Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
File:                     3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa (raw, json)
Hash identifier:          53MiBRtv4Qb6IBtk3FZyfy7vqKl6yo6SchrKJTizQ+E=
Subject key identifier:   B2:06:62:0A:42:74:D8:8F:4A:2D:59:D7:95:BD:0E:E9:B4:EC:CC:FA
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       2B526E474E6CC909FD7E1B301ACB044952B80044
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
Signing time:             Sat 22 Oct 2022 04:33:53 +0000
ROA not before:           Sat 22 Oct 2022 04:28:53 +0000
ROA not after:            Sat 21 Oct 2023 04:33:53 +0000
asID:                     396319
IP address blocks:        194.55.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:52:6e:47:4e:6c:c9:09:fd:7e:1b:30:1a:cb:04:49:52:b8:00:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:53 2022 GMT
            Not After : Oct 21 04:33:53 2023 GMT
        Subject: CN=B206620A4274D88F4A2D59D795BD0EE9B4ECCCFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:7b:34:81:bf:54:7a:92:ed:65:02:c5:d6:
                    c6:4e:a5:4b:07:51:fe:fd:21:4c:04:96:f7:90:8b:
                    00:b7:a2:3e:2f:d2:9f:cf:53:a4:bb:70:ca:d2:80:
                    21:12:9a:01:b0:55:2d:69:5a:7b:65:f1:4e:09:e1:
                    5d:37:88:33:4a:10:c9:de:2d:f5:09:49:f3:c0:6d:
                    44:51:0a:f2:db:d3:4e:20:1e:47:66:1d:5c:c3:e0:
                    d1:4f:e7:ea:5e:9a:67:35:2a:9b:f4:61:e4:f7:d2:
                    fd:29:52:e6:3f:4b:44:5b:9a:b8:ee:c7:d7:f6:4d:
                    48:80:21:cb:ab:85:42:75:da:9d:8f:34:bb:c9:81:
                    fc:af:3b:d7:d7:53:20:ee:60:77:e3:f2:ee:55:89:
                    0c:09:37:67:fc:5b:51:cf:cd:7f:a4:6a:c1:70:37:
                    a2:05:5e:e2:73:f6:89:c7:68:af:63:11:84:30:9d:
                    f3:2f:66:41:22:9e:27:4f:d5:de:81:69:61:bc:28:
                    5f:ce:49:c5:95:68:3d:67:3f:39:15:ea:02:fa:61:
                    23:5d:22:be:c7:93:72:a5:eb:23:f1:9a:17:3b:c0:
                    2b:57:ba:d7:59:c6:9e:c6:95:84:e9:16:47:4c:03:
                    4f:e1:84:0e:4a:4b:e7:be:f0:66:22:5f:3d:26:65:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:06:62:0A:42:74:D8:8F:4A:2D:59:D7:95:BD:0E:E9:B4:EC:CC:FA
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.55.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:a6:56:cd:ee:06:27:a6:81:47:38:2b:7a:16:16:5f:33:58:
         4d:5b:d9:89:93:75:6b:c7:40:be:20:81:b6:a7:fe:67:2f:e9:
         d0:4a:02:4a:be:22:10:c3:c0:52:71:ee:c9:7b:9f:08:cc:7f:
         f7:83:43:0e:9f:1d:f1:6d:69:d1:2a:d0:5c:79:20:84:d6:ff:
         a7:e7:6f:18:ad:8f:a9:77:6d:81:ed:b1:1c:c4:32:9b:84:ff:
         d8:5f:b3:48:e0:3a:01:cd:87:8b:02:4d:24:ca:5d:bd:af:f6:
         f5:80:15:0a:4d:25:96:12:02:c6:ca:b7:42:44:be:42:ae:2d:
         21:8f:88:b8:07:a4:f9:bd:9f:50:46:0e:51:d0:25:de:1c:75:
         eb:af:88:3b:f5:80:c3:df:b3:8f:ac:6d:30:ae:dc:3f:9d:7c:
         c6:e5:c7:3a:8b:04:2d:e9:a6:2a:00:0f:fc:50:e2:8e:f1:a2:
         af:53:a3:da:28:c2:9a:cd:2c:1e:01:5d:d2:fe:e3:9d:6e:c2:
         27:22:7c:9a:b3:8f:9f:e8:b5:99:4b:41:96:ee:55:a1:2a:a0:
         47:27:79:c6:ed:2f:46:3c:aa:c4:cf:2c:24:fc:07:53:49:2f:
         8d:f6:0a:d6:a9:10:09:dc:72:11:b0:97:42:34:1c:14:ec:a8:
         f9:d6:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net