Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
File:                     3231322e3130372e31362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          cCzpo3AEUX/9AOl/PdahH+Qm3MyZzEVdEye+8e0v4mQ=
Subject key identifier:   5D:CE:4E:B1:85:B5:68:47:46:A8:08:F0:DF:DE:D8:9C:25:45:68:3C
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       6864BF0296073602562AA27DE6C4100121EBB4EB
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:54 +0000
ROA not before:           Sat 22 Oct 2022 04:28:54 +0000
ROA not after:            Sat 21 Oct 2023 04:33:54 +0000
asID:                     47583
IP address blocks:        212.107.16.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:bf:02:96:07:36:02:56:2a:a2:7d:e6:c4:10:01:21:eb:b4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:54 2022 GMT
            Not After : Oct 21 04:33:54 2023 GMT
        Subject: CN=5DCE4EB185B5684746A808F0DFDED89C2545683C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:b6:6c:b5:ac:9f:06:57:c2:72:bc:46:26:
                    57:9e:39:e5:d4:fd:b1:2f:31:19:ac:93:35:35:16:
                    37:6f:bb:a5:53:69:00:b1:1f:f5:57:56:23:a6:51:
                    c1:ae:06:1b:be:d3:25:f8:9a:46:bc:03:3f:c3:f5:
                    fb:ac:d8:68:68:6e:b1:c3:45:c3:ad:ba:e0:fd:09:
                    c3:7f:c7:2e:4a:73:ee:74:16:37:07:40:59:eb:5a:
                    bb:46:63:0f:25:40:9b:9e:91:ed:78:a5:21:41:e5:
                    d5:ce:ce:e0:4d:3f:e1:f8:a9:99:95:1d:42:9f:80:
                    72:3a:8d:4a:6f:de:49:73:de:e6:93:99:a0:3c:30:
                    ce:ea:7f:08:39:1e:61:a8:62:ae:d3:ca:ff:70:c8:
                    b8:ca:f7:b8:d8:37:2f:f0:3e:27:13:de:ae:f5:b8:
                    73:af:8d:43:ce:4f:b1:0e:74:a4:09:9c:71:64:11:
                    8b:99:d5:01:fd:f3:05:af:e3:cd:ff:62:48:33:f9:
                    6e:0a:e2:b1:7e:ab:ec:c2:3b:85:3f:3c:7a:d0:12:
                    81:f1:7f:d3:a6:5c:0b:2c:72:de:e0:17:4b:60:d1:
                    34:44:06:91:53:d3:0a:b0:6b:b4:c3:bd:a6:17:bc:
                    24:02:96:d5:92:94:13:38:40:af:96:38:46:71:2e:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:4E:B1:85:B5:68:47:46:A8:08:F0:DF:DE:D8:9C:25:45:68:3C
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.107.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:14:b9:16:2e:4e:08:fb:d7:a7:4a:d8:b9:e9:b2:50:d7:70:
         ae:f9:ed:c3:71:6c:80:aa:33:43:c4:98:d4:91:c1:6b:66:3b:
         8a:f0:12:d9:eb:aa:07:4c:46:ca:af:b3:da:c1:52:fb:64:e8:
         6a:45:5b:c2:d6:a0:c2:cd:5c:ba:75:61:31:05:92:22:97:8b:
         af:c5:a2:82:dd:04:81:77:5b:87:60:63:6f:12:7e:3d:cb:8d:
         d8:f4:a9:2b:04:f5:a4:f8:51:b0:4e:f3:61:2c:58:c8:c7:4e:
         f2:c1:a4:3b:17:91:47:8b:a0:f7:1d:23:01:43:85:c4:05:3f:
         09:90:d3:fd:b8:b3:2c:c1:61:eb:ed:bf:15:cd:de:8e:7d:94:
         33:70:ae:42:9f:d2:9c:f5:89:a3:73:5a:c6:89:1e:41:78:11:
         03:b5:fc:19:d9:8a:6d:96:2c:7a:1c:71:92:f6:4a:d3:bc:72:
         a9:ab:46:94:94:aa:2a:37:8b:be:79:0e:d0:bc:29:f9:79:eb:
         c8:2f:eb:71:9b:b9:44:cc:9e:3c:2e:02:d2:1f:c9:5e:16:52:
         08:b2:bf:66:4f:9a:65:ba:e8:0b:30:e3:87:db:3b:0b:90:f5:
         8c:07:32:06:bd:64:5b:af:b5:f7:d1:5f:1f:2f:5d:b6:a4:ee:
         2b:a5:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net