Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa
File:                     33312e3138372e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          vecgUZ4ejzhzQmPVkhL2d/S6KKqrGHbXnnvKgEXmXeI=
Subject key identifier:   6D:FB:D2:F8:16:53:73:84:22:33:C7:AC:92:4A:AF:11:44:FF:E7:26
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5A4F32B9477AA2122D5D8C2CBC7030D551DC2F2F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 07 Nov 2022 11:00:13 +0000
ROA not before:           Mon 07 Nov 2022 10:55:13 +0000
ROA not after:            Mon 06 Nov 2023 11:00:13 +0000
asID:                     136787
IP address blocks:        31.187.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:32:b9:47:7a:a2:12:2d:5d:8c:2c:bc:70:30:d5:51:dc:2f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov  7 10:55:13 2022 GMT
            Not After : Nov  6 11:00:13 2023 GMT
        Subject: CN=6DFBD2F8165373842233C7AC924AAF1144FFE726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2b:2d:55:8f:21:b6:dd:9f:5a:a3:e4:60:0f:
                    a9:8f:39:8d:3f:99:c0:b3:1c:ab:5f:c9:72:e1:0d:
                    a0:17:e0:be:eb:d7:cb:a6:7a:c7:01:f5:c7:ae:62:
                    c9:9b:a8:0a:a5:f5:d6:56:f8:88:be:7e:d4:04:b8:
                    0a:cf:ce:43:dd:32:58:40:a3:81:43:4b:59:a2:eb:
                    6b:0c:fb:bc:2f:d2:8d:26:c9:47:98:61:ff:d7:f7:
                    f2:f5:c3:77:2a:3f:68:0b:3c:69:ba:6d:d8:d1:44:
                    01:71:94:3d:1c:7e:1e:1b:7f:46:e8:78:34:62:83:
                    08:24:3d:bf:54:09:4a:ba:8f:cc:51:c2:89:d9:a9:
                    a6:23:97:72:23:4e:77:a1:b1:47:60:7f:2e:fe:20:
                    34:4f:91:dd:1f:1c:1b:c8:95:10:25:4e:7a:1c:76:
                    c6:c1:20:25:0a:83:f4:70:48:c8:58:10:02:2a:9b:
                    7a:b1:02:56:b3:52:bb:4e:34:20:10:b5:08:ac:07:
                    d5:63:e1:c5:96:a4:c5:2c:73:c8:a7:3f:e8:f0:77:
                    06:81:ea:dd:83:3c:69:3a:1f:64:1d:1f:16:52:98:
                    5c:9e:97:0a:9c:03:8a:43:51:e7:de:a7:e4:52:01:
                    f3:89:55:c8:75:35:b9:f3:e1:eb:71:8e:ba:43:89:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FB:D2:F8:16:53:73:84:22:33:C7:AC:92:4A:AF:11:44:FF:E7:26
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:2b:ab:cf:80:b8:37:50:c7:ca:5e:6e:b2:8e:21:dc:45:0a:
         de:77:0a:57:13:10:92:cb:5e:d7:dd:50:9d:73:c3:03:9f:68:
         aa:f9:fd:29:06:32:c6:8a:26:94:70:ae:cb:07:16:7a:e6:f8:
         06:a8:81:aa:6f:96:33:76:34:80:37:ca:14:ae:58:b6:5b:3a:
         a8:59:b0:65:11:d0:8f:c7:a2:c0:9e:ae:79:97:fb:29:ef:c9:
         0b:a1:02:a3:e3:bd:6b:18:07:40:5a:25:cb:3a:14:22:7e:6e:
         40:1e:de:13:be:70:6c:da:72:a9:90:b4:23:34:c7:07:83:27:
         5c:d8:91:3a:91:b9:9b:b9:cb:91:d4:9d:ab:66:b5:b4:9c:15:
         21:68:20:15:b7:8b:7e:de:57:3b:54:03:4c:0d:b3:18:bd:f9:
         f9:6b:75:32:fb:0a:7d:9e:04:ab:a7:91:27:00:3e:32:7f:61:
         bf:e3:70:2c:78:e7:67:db:b0:27:01:9c:a1:11:9a:0c:73:b6:
         64:cd:a7:15:57:f8:8a:5b:b7:53:3b:da:9f:2d:d7:69:9e:e7:
         bd:59:f9:bf:55:8e:c9:b2:6c:02:79:2d:48:07:0e:06:f7:ab:
         a4:56:55:72:3d:00:87:96:be:25:0c:af:90:7a:f2:38:cd:03:
         df:fe:02:7f
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUWk8yuUd6ohItXYwsvHAw1VHcLy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjExMDcxMDU1MTNaFw0yMzExMDYxMTAwMTNaMDMxMTAvBgNV
BAMTKDZERkJEMkY4MTY1MzczODQyMjMzQzdBQzkyNEFBRjExNDRGRkU3MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKy1VjyG23Z9ao+RgD6mPOY0/
mcCzHKtfyXLhDaAX4L7r18umescB9ceuYsmbqAql9dZW+Ii+ftQEuArPzkPdMlhA
o4FDS1mi62sM+7wv0o0myUeYYf/X9/L1w3cqP2gLPGm6bdjRRAFxlD0cfh4bf0bo
eDRigwgkPb9UCUq6j8xRwonZqaYjl3IjTnehsUdgfy7+IDRPkd0fHBvIlRAlTnoc
dsbBICUKg/RwSMhYEAIqm3qxAlazUrtONCAQtQisB9Vj4cWWpMUsc8inP+jwdwaB
6t2DPGk6H2QdHxZSmFyelwqcA4pDUefep+RSAfOJVch1Nbnz4etxjrpDiRnzAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUbfvS+BZTc4QiM8eskkqvEUT/5yYwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMzMxMmUzMTM4MzcyZTM3MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMz
MzYzNzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAfu04wDQYJKoZIhvcNAQELBQADggEBAKYrq8+A
uDdQx8pebrKOIdxFCt53ClcTEJLLXtfdUJ1zwwOfaKr5/SkGMsaKJpRwrssHFnrm
+AaogapvljN2NIA3yhSuWLZbOqhZsGUR0I/HosCernmX+ynvyQuhAqPjvWsYB0Ba
Jcs6FCJ+bkAe3hO+cGzacqmQtCM0xweDJ1zYkTqRuZu5y5HUnatmtbScFSFoIBW3
i37eVztUA0wNsxi9+flrdTL7Cn2eBKunkScAPjJ/Yb/jcCx452fbsCcBnKERmgxz
tmTNpxVX+Ipbt1M72p8t12me571Z+b9VjsmybAJ5LUgHDgb3q6RWVXI9AIeWviUM
r5B68jjNA9/+An8=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net