Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e2037383537.roa
File:                     3138352e3231352e3136362e302f32342d3234203d3e2037383537.roa (raw, json)
Hash identifier:          YNm2hOJyB1kjHilIw/cR7Hj02gRWXkjO30UHScSs3SI=
Subject key identifier:   A6:93:AA:E8:0F:09:F0:02:1B:A5:DB:FE:2B:E8:10:BD:69:09:48:EE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       51AFBBDEBF622C7052B560FEA9D0A0802D059CC9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e2037383537.roa
Signing time:             Tue 28 Jun 2022 04:40:36 +0000
ROA not before:           Tue 28 Jun 2022 04:35:36 +0000
ROA not after:            Tue 27 Jun 2023 04:40:36 +0000
asID:                     7857
IP address blocks:        185.215.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:af:bb:de:bf:62:2c:70:52:b5:60:fe:a9:d0:a0:80:2d:05:9c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:36 2022 GMT
            Not After : Jun 27 04:40:36 2023 GMT
        Subject: CN=A693AAE80F09F0021BA5DBFE2BE810BD690948EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:37:49:18:ca:04:a4:b8:b9:5d:dc:21:3e:
                    85:f5:96:86:ce:c4:78:5b:6c:b0:86:e6:e6:f3:7e:
                    c3:a3:24:e2:2e:39:84:92:49:38:31:fd:f4:09:80:
                    37:de:e8:8b:d9:b2:a0:7d:36:94:16:eb:f3:76:d5:
                    78:96:65:a6:cd:6e:09:5d:4f:1a:19:fa:6d:e7:e4:
                    2f:90:0c:44:68:13:ee:98:f5:e6:c5:1a:cb:8e:39:
                    b7:8e:79:22:5c:50:e2:72:85:4d:67:f6:1b:5d:e5:
                    b6:78:67:60:7b:2f:0b:5b:e8:af:c6:a8:8d:c8:d7:
                    04:5d:6c:50:64:29:76:63:3c:f6:6a:ff:79:cd:99:
                    ff:4a:ff:d5:9a:24:db:8a:22:38:6a:9d:08:29:d0:
                    11:f1:d1:98:81:89:2f:c3:97:91:62:cc:e2:8d:b1:
                    ce:45:d7:a7:40:26:f0:06:c3:e4:c5:d7:35:22:2d:
                    3f:c6:b7:53:26:6f:98:ab:74:ab:b6:4d:e5:68:b5:
                    60:fe:1e:7c:1b:9a:de:4e:ae:98:73:a2:f1:76:8d:
                    e6:70:7c:bb:91:f4:77:d6:b3:bf:26:c8:59:19:aa:
                    e6:d0:5d:df:96:c5:7c:b4:af:92:d9:cc:d5:46:38:
                    8e:e4:1d:d9:3f:bf:f2:c0:b3:c6:d9:9c:9a:1f:00:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:93:AA:E8:0F:09:F0:02:1B:A5:DB:FE:2B:E8:10:BD:69:09:48:EE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e2037383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:a4:d1:c5:d7:0a:59:41:dd:6d:df:dd:95:63:c2:ca:f9:
         3c:6a:f1:95:b4:db:ac:93:70:e6:d2:00:a4:ef:57:43:d0:61:
         96:1a:8a:0c:5a:02:64:ba:9d:49:84:0b:df:ff:bb:6d:11:c6:
         8e:13:28:51:d6:d6:fe:ab:9b:90:aa:67:5e:03:db:28:6e:3c:
         09:2f:de:0d:c2:cd:db:1a:d1:cb:1f:e4:c7:71:7e:83:35:19:
         e2:f4:5f:0e:bc:51:b6:98:86:6c:58:9b:11:74:03:ce:2e:6e:
         23:27:2f:b7:3a:b0:c0:b3:54:78:d3:31:e0:3f:cb:1d:c3:f4:
         37:fe:a9:48:f5:6f:9e:10:f1:68:a5:97:c7:55:ee:9e:89:80:
         69:a3:3b:3c:bb:00:b3:86:47:7e:7a:47:48:58:2e:11:3c:29:
         e2:ed:c8:1e:6c:3c:6c:bc:b8:06:a2:ee:41:f7:ef:e4:36:82:
         dd:d1:2c:71:97:35:7c:71:d1:3e:cf:b7:90:b4:bb:cc:de:6e:
         ea:19:84:2c:c4:4d:ae:09:94:e8:c3:be:c0:95:67:40:33:61:
         2e:ec:b8:95:b9:24:7d:a5:5f:da:dd:7c:03:22:fc:0b:cc:fb:
         3e:73:d4:de:c7:70:cd:07:06:6a:e2:55:ef:93:35:a3:07:7e:
         b9:f1:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net