Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e372e302f32342d3332203d3e20313336373837.roa
File:                     38362e34382e372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          RZ9QYs7GcGaCw2cteoXZShMdcEw7QP4g7CjBCEMnJ6M=
Subject key identifier:   AB:1E:0D:BF:3A:D2:B7:2D:7E:43:85:07:A3:EC:19:A9:7D:DB:0E:1E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       029041D30B8A725B8C84EF4405F67528EBCA39A4
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e372e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:44:10 +0000
ROA not before:           Wed 28 Dec 2022 09:39:10 +0000
ROA not after:            Wed 27 Dec 2023 09:44:10 +0000
asID:                     136787
IP address blocks:        86.48.7.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:90:41:d3:0b:8a:72:5b:8c:84:ef:44:05:f6:75:28:eb:ca:39:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:39:10 2022 GMT
            Not After : Dec 27 09:44:10 2023 GMT
        Subject: CN=AB1E0DBF3AD2B72D7E438507A3EC19A97DDB0E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c6:26:c9:71:cb:1e:44:84:63:14:90:bf:83:
                    01:f1:ad:66:cd:ba:0a:4a:02:85:22:1d:12:de:39:
                    be:91:07:e2:0a:7e:05:b2:0a:34:f5:d8:8f:f8:8e:
                    60:f1:da:eb:81:13:cb:d0:f1:42:84:98:7a:c1:eb:
                    ef:0c:8d:3a:b9:67:cc:58:ea:c7:0b:d5:74:da:6d:
                    c7:fe:d0:64:b1:3c:e4:de:b4:ee:1f:60:b9:bc:ef:
                    40:59:64:4d:4f:10:47:f0:46:a9:4d:03:8f:a9:ae:
                    a7:ea:67:57:80:0c:bb:62:23:c9:06:14:ae:39:9a:
                    ef:99:02:76:1a:e7:fd:63:9c:55:0c:fe:4b:78:ac:
                    ca:4d:5b:f5:69:bd:0a:fb:3d:d1:ae:90:cd:dd:bb:
                    7c:d8:6c:13:0b:fa:41:bc:5b:45:6b:b3:5c:8b:8a:
                    95:a2:6e:83:9a:8a:e2:af:43:c8:be:8b:19:6f:22:
                    6f:96:e8:f8:e8:53:26:50:2b:65:6b:70:3e:dd:8d:
                    ee:29:68:94:f6:16:36:a2:fc:4b:a9:f7:d4:c6:84:
                    64:45:a3:6f:fd:3f:f2:9b:e9:b4:ac:24:0f:36:38:
                    88:42:19:4d:5a:d0:5a:4e:ee:52:41:bc:31:09:a1:
                    5e:77:1f:15:15:02:6c:75:70:d8:ae:25:10:d4:e6:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1E:0D:BF:3A:D2:B7:2D:7E:43:85:07:A3:EC:19:A9:7D:DB:0E:1E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e372e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.48.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:6a:2a:16:54:7e:92:af:b8:87:71:5c:59:77:2b:2b:aa:
         23:8b:9f:c1:a9:4f:7d:91:11:98:62:17:a5:8d:9c:b8:00:24:
         b9:49:26:d1:3e:b7:cf:a2:c7:17:e9:43:20:a3:09:ec:3c:3a:
         3c:c6:a7:54:08:e9:eb:eb:76:4f:8d:27:fb:dc:73:5a:8d:4c:
         65:f0:01:69:63:b4:32:8d:41:c6:ed:ce:3c:ae:c5:52:d6:b6:
         99:b8:6d:eb:05:41:20:04:4b:83:84:4a:17:63:9b:f0:89:33:
         e9:04:4e:91:06:4d:3f:79:9a:a3:58:29:b4:47:5f:a3:b0:0a:
         70:ba:cc:f4:ec:1f:27:9e:1e:f6:22:25:89:64:16:ee:ad:46:
         82:dc:dc:67:1c:ff:1a:0d:e6:ae:eb:d9:3e:ef:0f:99:2f:dc:
         d0:0c:8b:6b:10:3d:d4:aa:91:d9:e0:83:51:8b:7d:5c:df:69:
         00:b3:59:5f:82:2e:f8:18:5b:60:8b:14:e5:b7:9e:87:fc:65:
         eb:52:f9:0f:60:b6:87:1f:c0:72:91:86:4a:f2:e8:e3:19:92:
         19:8d:11:b1:f8:cd:d5:f4:fa:02:f4:a1:b8:b4:c0:97:96:e3:
         1e:96:ab:04:a2:c8:06:13:cd:f5:2a:18:ef:17:cf:2a:9f:ff:
         e7:ac:65:87
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUApBB0wuKcluMhO9EBfZ1KOvKOaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMjgwOTM5MTBaFw0yMzEyMjcwOTQ0MTBaMDMxMTAvBgNV
BAMTKEFCMUUwREJGM0FEMkI3MkQ3RTQzODUwN0EzRUMxOUE5N0REQjBFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixibJccseRIRjFJC/gwHxrWbN
ugpKAoUiHRLeOb6RB+IKfgWyCjT12I/4jmDx2uuBE8vQ8UKEmHrB6+8MjTq5Z8xY
6scL1XTabcf+0GSxPOTetO4fYLm870BZZE1PEEfwRqlNA4+prqfqZ1eADLtiI8kG
FK45mu+ZAnYa5/1jnFUM/kt4rMpNW/VpvQr7PdGukM3du3zYbBML+kG8W0Vrs1yL
ipWiboOaiuKvQ8i+ixlvIm+W6PjoUyZQK2VrcD7dje4paJT2Fjai/Eup99TGhGRF
o2/9P/Kb6bSsJA82OIhCGU1a0FpO7lJBvDEJoV53HxUVAmx1cNiuJRDU5qXnAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUqx4NvzrSty1+Q4UHo+wZqX3bDh4wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODM2MmUzNDM4MmUzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAFYwBzANBgkqhkiG9w0BAQsFAAOCAQEAjipqKhZUfpKv
uIdxXFl3KyuqI4ufwalPfZERmGIXpY2cuAAkuUkm0T63z6LHF+lDIKMJ7Dw6PMan
VAjp6+t2T40n+9xzWo1MZfABaWO0Mo1Bxu3OPK7FUta2mbht6wVBIARLg4RKF2Ob
8Ikz6QROkQZNP3mao1gptEdfo7AKcLrM9OwfJ54e9iIliWQW7q1GgtzcZxz/Gg3m
ruvZPu8PmS/c0AyLaxA91KqR2eCDUYt9XN9pALNZX4Iu+BhbYIsU5beeh/xl61L5
D2C2hx/AcpGGSvLo4xmSGY0RsfjN1fT6AvShuLTAl5bjHparBKLIBhPN9SoY7xfP
Kp//56xlhw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net