Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203236363336.roa
File:                     3138352e3231352e3138312e302f32342d3234203d3e203236363336.roa (raw, json)
Hash identifier:          f22eiQHG+S3G3dNQFrGjQPIP7ISdjeoUpm86Ptz1ifM=
Subject key identifier:   C5:8B:B4:23:AC:04:48:AD:D5:7D:64:48:61:A3:E9:D6:3A:94:2A:FF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2F775E00F5A5AEAE9B22430A30EEDA4BEA611BBF
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203236363336.roa
Signing time:             Tue 28 Jun 2022 04:40:43 +0000
ROA not before:           Tue 28 Jun 2022 04:35:43 +0000
ROA not after:            Tue 27 Jun 2023 04:40:43 +0000
asID:                     26636
IP address blocks:        185.215.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:77:5e:00:f5:a5:ae:ae:9b:22:43:0a:30:ee:da:4b:ea:61:1b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:43 2022 GMT
            Not After : Jun 27 04:40:43 2023 GMT
        Subject: CN=C58BB423AC0448ADD57D644861A3E9D63A942AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:e3:8b:b8:29:76:72:35:af:bf:8e:67:46:
                    78:5b:b1:7d:c8:11:5a:5f:6f:1d:e9:d9:79:ff:b0:
                    6b:07:27:01:84:7b:31:85:38:90:0e:86:8d:0e:30:
                    73:15:f4:c0:3c:d0:54:ed:9b:d8:85:d5:ab:52:00:
                    95:09:68:f2:d4:81:e7:7e:35:93:a7:76:fc:f0:2e:
                    91:59:20:a9:db:b4:72:78:c3:96:fc:19:09:06:bf:
                    cf:58:50:33:22:c2:72:7c:7e:91:43:c0:f4:99:69:
                    3f:85:d1:7c:5a:9a:fa:1b:2f:26:77:1e:09:c8:c2:
                    92:57:ac:9a:fb:68:80:83:35:25:84:d3:1f:9e:f9:
                    b6:06:aa:8d:4f:de:1a:42:d0:89:2a:d1:c6:41:8c:
                    8e:99:4d:e4:0e:c6:f3:cd:76:af:22:5c:7e:2d:d0:
                    9d:98:0b:26:31:f8:7f:c9:db:1a:74:86:f3:9c:7b:
                    a3:df:62:8a:7f:eb:43:61:78:e7:01:42:96:6e:8c:
                    05:88:15:50:69:6f:25:fe:f1:47:fb:7a:8b:8d:ed:
                    3a:22:33:02:7e:6a:7e:63:bd:44:41:3b:53:bc:03:
                    5f:ef:79:29:12:b5:44:3d:72:2d:b3:90:df:81:fe:
                    9a:cf:f9:2b:f8:ec:87:5b:b7:78:9c:6e:6f:b0:00:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:B4:23:AC:04:48:AD:D5:7D:64:48:61:A3:E9:D6:3A:94:2A:FF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203236363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b1:14:d8:e2:78:f7:e4:bb:e0:1c:ce:1a:13:3a:a4:a5:b0:
         2d:c0:ad:f2:e2:0c:f2:84:c3:7f:00:05:5b:cf:36:be:c9:9b:
         7a:d6:a2:20:31:71:3d:cc:30:ea:f5:30:98:36:bb:39:a0:d4:
         91:79:29:8b:b5:4d:65:f3:55:bc:d2:fe:eb:62:c6:22:45:08:
         54:67:08:cf:63:a5:cc:36:15:b8:43:6a:21:11:bb:83:28:46:
         f2:41:b6:56:da:df:4b:f7:df:ed:c4:47:d4:b3:45:87:7d:dd:
         f8:4b:5f:a4:4e:e0:43:b8:a6:97:d4:76:30:79:4d:43:5e:d0:
         a3:ad:af:ca:80:7f:fc:a3:c9:8e:2f:a5:cc:f1:34:55:10:21:
         f7:6a:e4:72:79:06:66:53:24:cf:98:b3:b1:8f:4f:a7:2c:a9:
         1e:d2:1c:cc:8c:8e:37:83:d4:e5:45:b3:fb:d7:c8:41:76:57:
         80:40:ce:8b:65:5b:3f:e4:a6:05:d4:af:d2:72:b4:5a:6c:62:
         2f:25:8a:e4:2d:35:ab:af:31:89:10:fb:17:39:0a:c0:59:dd:
         55:f4:c0:ad:ba:3e:e6:65:0a:29:8e:92:2e:65:ad:16:fb:4f:
         b8:7d:e8:75:28:75:39:9e:8b:06:c6:e8:0e:cb:2c:82:ec:fb:
         e2:9d:ce:a5
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUL3deAPWlrq6bIkMKMO7aS+phG78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDNaFw0yMzA2MjcwNDQwNDNaMDMxMTAvBgNV
BAMTKEM1OEJCNDIzQUMwNDQ4QURENTdENjQ0ODYxQTNFOUQ2M0E5NDJBRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFReOLuCl2cjWvv45nRnhbsX3I
EVpfbx3p2Xn/sGsHJwGEezGFOJAOho0OMHMV9MA80FTtm9iF1atSAJUJaPLUged+
NZOndvzwLpFZIKnbtHJ4w5b8GQkGv89YUDMiwnJ8fpFDwPSZaT+F0XxamvobLyZ3
HgnIwpJXrJr7aICDNSWE0x+e+bYGqo1P3hpC0Ikq0cZBjI6ZTeQOxvPNdq8iXH4t
0J2YCyYx+H/J2xp0hvOce6PfYop/60NheOcBQpZujAWIFVBpbyX+8Uf7eouN7Toi
MwJ+an5jvURBO1O8A1/veSkStUQ9ci2zkN+B/prP+Sv47Idbt3icbm+wALyrAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUxYu0I6wESK3VfWRIYaPp1jqUKv8wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzEzNTJlMzEzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzIzNjM2MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnXtTANBgkqhkiG9w0BAQsFAAOCAQEArLEU
2OJ49+S74BzOGhM6pKWwLcCt8uIM8oTDfwAFW882vsmbetaiIDFxPcww6vUwmDa7
OaDUkXkpi7VNZfNVvNL+62LGIkUIVGcIz2OlzDYVuENqIRG7gyhG8kG2VtrfS/ff
7cRH1LNFh33d+EtfpE7gQ7iml9R2MHlNQ17Qo62vyoB//KPJji+lzPE0VRAh92rk
cnkGZlMkz5izsY9PpyypHtIczIyON4PU5UWz+9fIQXZXgEDOi2VbP+SmBdSv0nK0
WmxiLyWK5C01q68xiRD7FzkKwFndVfTArbo+5mUKKY6SLmWtFvtPuH3odSh1OZ6L
BsboDsssguz74p3OpQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net