Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e34342e302f32322d3234203d3e203437353833.roa
File:                     3139342e3136332e34342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          N8yCscRaUAPKDx5MWG7hKtvd3i8gTYPPENVVve8FZ7c=
Subject key identifier:   D5:2E:57:00:69:36:46:18:3D:7F:D4:7A:6B:90:F1:64:11:17:C5:0B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5556D844CA77FFD0E4AC68E2E9F4D52E487A7325
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e34342e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:09 +0000
ROA not before:           Sat 22 Oct 2022 04:29:09 +0000
ROA not after:            Sat 21 Oct 2023 04:34:09 +0000
asID:                     47583
IP address blocks:        194.163.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:56:d8:44:ca:77:ff:d0:e4:ac:68:e2:e9:f4:d5:2e:48:7a:73:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:09 2022 GMT
            Not After : Oct 21 04:34:09 2023 GMT
        Subject: CN=D52E5700693646183D7FD47A6B90F1641117C50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:32:6e:72:11:a5:7b:32:fd:96:d7:fd:44:
                    48:cd:28:e5:23:8c:d8:2c:99:b9:40:e8:39:24:17:
                    4f:f8:53:f7:53:9f:27:fc:c0:0f:00:12:89:22:26:
                    69:6c:72:7a:80:3b:a1:7d:3b:bc:37:2d:d6:39:c1:
                    b6:01:8b:c3:11:0d:db:70:e5:a3:cb:15:4c:da:ea:
                    5a:e7:ee:7f:ed:23:ac:a5:b9:48:f4:92:83:96:4f:
                    d3:1a:57:f7:7e:c5:13:8e:3d:a7:1d:b9:9a:7b:09:
                    de:45:6f:b1:77:c3:8f:df:c1:af:a0:82:58:2d:e0:
                    7e:75:3c:98:27:16:c8:70:36:7a:83:57:4e:92:73:
                    22:65:3f:d2:eb:23:56:24:08:f1:66:ff:39:fa:5e:
                    58:12:71:11:67:03:43:79:19:af:6d:63:d4:1e:0a:
                    66:c3:b8:9a:4b:ca:8a:62:77:46:f7:be:e3:44:71:
                    eb:cb:94:50:9a:dc:b7:3b:81:e4:3c:fa:5a:d2:13:
                    b5:5b:99:64:79:20:ad:40:f4:2b:db:62:ff:a6:aa:
                    94:5a:8f:20:0a:1a:a3:78:61:5c:ae:98:fc:c2:35:
                    b1:ea:d8:73:08:7c:bb:8a:52:35:c4:7b:fc:ec:b9:
                    d7:6c:eb:9e:07:5d:8a:80:3b:6f:3b:85:06:9f:31:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2E:57:00:69:36:46:18:3D:7F:D4:7A:6B:90:F1:64:11:17:C5:0B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e34342e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.163.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:ac:9f:94:91:c3:a8:18:06:da:36:5c:2b:20:7d:cb:3f:
         b6:84:a9:de:0b:90:26:19:2c:ac:fb:1b:a5:ce:ea:0c:ef:7d:
         93:1c:77:3b:c4:1d:cd:4e:28:0e:55:8f:ff:29:3a:53:6f:6e:
         d2:9c:94:bc:47:42:d1:d0:73:77:c5:dd:c1:48:d8:a0:ca:5b:
         cc:5f:47:66:bf:61:8c:3b:51:18:53:50:42:2c:75:00:02:0f:
         d6:d5:ae:e0:ac:04:31:d8:d4:9d:a5:1d:fa:ea:31:82:91:10:
         11:04:7c:08:77:6c:f4:99:bf:3f:20:ec:d2:1d:5a:ae:e7:9c:
         b2:d4:d3:6f:c8:a5:92:74:17:69:51:57:ee:a1:ac:57:cf:0d:
         a0:a6:3c:42:8c:39:1e:7e:57:e4:83:77:7e:5b:9f:66:c9:c1:
         57:6c:6d:ea:43:84:f4:ab:cf:30:73:63:0b:db:bf:7a:29:1f:
         c9:58:7a:2c:dc:18:3a:49:9f:a4:4f:27:98:0e:52:88:3d:18:
         3b:12:61:71:fb:31:fd:8a:2d:4b:f1:98:ae:fc:60:c3:3b:2e:
         f0:bd:5e:67:d1:04:a1:3d:ce:4f:9d:e5:7b:23:95:62:65:66:
         ae:77:f5:a9:c9:2d:54:09:a7:86:b5:c2:ef:ba:9e:23:3c:b5:
         a3:fb:5a:97
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUVVbYRMp3/9DkrGji6fTVLkh6cyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MDlaFw0yMzEwMjEwNDM0MDlaMDMxMTAvBgNV
BAMTKEQ1MkU1NzAwNjkzNjQ2MTgzRDdGRDQ3QTZCOTBGMTY0MTExN0M1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHDJuchGlezL9ltf9REjNKOUj
jNgsmblA6DkkF0/4U/dTnyf8wA8AEokiJmlscnqAO6F9O7w3LdY5wbYBi8MRDdtw
5aPLFUza6lrn7n/tI6yluUj0koOWT9MaV/d+xROOPacduZp7Cd5Fb7F3w4/fwa+g
glgt4H51PJgnFshwNnqDV06ScyJlP9LrI1YkCPFm/zn6XlgScRFnA0N5Ga9tY9Qe
CmbDuJpLyopid0b3vuNEcevLlFCa3Lc7geQ8+lrSE7VbmWR5IK1A9CvbYv+mqpRa
jyAKGqN4YVyumPzCNbHq2HMIfLuKUjXEe/zsudds654HXYqAO287hQafMbCzAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU1S5XAGk2Rhg9f9R6a5DxZBEXxQswHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzQyZTMxMzYzMzJlMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0
MzczNTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALCoywwDQYJKoZIhvcNAQELBQADggEBAF1mrJ+U
kcOoGAbaNlwrIH3LP7aEqd4LkCYZLKz7G6XO6gzvfZMcdzvEHc1OKA5Vj/8pOlNv
btKclLxHQtHQc3fF3cFI2KDKW8xfR2a/YYw7URhTUEIsdQACD9bVruCsBDHY1J2l
HfrqMYKREBEEfAh3bPSZvz8g7NIdWq7nnLLU02/IpZJ0F2lRV+6hrFfPDaCmPEKM
OR5+V+SDd35bn2bJwVdsbepDhPSrzzBzYwvbv3opH8lYeizcGDpJn6RPJ5gOUog9
GDsSYXH7Mf2KLUvxmK78YMM7LvC9XmfRBKE9zk+d5XsjlWJlZq539anJLVQJp4a1
wu+6niM8taP7Wpc=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net