Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20313336373837.roa
File:                     33312e3138372e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          qp5nn76MUaF45oEbRHngEvmC0O4z8l7b2D6hC+RIgHw=
Subject key identifier:   B7:D9:0B:39:D5:9C:18:67:C0:5F:8D:DB:F3:B7:9C:5E:2B:4A:76:A6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       05C883E8946B85944F6575391B9FD73D1BE975C0
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:32 +0000
ROA not before:           Sat 22 Oct 2022 04:29:32 +0000
ROA not after:            Sat 21 Oct 2023 04:34:32 +0000
asID:                     136787
IP address blocks:        31.187.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c8:83:e8:94:6b:85:94:4f:65:75:39:1b:9f:d7:3d:1b:e9:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:32 2022 GMT
            Not After : Oct 21 04:34:32 2023 GMT
        Subject: CN=B7D90B39D59C1867C05F8DDBF3B79C5E2B4A76A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:d9:67:15:b7:34:96:16:6c:e6:1a:02:79:
                    ae:d1:1e:41:81:5c:b7:68:ce:98:dd:c3:05:1a:55:
                    12:32:7a:af:5e:a3:9b:2b:4c:2a:e3:00:20:0b:2f:
                    90:68:13:cb:66:8b:1b:5e:10:f3:88:5c:0a:b8:af:
                    57:97:52:67:95:2a:d5:f6:6b:ed:c7:6f:2c:0a:95:
                    5f:b3:46:25:5c:05:00:59:85:5e:d6:37:de:14:24:
                    6e:15:ad:60:85:22:6a:01:b9:c0:91:79:fc:0d:47:
                    d0:ff:72:66:c8:fa:97:8d:9d:8c:d1:e2:f7:59:1a:
                    3d:5a:8c:a7:ea:bc:b4:d0:42:57:60:cc:89:2f:9a:
                    08:b0:f7:65:36:00:2a:1a:91:6f:f7:7d:18:41:2b:
                    15:79:ad:bd:75:b2:44:72:4f:90:d9:c2:e6:df:32:
                    da:d1:a2:ed:2e:0f:4a:7c:84:a6:a8:5b:fc:53:f3:
                    45:ff:6e:47:e3:ba:a4:11:f1:51:b0:d0:47:76:e7:
                    16:c0:c2:f5:cd:c0:15:93:bc:1d:49:5e:18:6e:2c:
                    29:c2:46:a3:c7:7b:0a:8f:0d:21:44:97:f1:0d:b0:
                    29:09:08:4f:46:b1:03:d1:77:39:d7:9c:69:80:c8:
                    d4:87:7e:9d:08:36:15:80:ce:08:8d:e7:98:7c:9e:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:0B:39:D5:9C:18:67:C0:5F:8D:DB:F3:B7:9C:5E:2B:4A:76:A6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:08:70:0f:bb:06:23:ee:a1:c7:cf:ec:70:3f:4b:dd:7b:
         21:93:58:87:00:f4:b7:e9:c9:a8:e0:db:0b:97:78:e6:ba:2d:
         60:ea:17:0e:96:54:b2:12:01:13:8c:f7:ea:b3:24:82:db:fa:
         d4:cd:9d:1c:10:22:55:2d:90:e6:00:89:6d:ba:29:a9:f9:9a:
         03:54:0d:c7:27:cf:46:89:73:33:01:84:40:60:2a:7c:d3:39:
         ac:76:17:22:bf:71:40:39:37:ea:22:3e:40:61:21:8a:cb:84:
         ac:9e:6f:4b:ec:5b:85:3a:e5:58:12:ca:8a:73:51:5d:40:4e:
         81:e1:c1:c0:f0:70:c3:7b:82:1c:cb:b8:19:4a:b3:e3:f4:0e:
         18:6e:d8:fd:e9:36:9a:39:65:08:72:03:f3:fd:e5:d8:cc:59:
         c5:1b:7e:fc:49:53:ff:e9:6d:b1:cc:1d:1a:43:8b:ef:93:e4:
         a1:c6:07:93:8e:da:1c:27:60:02:39:eb:13:ab:8f:a3:66:af:
         f3:84:0b:0b:41:cf:0e:be:14:84:55:a4:72:e8:19:25:91:74:
         0d:7e:47:c3:ad:a7:11:47:50:84:72:3f:56:2b:61:62:9d:c0:
         3a:1b:53:e1:f9:83:0f:74:7b:35:88:ad:49:3f:c1:10:a4:f4:
         bb:f7:a6:45
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUBciD6JRrhZRPZXU5G5/XPRvpdcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzJaFw0yMzEwMjEwNDM0MzJaMDMxMTAvBgNV
BAMTKEI3RDkwQjM5RDU5QzE4NjdDMDVGOEREQkYzQjc5QzVFMkI0QTc2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsutlnFbc0lhZs5hoCea7RHkGB
XLdozpjdwwUaVRIyeq9eo5srTCrjACALL5BoE8tmixteEPOIXAq4r1eXUmeVKtX2
a+3HbywKlV+zRiVcBQBZhV7WN94UJG4VrWCFImoBucCRefwNR9D/cmbI+peNnYzR
4vdZGj1ajKfqvLTQQldgzIkvmgiw92U2ACoakW/3fRhBKxV5rb11skRyT5DZwubf
MtrRou0uD0p8hKaoW/xT80X/bkfjuqQR8VGw0Ed25xbAwvXNwBWTvB1JXhhuLCnC
RqPHewqPDSFEl/ENsCkJCE9GsQPRdznXnGmAyNSHfp0INhWAzgiN55h8nuVxAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUt9kLOdWcGGfAX43b87ecXitKdqYwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMzMxMmUzMTM4MzcyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMz
MzYzNzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAfu0kwDQYJKoZIhvcNAQELBQADggEBAGqKCHAP
uwYj7qHHz+xwP0vdeyGTWIcA9Lfpyajg2wuXeOa6LWDqFw6WVLISAROM9+qzJILb
+tTNnRwQIlUtkOYAiW26Kan5mgNUDccnz0aJczMBhEBgKnzTOax2FyK/cUA5N+oi
PkBhIYrLhKyeb0vsW4U65VgSyopzUV1AToHhwcDwcMN7ghzLuBlKs+P0Dhhu2P3p
Npo5ZQhyA/P95djMWcUbfvxJU//pbbHMHRpDi++T5KHGB5OO2hwnYAI56xOrj6Nm
r/OECwtBzw6+FIRVpHLoGSWRdA1+R8OtpxFHUIRyP1YrYWKdwDobU+H5gw90ezWI
rUk/wRCk9Lv3pkU=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net