Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/36322e3139322e3137362e302f32322d3232203d3e20323033303631.roa
File:                     36322e3139322e3137362e302f32322d3232203d3e20323033303631.roa (raw, json)
Hash identifier:          RJHVQ4sw8/e2WgTKpiq+KGidB+YAsN/jJALJo+ZN318=
Subject key identifier:   A4:E0:39:3A:71:6D:97:96:09:C3:15:15:D6:A4:DE:9A:58:9B:B3:2C
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       0813FD068D0FAC7719ECABF4AB9CA940C8B96398
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/36322e3139322e3137362e302f32322d3232203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     203061
IP address blocks:        62.192.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:13:fd:06:8d:0f:ac:77:19:ec:ab:f4:ab:9c:a9:40:c8:b9:63:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=A4E0393A716D979609C31515D6A4DE9A589BB32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:3b:25:30:f0:84:47:60:f0:fc:90:dd:50:
                    d6:e8:5b:a0:b1:54:b6:bd:9d:ce:41:ae:cc:92:69:
                    d1:ea:ef:30:81:1f:40:27:67:da:d2:97:f6:12:d1:
                    a2:c8:2f:3c:c2:24:09:1f:7e:51:97:9a:a6:5b:67:
                    b7:34:67:a8:c9:88:e7:48:4c:a2:6e:c2:d4:cb:1c:
                    5f:8e:eb:77:61:be:9c:55:3b:e3:c8:4f:ac:cf:93:
                    89:53:f2:8b:5c:59:f7:64:b5:c8:6c:5b:b3:71:a2:
                    21:a3:df:c2:b9:bc:1b:9c:79:26:b5:2e:6d:36:b8:
                    85:02:15:5a:ba:d4:92:b2:c5:31:41:d0:78:f5:6f:
                    41:9b:28:d2:1d:21:2b:ba:38:ad:e8:71:b0:e7:18:
                    94:c5:bc:b4:0e:ef:a7:b1:6b:80:d0:02:62:29:80:
                    26:03:d9:2d:38:e6:15:a4:be:88:62:90:95:99:e3:
                    ef:dc:ec:7b:07:35:fd:61:a8:68:a6:f4:42:c4:15:
                    18:b6:8e:f2:a3:f4:7c:9c:fb:cd:46:96:ef:a9:0b:
                    67:ed:b9:9c:0d:f1:f0:ec:2c:78:f8:6e:a5:8a:42:
                    67:14:a5:77:ed:f2:a2:4b:c9:a9:08:bc:53:9e:d8:
                    5d:3b:80:71:a8:46:17:3b:e1:90:01:eb:f2:48:8e:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E0:39:3A:71:6D:97:96:09:C3:15:15:D6:A4:DE:9A:58:9B:B3:2C
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/36322e3139322e3137362e302f32322d3232203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:63:30:b9:97:71:eb:68:1f:25:72:6d:bc:b8:f5:d7:66:f4:
         f8:ed:aa:e5:3a:35:5e:d7:d5:52:fe:48:e2:ff:60:bb:ea:db:
         00:90:8c:34:a0:a3:a5:47:7d:4f:a4:19:f3:7a:6a:d2:5f:9a:
         e5:6a:38:ec:ca:a9:97:67:fe:4f:19:aa:68:f4:80:eb:41:6f:
         2a:a7:36:86:9d:f1:16:a7:7f:fc:72:30:15:7c:1c:a0:39:0c:
         a9:7f:2b:d3:d9:9c:65:3c:f4:90:f6:55:2e:36:0d:f6:5c:73:
         90:f9:e3:04:2c:b5:fa:13:68:90:1b:1b:1a:29:87:7c:88:4f:
         2b:59:77:d2:76:7a:0d:fe:f2:24:05:cf:8f:d7:d2:95:62:16:
         f4:52:87:f0:2c:dd:d3:bd:ba:b3:7e:be:65:41:97:26:fc:da:
         85:00:74:48:64:68:88:4f:15:17:82:75:88:30:f9:b7:86:d8:
         1c:ff:f8:3b:b1:29:ae:d2:7c:81:37:e7:36:01:1a:df:1b:cd:
         19:2b:a2:e2:0f:c6:01:e8:b8:ba:64:c4:2d:4d:0f:91:ad:dd:
         4a:97:3b:51:7d:82:36:ad:7f:b7:e7:d1:33:2a:ee:f1:81:dd:
         19:f0:eb:62:5b:23:e6:1e:08:ae:11:9e:d1:fc:28:7a:b6:9e:
         1b:71:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net