Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa
File:                     3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier:          SNuQUxZ32iIEhl4ldEFNcAr2i/DYFMDFJOlMpNeycuc=
Subject key identifier:   F3:49:A7:E4:CE:39:92:78:F7:BF:E6:6D:45:0F:5E:15:47:D2:3E:82
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7EB271DAD5B28BE66F6E652B91AEC64E7A277DD6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa
Signing time:             Sat 22 Oct 2022 04:34:17 +0000
ROA not before:           Sat 22 Oct 2022 04:29:17 +0000
ROA not after:            Sat 21 Oct 2023 04:34:17 +0000
asID:                     3320
IP address blocks:        185.215.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b2:71:da:d5:b2:8b:e6:6f:6e:65:2b:91:ae:c6:4e:7a:27:7d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:17 2022 GMT
            Not After : Oct 21 04:34:17 2023 GMT
        Subject: CN=F349A7E4CE399278F7BFE66D450F5E1547D23E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:7c:eb:73:47:ad:8d:00:fd:9a:1b:09:1e:
                    5b:80:df:26:5d:23:c1:75:fb:2d:76:8a:74:2e:ff:
                    32:d2:6c:3e:10:23:2e:8c:a4:06:b5:5a:35:89:9b:
                    ee:98:06:00:06:af:c3:c9:27:d6:e5:2d:98:41:4e:
                    0e:3f:1a:67:c9:40:fb:3e:3e:9b:28:41:ef:37:66:
                    b2:6b:66:d0:d8:b9:a8:a8:e1:3c:a5:7a:1b:60:8e:
                    84:33:a9:76:57:a5:d1:7a:52:65:52:ed:58:ef:de:
                    26:65:80:3a:44:f1:65:ce:36:65:cb:a7:dc:21:17:
                    b7:b7:17:55:64:2f:47:96:6c:d9:70:6b:8c:47:cc:
                    e9:e4:e2:fd:e5:43:cd:4e:37:a8:ea:41:08:59:b4:
                    00:b9:7f:bb:3e:9f:ff:ee:10:ac:86:11:b5:71:d2:
                    9e:65:41:20:bd:4d:fd:97:92:4a:16:af:f1:e2:7e:
                    6b:16:1e:d8:27:da:ec:23:1d:a7:3f:83:66:74:24:
                    b6:7e:19:b2:12:6e:68:c8:0f:4e:38:b1:1d:91:6f:
                    8f:d0:ff:12:5c:a3:fa:31:22:cd:e5:7c:9f:49:16:
                    19:e2:fb:cc:f7:c4:31:fb:1b:69:07:3c:ff:94:f9:
                    ac:fb:89:ad:a5:26:dd:e1:5a:b3:4d:09:58:71:0c:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:49:A7:E4:CE:39:92:78:F7:BF:E6:6D:45:0F:5E:15:47:D2:3E:82
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:54:ab:f9:b9:f6:92:31:79:a3:91:5d:93:00:70:63:9e:
         d7:51:10:a5:3c:c2:38:ea:b6:00:26:f2:b5:fb:f5:24:af:b9:
         64:72:75:a3:02:76:0d:c1:ce:92:54:89:01:e2:44:db:51:3e:
         63:80:97:15:e0:22:84:b2:79:60:a9:ea:bb:55:23:a0:08:30:
         9c:97:55:cf:e5:6e:66:23:bb:b3:ad:3a:ac:78:e4:bb:93:2d:
         7b:f9:85:86:2e:90:1f:75:46:44:3b:aa:46:3c:06:ef:66:09:
         fd:8c:4f:01:c1:88:3c:e2:81:cb:ec:74:d3:b3:55:2c:87:36:
         31:a0:18:2d:2b:8e:dc:18:1a:d6:1a:c5:ee:db:1c:9f:47:5c:
         47:50:be:00:42:9d:52:3d:7d:7e:be:37:c7:1c:fe:9e:e4:ef:
         ac:26:4d:8b:e0:3e:dd:1a:53:dc:6d:1a:44:2e:cc:4e:35:ae:
         39:4d:8a:f9:47:27:18:5f:d4:a0:3c:01:55:64:f1:46:db:4c:
         1a:eb:87:90:cf:fc:b5:bf:ce:0e:c8:f5:9b:5d:e4:87:9f:bc:
         7d:02:88:64:cb:e0:0c:7c:d8:e0:75:c5:6c:4b:a3:1b:9f:38:
         f0:d9:c4:4f:62:3a:f2:af:45:98:34:a3:23:32:a5:e7:f0:b5:
         74:ae:80:26
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUfrJx2tWyi+ZvbmUrka7GTnonfdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MTdaFw0yMzEwMjEwNDM0MTdaMDMxMTAvBgNV
BAMTKEYzNDlBN0U0Q0UzOTkyNzhGN0JGRTY2RDQ1MEY1RTE1NDdEMjNFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/3zrc0etjQD9mhsJHluA3yZd
I8F1+y12inQu/zLSbD4QIy6MpAa1WjWJm+6YBgAGr8PJJ9blLZhBTg4/GmfJQPs+
PpsoQe83ZrJrZtDYuaio4TylehtgjoQzqXZXpdF6UmVS7Vjv3iZlgDpE8WXONmXL
p9whF7e3F1VkL0eWbNlwa4xHzOnk4v3lQ81ON6jqQQhZtAC5f7s+n//uEKyGEbVx
0p5lQSC9Tf2XkkoWr/HifmsWHtgn2uwjHac/g2Z0JLZ+GbISbmjID044sR2Rb4/Q
/xJco/oxIs3lfJ9JFhni+8z3xDH7G2kHPP+U+az7ia2lJt3hWrNNCVhxDAGjAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU80mn5M45knj3v+ZtRQ9eFUfSPoIwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzEzNTJlMzEzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzMzMzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC517cwDQYJKoZIhvcNAQELBQADggEBAG7iVKv5
ufaSMXmjkV2TAHBjntdREKU8wjjqtgAm8rX79SSvuWRydaMCdg3BzpJUiQHiRNtR
PmOAlxXgIoSyeWCp6rtVI6AIMJyXVc/lbmYju7OtOqx45LuTLXv5hYYukB91RkQ7
qkY8Bu9mCf2MTwHBiDzigcvsdNOzVSyHNjGgGC0rjtwYGtYaxe7bHJ9HXEdQvgBC
nVI9fX6+N8cc/p7k76wmTYvgPt0aU9xtGkQuzE41rjlNivlHJxhf1KA8AVVk8Ubb
TBrrh5DP/LW/zg7I9Ztd5IefvH0CiGTL4Ax82OB1xWxLoxufOPDZxE9iOvKvRZg0
oyMypefwtXSugCY=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net