d8:08:6e:07:79:
                    9e:65:72:01:70:5c:6d:b1:1c:cd:b6:4c:8c:9a:99:
                    e6:87:37:11:47:da:9a:14:e5:fb:a7:ac:7e:84:b4:
                    44:95:94:f7:4c:de:0d:27:38:d2:6f:11:10:f1:f7:
                    8d:27:ba:e9:4e:9e:2e:3b:96:85:33:48:b7:00:bf:
                    f4:cf:a0:76:b5:51:17:f2:cc:10:67:e9:5e:df:9c:
                    67:eb:dc:88:2f:05:19:3b:ad:34:a2:29:f8:22:c4:
                    53:28:be:0f:f0:05:63:36:63:24:4c:46:82:3b:05:
                    23:1f:25:bd:d8:8d:06:4d:8e:6e:0b:52:e6:28:17:
                    d5:39:b2:11:44:3d:44:cc:92:b7:fb:14:c7:69:d5:
                    19:2e:bc:ce:b2:ae:d6:cd:6d:5f:d3:3f:78:e4:ad:
                    0b:57:45:b7:e5:e3:78:95:01:c7:f2:b6:75:2d:23:
                    1f:66:54:17:ba:3c:46:ca:95:31:5b:1a:31:44:49:
                    20:b7:9a:fd:d6:d0:34:16:76:63:d3:93:d5:b9:45:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:EF:BA:84:D7:2B:08:EB:D3:28:88:B1:D8:1D:EF:B8:45:AE:3A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:7a:8f:e8:d5:1a:f7:79:d4:cd:85:32:d9:14:9a:e6:e1:
         9d:be:25:f6:db:75:08:ee:2c:f7:13:c9:75:26:ed:66:42:e3:
         4b:33:06:54:4d:1e:c2:97:ca:17:b5:aa:b2:e5:69:1c:e9:ad:
         a1:e1:b8:a5:52:72:55:6e:fb:e6:b7:76:8d:4f:ba:34:84:b1:
         ab:12:fa:6e:8d:58:9a:37:cf:2e:c4:01:1d:23:e0:2b:eb:18:
         98:60:d7:00:41:b3:bb:38:3b:d4:9a:8b:59:9b:64:57:25:86:
         60:85:8e:c0:a1:c9:23:9f:02:9d:5b:65:a0:c2:03:a2:3d:09:
         bf:ce:03:13:dc:9d:74:5c:6c:17:1c:1a:63:a7:56:52:0a:4b:
         b3:90:74:26:cb:fb:65:fe:56:53:93:f3:84:18:ca:59:c5:c4:
         ef:70:f7:d7:26:cc:67:62:52:cb:64:7e:72:08:0f:47:d6:93:
         0f:70:5b:37:02:c9:59:fe:40:98:52:99:6b:dd:bd:1d:28:46:
         44:1a:bb:f1:31:8c:27:3b:3b:24:7c:70:7d:9b:47:ff:d9:f1:
         08:98:b8:aa:e2:47:71:c2:a5:20:77:07:22:af:ea:4c:70:35:
         12:d3:1c:20:b8:03:dc:8d:f4:24:01:a7:dd:d2:dd:63:3f:95:
         70:8c:b9:19
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUY9umlebMytsrLFepoOjBGQb3zBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NTJaFw0yMzA2MjcwNDQwNTJaMDMxMTAvBgNV
BAMTKDg1RDBFRkJBODRENzJCMDhFQkQzMjg4OEIxRDgxREVGQjg0NUFFM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/U1TiPUN8SghZvJ4WD9JCI4OR
esw+CKu+prHyR+GC666Zx8MsQbpL+3K70t2iwxGQzuQWugbYCG4HeZ5lcgFwXG2x
HM22TIyameaHNxFH2poU5funrH6EtESVlPdM3g0nONJvERDx940nuulOni47loUz
SLcAv/TPoHa1URfyzBBn6V7fnGfr3IgvBRk7rTSiKfgixFMovg/wBWM2YyRMRoI7
BSMfJb3YjQZNjm4LUuYoF9U5shFEPUTMkrf7FMdp1RkuvM6yrtbNbV/TP3jkrQtX
Rbfl43iVAcfytnUtIx9mVBe6PEbKlTFbGjFESSC3mv3W0DQWdmPTk9W5RaBbAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUhdDvuoTXKwjr0yiIsdgd77hFrjowHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzAzODJlMzIzMDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzIzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnQzzANBgkqhkiG9w0BAQsFAAOCAQEACwd6
j+jVGvd51M2FMtkUmubhnb4l9tt1CO4s9xPJdSbtZkLjSzMGVE0ewpfKF7WqsuVp
HOmtoeG4pVJyVW775rd2jU+6NISxqxL6bo1YmjfPLsQBHSPgK+sYmGDXAEGzuzg7
1JqLWZtkVyWGYIWOwKHJI58CnVtloMIDoj0Jv84DE9yddFxsFxwaY6dWUgpLs5B0
Jsv7Zf5WU5PzhBjKWcXE73D31ybMZ2JSy2R+cggPR9aTD3BbNwLJWf5AmFKZa929
HShGRBq78TGMJzs7JHxwfZtH/9nxCJi4quJHccKlIHcHIq/qTHA1EtMcILgD3I30
JAGn3dLdYz+VcIy5GQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net