Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3234203d3e203631333137.roa
File:                     3139352e3137392e3139362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Tr+DQr+IDDkrXtau85+Ghy1stzYYgxpq0t+INf88Vjk=
Subject key identifier:   82:7C:05:D3:91:69:B9:65:27:45:CF:37:A4:48:72:CF:B2:98:37:81
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5547D3933D1DEF0FAAB1210A52A14EC1F3EDC622
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3234203d3e203631333137.roa
Signing time:             Wed 11 May 2022 09:21:39 +0000
ROA not before:           Wed 11 May 2022 09:16:39 +0000
ROA not after:            Wed 10 May 2023 09:21:39 +0000
asID:                     61317
IP address blocks:        195.179.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:47:d3:93:3d:1d:ef:0f:aa:b1:21:0a:52:a1:4e:c1:f3:ed:c6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: May 11 09:16:39 2022 GMT
            Not After : May 10 09:21:39 2023 GMT
        Subject: CN=827C05D39169B9652745CF37A44872CFB2983781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:d2:22:23:cd:06:0f:e6:35:a1:12:39:1d:
                    06:04:17:b4:8e:70:82:76:ed:b8:d2:f6:38:a7:d0:
                    fd:53:89:a3:aa:ed:e0:20:73:0c:c5:22:51:86:4d:
                    3b:3f:bb:87:d2:cc:56:ef:46:86:8b:79:d0:cb:00:
                    84:1e:a2:44:82:79:19:6b:59:71:28:49:54:6e:1a:
                    d8:b6:2e:e0:6f:7f:a9:9a:da:99:d8:97:d8:b9:23:
                    38:87:79:c6:3d:74:af:46:a9:6b:ea:0e:06:69:63:
                    f0:f4:30:7e:94:78:d7:35:2b:67:19:f0:8b:d1:b9:
                    e0:7e:d1:bb:9c:38:02:83:3c:1c:02:96:c1:a4:66:
                    67:b1:7e:c2:7c:b9:44:36:12:17:ba:94:3d:2a:41:
                    e7:69:33:35:fd:50:4f:15:8c:ed:08:58:80:bf:8b:
                    bf:72:09:16:25:11:55:33:ef:79:64:9c:20:6f:15:
                    3d:56:9d:f9:ee:98:b9:20:e3:13:cb:08:db:52:0d:
                    99:44:db:60:f1:2e:85:ba:60:e8:07:ad:99:d7:b7:
                    1e:8c:26:a7:ce:79:52:0e:56:48:c3:a6:9b:eb:56:
                    35:c0:0d:59:c1:36:d1:54:34:8a:eb:aa:57:7b:48:
                    9b:08:42:6f:c7:84:63:4f:22:9a:9d:dc:37:6b:64:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:05:D3:91:69:B9:65:27:45:CF:37:A4:48:72:CF:B2:98:37:81
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.179.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:52:3b:91:54:96:96:75:3e:1c:63:8d:4e:fa:5c:df:17:
         a7:51:3b:82:e9:06:00:75:bb:b0:54:dd:a8:f3:b2:0d:65:5c:
         f6:ee:2d:ed:ce:94:f3:6d:1c:99:39:4d:6c:a7:a9:62:c1:2f:
         26:5a:b5:14:ee:d5:d1:86:73:38:24:26:3d:1f:39:d9:cd:f5:
         cd:fe:99:fd:07:05:21:f1:e7:b7:46:88:7e:e1:4c:cb:5e:15:
         2a:e0:88:96:d6:2f:62:92:53:06:b9:b2:e0:b3:af:ec:f9:6d:
         73:db:d0:59:3d:cb:c8:62:93:c1:98:8f:85:9d:4b:6f:8a:94:
         c5:a5:42:d6:9a:d4:e4:3c:f9:2e:86:e3:3a:89:fe:b8:38:53:
         be:35:c8:7e:f0:b6:71:55:6b:7f:82:48:6c:59:a0:05:56:61:
         9f:ec:ef:90:67:9c:46:0f:12:7c:74:f4:69:00:36:91:c4:78:
         4e:5a:c2:fd:85:69:4c:bc:ba:51:e6:f1:59:e9:76:db:97:31:
         1e:90:ba:6e:25:5b:c0:99:e7:41:71:72:57:d9:c0:14:80:1b:
         43:71:4a:5a:07:7c:be:a5:83:91:0c:e3:38:23:41:83:09:a7:
         79:86:34:50:9c:d2:e2:23:1e:11:a5:e3:53:29:74:b7:2c:09:
         19:55:4e:80
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUVUfTkz0d7w+qsSEKUqFOwfPtxiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA1MTEwOTE2MzlaFw0yMzA1MTAwOTIxMzlaMDMxMTAvBgNV
BAMTKDgyN0MwNUQzOTE2OUI5NjUyNzQ1Q0YzN0E0NDg3MkNGQjI5ODM3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgT9IiI80GD+Y1oRI5HQYEF7SO
cIJ27bjS9jin0P1TiaOq7eAgcwzFIlGGTTs/u4fSzFbvRoaLedDLAIQeokSCeRlr
WXEoSVRuGti2LuBvf6ma2pnYl9i5IziHecY9dK9GqWvqDgZpY/D0MH6UeNc1K2cZ
8IvRueB+0bucOAKDPBwClsGkZmexfsJ8uUQ2Ehe6lD0qQedpMzX9UE8VjO0IWIC/
i79yCRYlEVUz73lknCBvFT1WnfnumLkg4xPLCNtSDZlE22DxLoW6YOgHrZnXtx6M
JqfOeVIOVkjDppvrVjXADVnBNtFUNIrrqld7SJsIQm/HhGNPIpqd3DdrZGmpAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUgnwF05FpuWUnRc83pEhyz7KYN4EwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzUyZTMxMzczOTJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIw
MzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsOzxDANBgkqhkiG9w0BAQsFAAOCAQEAS91S
O5FUlpZ1PhxjjU76XN8Xp1E7gukGAHW7sFTdqPOyDWVc9u4t7c6U820cmTlNbKep
YsEvJlq1FO7V0YZzOCQmPR852c31zf6Z/QcFIfHnt0aIfuFMy14VKuCIltYvYpJT
Brmy4LOv7Pltc9vQWT3LyGKTwZiPhZ1Lb4qUxaVC1prU5Dz5LobjOon+uDhTvjXI
fvC2cVVrf4JIbFmgBVZhn+zvkGecRg8SfHT0aQA2kcR4TlrC/YVpTLy6UebxWel2
25cxHpC6biVbwJnnQXFyV9nAFIAbQ3FKWgd8vqWDkQzjOCNBgwmneYY0UJzS4iMe
EaXjUyl0tywJGVVOgA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net