Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
File:                     37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          BkKPxSxd7tjqTSZDKlFOX32v+5VXp6pJNCXaDtGl6aY=
Subject key identifier:   AC:46:75:61:76:34:16:83:F6:34:78:D5:DE:A0:67:24:9D:6D:E6:13
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       47CE9973D277CFC796F49968F6D28DAC246A3D2C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:33 +0000
ROA not before:           Sat 22 Oct 2022 04:29:33 +0000
ROA not after:            Sat 21 Oct 2023 04:34:33 +0000
asID:                     201341
IP address blocks:        77.237.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ce:99:73:d2:77:cf:c7:96:f4:99:68:f6:d2:8d:ac:24:6a:3d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:33 2022 GMT
            Not After : Oct 21 04:34:33 2023 GMT
        Subject: CN=AC46756176341683F63478D5DEA067249D6DE613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:69:53:59:99:65:1c:44:ea:27:c0:8f:69:
                    35:97:47:f2:16:18:f0:34:18:41:6b:48:fd:7e:db:
                    ce:a6:3e:37:b3:ea:c9:33:f1:3c:af:9f:43:5d:a5:
                    e8:38:24:b3:9c:11:9f:16:de:a3:9e:8e:dd:1a:01:
                    47:4b:dd:50:38:f2:9a:35:83:fc:57:67:cf:13:81:
                    12:5e:cf:e5:74:4c:9f:d3:cf:be:a6:3e:1e:ce:27:
                    8f:7e:25:a3:90:a9:a9:1c:4d:d6:31:d2:b8:28:b6:
                    57:ae:83:a6:ba:fa:f2:0e:a4:8a:e5:c8:0a:57:bb:
                    11:20:68:15:d5:e0:c3:a4:66:7b:97:cc:4c:ea:f6:
                    57:c0:83:9d:b8:1b:93:a5:88:07:95:c0:1d:6c:f4:
                    03:11:2b:7b:c6:fd:7e:d2:0f:22:78:8e:9d:61:d0:
                    53:2b:53:11:d7:95:93:f2:24:19:c1:35:4f:a8:65:
                    fe:e4:eb:5f:ed:8e:9c:4b:a3:65:3c:e5:b5:d4:d2:
                    1c:c8:83:0b:72:00:5a:a4:44:2e:5e:98:46:06:d0:
                    7e:13:58:d2:bb:4b:90:99:81:a7:bc:ae:3e:0e:56:
                    0f:31:5b:ea:0b:50:cb:8b:9f:4b:7e:f6:31:83:64:
                    a5:7d:7e:c8:4e:24:47:69:3b:ff:c4:fa:17:65:4a:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:75:61:76:34:16:83:F6:34:78:D5:DE:A0:67:24:9D:6D:E6:13
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.237.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:2b:b6:f8:2c:bd:59:ea:ab:18:27:fd:af:4a:57:9b:8d:9c:
         4f:29:f0:e4:48:dc:ea:8e:c2:af:e7:bb:49:be:b4:bb:1d:79:
         25:93:c5:9b:73:11:ba:82:2e:29:1f:19:b3:a1:1c:5d:4d:d0:
         5b:a5:3c:0d:82:51:5f:4f:c7:a6:0e:da:a7:ef:51:3d:7f:16:
         a4:5e:22:08:dc:2a:47:95:12:af:a0:d4:af:a9:cd:f0:47:b9:
         0c:70:b7:de:0c:0b:7e:fe:d7:90:41:11:90:29:1b:50:40:a6:
         f8:d9:7b:56:d6:07:fa:de:fb:b8:f6:ab:52:fc:a2:a5:ee:b7:
         4f:f4:d0:8e:ad:b8:57:84:d1:6b:ca:67:07:f4:87:1a:05:5c:
         b5:44:80:9d:99:0b:d6:66:0e:d4:12:5e:8f:74:26:de:c0:68:
         c3:f3:9b:ad:50:b1:21:a2:39:3c:cb:3a:c3:6c:e3:0a:23:f1:
         d7:9a:ed:1c:45:9f:ae:db:a2:ab:7f:4d:55:48:87:03:10:b6:
         e0:d5:df:61:f2:d3:dd:1a:3b:bf:e7:35:55:24:99:fc:94:be:
         f8:b3:0f:e1:d2:4a:3a:c7:4f:91:89:e4:ea:11:8d:60:8e:ef:
         48:28:fa:58:58:65:44:21:03:cb:72:6e:a2:1a:41:f5:6a:de:
         1b:a0:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net