Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232362e302f32342d3234203d3e20323031333431.roa
File:                     37372e3233372e3232362e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          qGPRKawTwgp/ZdZNb4DLPBeHx8+CVUie+X6ULl3rG5s=
Subject key identifier:   17:FC:5A:AE:A0:9C:57:0C:F1:4A:0E:8F:3A:31:61:9B:F5:55:EC:80
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2F0CE62173C6A7C9F6A1D052BAC1FB13554E5827
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232362e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:26 +0000
ROA not before:           Sat 22 Oct 2022 04:29:26 +0000
ROA not after:            Sat 21 Oct 2023 04:34:26 +0000
asID:                     201341
IP address blocks:        77.237.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0c:e6:21:73:c6:a7:c9:f6:a1:d0:52:ba:c1:fb:13:55:4e:58:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:26 2022 GMT
            Not After : Oct 21 04:34:26 2023 GMT
        Subject: CN=17FC5AAEA09C570CF14A0E8F3A31619BF555EC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:28:a5:35:9d:07:9f:ec:27:70:74:a4:d8:
                    ce:ac:85:5d:f7:fa:d6:7b:22:19:f3:77:a8:0f:95:
                    3a:13:74:71:1d:9b:9a:d0:d7:c6:44:40:f1:c7:45:
                    c7:b0:c8:b5:3b:cb:93:2a:77:54:af:65:b5:32:1e:
                    bf:ed:08:df:de:15:f7:89:a1:61:a9:6d:0d:d0:f3:
                    96:ce:b1:25:9d:19:67:b1:27:de:a7:c7:ff:1d:87:
                    2e:77:a2:9c:ac:08:b8:23:0d:db:13:0a:29:7f:2d:
                    e7:dd:65:1b:22:eb:a4:8a:e5:24:66:a9:27:97:a4:
                    54:f0:9d:85:d5:36:dc:78:50:a3:87:5d:31:6d:2e:
                    55:d8:12:2b:2a:11:b1:c2:c0:3e:c8:e5:2e:22:b9:
                    4b:ef:00:ae:17:fe:a7:ac:d9:c6:16:af:ce:94:7f:
                    66:3d:3d:2d:8d:52:63:9b:6e:6e:14:cf:69:3b:1b:
                    51:98:13:6e:56:68:de:74:85:4f:4d:db:81:c3:ac:
                    22:57:75:a0:60:a8:63:cf:71:a4:c8:a9:64:9e:66:
                    59:a7:62:1a:28:b7:39:f8:4d:e0:ad:d6:b3:57:36:
                    b9:fb:57:28:16:8b:c5:34:ad:1b:32:cc:78:b7:1c:
                    78:3c:8c:4a:d4:93:25:9c:1b:05:4b:74:ab:a8:7f:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FC:5A:AE:A0:9C:57:0C:F1:4A:0E:8F:3A:31:61:9B:F5:55:EC:80
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232362e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.237.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:42:23:a0:65:37:e2:0d:88:3e:8b:a7:1e:74:81:a3:7a:a0:
         7a:61:0b:29:9a:16:30:db:51:f8:43:f5:6a:ce:ef:3f:33:57:
         fb:83:53:05:bf:3a:6a:14:d9:bc:cb:1b:5f:5d:c3:39:e6:ca:
         b2:90:3b:a3:7d:52:6e:69:de:83:ca:5f:3e:e1:57:1e:17:3e:
         14:4f:5d:70:10:63:30:13:8f:e1:25:92:51:d5:c4:59:f3:53:
         18:05:1f:ed:78:cc:8c:1e:8e:cf:34:74:e3:17:c3:75:6e:f4:
         09:ec:fc:68:0e:ab:1f:9b:ab:fe:2b:0b:f0:a0:c0:c4:d2:7d:
         70:6a:b2:63:e0:ac:83:7d:24:47:8e:91:27:e6:9e:22:e8:a0:
         0c:6a:d3:4c:d8:2e:7b:1d:94:5b:66:7a:57:ca:a8:b0:1c:af:
         d4:3d:0b:07:67:3c:8d:2f:56:18:69:39:24:52:54:70:3b:be:
         76:af:06:54:ab:26:ae:17:b2:fa:ff:a0:0d:1b:6c:9f:a2:fd:
         a4:a4:8e:0a:10:14:fc:fe:86:2f:c1:49:ae:be:88:be:18:df:
         9e:e9:7d:e5:6d:54:5f:3d:9f:67:ca:65:a6:d7:63:ce:43:fa:
         41:f3:d5:74:8a:7e:b3:3b:4e:be:c7:0c:b2:a4:f5:39:d0:28:
         5c:cc:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net