Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa
File:                     38352e3139302e3234362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          O2j8uImHijJ4jLfq5gB53yWcL15HruTPjNjSL0AQ7mw=
Subject key identifier:   FC:81:70:2A:4D:D8:02:07:EA:31:D8:32:1F:A1:12:1B:39:2B:AF:A0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       44C7BDC3405BC019AB50780E4F3CCDB04941ED02
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:34 +0000
ROA not before:           Sat 22 Oct 2022 04:29:34 +0000
ROA not after:            Sat 21 Oct 2023 04:34:34 +0000
asID:                     51167
IP address blocks:        85.190.246.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c7:bd:c3:40:5b:c0:19:ab:50:78:0e:4f:3c:cd:b0:49:41:ed:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:34 2022 GMT
            Not After : Oct 21 04:34:34 2023 GMT
        Subject: CN=FC81702A4DD80207EA31D8321FA1121B392BAFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cc:fe:86:fc:41:51:0c:f1:5f:69:63:93:d7:
                    44:0e:8f:ee:dc:73:61:42:72:0a:12:5a:55:7b:b4:
                    68:54:3b:74:55:ce:94:5b:33:15:5f:33:8b:5e:9a:
                    a6:02:8a:5d:35:29:68:79:ab:bb:34:37:8e:7a:62:
                    ee:8f:ee:65:70:c4:5d:1e:8e:d0:ee:5e:e6:a2:fd:
                    0c:db:96:5c:35:c5:72:4f:f3:29:45:d0:4d:25:fd:
                    7b:2e:2b:de:30:b5:c2:bc:12:91:21:38:35:06:70:
                    35:1f:62:7e:b2:6d:8d:95:82:12:4f:c8:44:51:4d:
                    fb:dd:62:d4:89:8e:0e:a8:63:89:c0:94:d3:9a:03:
                    5a:0b:ca:43:c0:44:b4:df:67:01:e2:08:ed:e0:f8:
                    e1:51:99:f0:e7:5b:c9:92:88:ca:76:46:35:80:0c:
                    9b:a4:5e:ea:9a:54:d5:e8:a1:0a:7d:ff:b4:04:a2:
                    91:ad:55:33:9c:33:0f:50:be:63:4b:03:d1:de:49:
                    05:55:69:0b:6e:38:7d:8a:0e:a4:3c:1b:c6:cd:68:
                    a9:e6:40:36:fe:6b:84:5d:a2:f6:43:f5:71:10:02:
                    c7:c1:89:72:e3:2e:64:68:a8:0f:d3:ca:bd:ac:c0:
                    f0:2e:13:50:05:9f:f1:9b:2a:ca:f0:71:dd:fa:0a:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:70:2A:4D:D8:02:07:EA:31:D8:32:1F:A1:12:1B:39:2B:AF:A0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.190.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d3:56:fb:4d:ea:74:8f:e6:b7:de:f5:02:70:84:25:4a:4b:
         08:43:a9:41:3c:5a:0e:77:a3:67:17:ce:25:4c:4b:d7:2b:14:
         0d:ae:7c:25:ed:b9:dc:54:a0:91:5f:50:03:88:70:ca:9f:75:
         1c:f9:25:e3:93:4d:55:af:33:4c:07:de:db:6f:ef:c6:44:60:
         e1:18:a5:fe:69:2a:bb:47:bc:15:f4:b5:ff:1e:ce:d2:90:e0:
         c1:4a:bf:b3:0a:7b:0d:fe:de:0f:1a:31:d7:f8:5b:b7:0a:9b:
         e7:2f:77:ce:43:e7:03:39:b4:f1:ba:90:bc:24:4a:e4:b1:93:
         f4:ed:69:14:83:ba:ae:d7:1d:d3:8f:7c:4a:3d:c0:a8:93:6e:
         98:cf:b6:fd:17:ba:a7:38:38:b9:77:a4:45:8b:c3:02:99:23:
         e5:29:15:9b:f3:93:22:be:51:44:68:11:91:a0:f2:28:d8:5b:
         4f:c9:c0:02:31:24:4e:e3:d1:f3:3e:3b:b8:8f:a6:db:e1:35:
         32:9e:a6:ed:91:62:c1:5e:27:eb:c1:cc:a3:e3:fa:a6:51:ca:
         8d:09:a1:89:00:73:be:f6:18:b1:6b:3b:87:8b:95:74:d6:0d:
         b7:29:9a:7f:a5:1a:d9:d2:3d:37:96:53:37:fe:9b:fd:c2:5a:
         27:b3:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net