Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e2037373234.roa
File:                     3138352e3231352e3136362e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          ukwP5QwFEbASa7fFDb4GruOqCfURpy2jyuBv0QBA7Bc=
Subject key identifier:   E8:11:1E:D9:3E:A7:AC:CF:B8:71:E5:C6:32:ED:28:40:B9:4B:78:FF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7E559ACCF7B54FEF2F90CBF91080A26604299B47
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e2037373234.roa
Signing time:             Tue 28 Jun 2022 04:40:46 +0000
ROA not before:           Tue 28 Jun 2022 04:35:46 +0000
ROA not after:            Tue 27 Jun 2023 04:40:46 +0000
asID:                     7724
IP address blocks:        185.215.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:55:9a:cc:f7:b5:4f:ef:2f:90:cb:f9:10:80:a2:66:04:29:9b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:46 2022 GMT
            Not After : Jun 27 04:40:46 2023 GMT
        Subject: CN=E8111ED93EA7ACCFB871E5C632ED2840B94B78FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:ef:0a:aa:2e:99:9e:1d:23:27:40:7c:12:
                    5a:43:60:ff:9b:b8:d7:09:a8:6d:58:eb:51:9e:e8:
                    1f:a5:ad:96:37:56:9d:a9:b9:da:8e:49:f0:76:24:
                    9b:55:5b:aa:4b:fd:1b:7a:f8:9c:01:dc:33:11:d8:
                    bd:1f:e5:b8:dc:16:65:b3:0e:9b:17:55:ea:44:1d:
                    bd:f1:84:10:36:53:44:36:0a:8f:a2:c6:0b:b8:84:
                    16:35:49:59:aa:6c:d5:86:63:d0:d6:9b:28:aa:46:
                    fe:24:78:0f:94:44:93:27:e1:d3:00:a3:7c:33:90:
                    c8:f6:1c:c3:a4:b6:2a:9f:66:ad:93:d0:71:f5:d9:
                    98:13:0d:37:52:d6:a2:09:9a:4a:53:39:f8:c2:bd:
                    e6:6f:ac:85:01:89:0d:8e:c0:08:0b:9e:30:b2:b9:
                    15:6a:dd:00:75:8f:00:8f:89:1f:ec:07:46:2f:22:
                    89:0d:d1:05:73:de:aa:10:04:01:ce:5b:86:76:11:
                    42:0c:20:d0:00:49:88:1a:87:7c:88:a1:39:1c:93:
                    f9:ae:eb:4c:83:f2:4a:18:9b:34:e5:ed:35:1d:76:
                    b3:d2:a7:7f:ee:61:3c:38:40:c4:f8:e5:15:72:f9:
                    a0:d6:17:2a:df:a3:75:a0:4e:c3:9d:bd:40:00:3b:
                    d5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:11:1E:D9:3E:A7:AC:CF:B8:71:E5:C6:32:ED:28:40:B9:4B:78:FF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:fa:4e:f7:d1:aa:08:55:0f:14:03:83:a9:77:52:ef:16:bb:
         f9:01:b8:d0:9f:2c:47:b2:54:b3:f1:df:1c:45:01:b7:06:70:
         1b:f3:fb:f6:55:21:4a:be:51:db:f7:ad:7e:b6:f0:f7:00:c7:
         c6:7c:90:84:19:86:6a:77:44:a3:48:71:30:86:e0:0e:5f:7f:
         a8:b2:05:b4:76:94:3b:27:76:f3:03:bb:fc:84:99:22:83:e4:
         77:bd:7c:18:84:b1:1b:85:5d:da:a2:2a:9f:0c:4d:47:b4:a3:
         56:98:31:52:a1:a5:6b:df:7c:74:61:aa:1b:25:dd:ee:69:9d:
         db:39:44:c3:e7:b8:1f:61:f3:37:9e:31:45:b7:9c:62:31:93:
         b7:5f:de:a1:aa:22:8a:30:bc:03:47:6b:31:79:de:72:bc:1a:
         25:cd:d8:a1:59:07:b9:d8:14:b4:55:73:8e:96:47:14:92:4d:
         b0:b3:7d:af:60:57:46:d7:36:d1:cc:28:da:a5:be:36:8f:cf:
         90:a4:38:a8:fc:ac:db:bf:a3:4d:61:92:5c:7f:e9:ae:26:6d:
         39:47:bd:ea:02:85:fe:df:5d:a2:d5:5e:9a:e7:ed:a7:a2:f2:
         9a:76:a1:6c:4a:af:e3:47:c1:1c:e4:a4:63:a4:b3:e1:16:2a:
         86:93:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net