Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e203232373733.roa
File:                     3138352e3234392e3232372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          n/X8fZYqGTLM5nOlEXIlFkRobpNwLsnDYUxKpe7G9dQ=
Subject key identifier:   4D:FA:AC:CC:7B:9B:9A:C6:A2:AF:4A:6E:F6:CA:FF:D9:D0:D9:C3:54
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       5B153DA89E1F4E96529C4D461F2D3648A4BD3F89
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:41:01 +0000
ROA not before:           Tue 28 Jun 2022 04:36:01 +0000
ROA not after:            Tue 27 Jun 2023 04:41:01 +0000
asID:                     22773
IP address blocks:        185.249.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:15:3d:a8:9e:1f:4e:96:52:9c:4d:46:1f:2d:36:48:a4:bd:3f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:01 2022 GMT
            Not After : Jun 27 04:41:01 2023 GMT
        Subject: CN=4DFAACCC7B9B9AC6A2AF4A6EF6CAFFD9D0D9C354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:80:72:c8:8e:0a:d5:15:7c:e2:46:c4:73:
                    f9:e5:0a:6d:c8:41:61:d9:32:54:33:97:f5:39:8e:
                    66:20:87:4c:fc:52:27:fb:fb:f0:7e:8c:41:52:60:
                    db:d3:bb:e4:58:e8:57:8b:98:00:cc:54:88:25:65:
                    66:37:ab:e1:f5:92:0a:dd:48:38:8d:f8:5a:5e:2e:
                    81:f5:ec:c8:52:ad:ff:dc:ce:69:af:6a:af:03:f5:
                    45:62:90:db:ad:b6:29:64:91:39:e2:7a:b3:d7:aa:
                    c1:94:b7:d8:a1:96:60:73:5b:55:e0:07:c4:61:f4:
                    5d:a0:cf:1b:d6:fd:e6:23:d0:e6:f2:fb:13:13:35:
                    3d:15:98:e7:0a:d5:4c:4d:60:ee:8d:da:29:b9:6f:
                    5f:74:94:e1:07:34:a4:ca:ce:11:66:f6:a3:3b:aa:
                    a7:63:8f:66:25:b9:e1:2c:a1:59:ad:2c:60:72:8e:
                    82:a7:e5:0a:39:d2:78:ea:6c:98:0e:df:15:f3:eb:
                    a2:4b:96:98:6e:d2:10:56:58:fe:de:55:14:33:f5:
                    17:67:5b:e9:d2:b8:e4:fc:56:11:03:d3:e1:e1:87:
                    c1:ea:dc:66:38:99:46:83:54:2c:69:5c:a8:e1:7e:
                    2a:5f:29:01:df:d6:f4:e6:39:b6:43:22:de:b8:fc:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FA:AC:CC:7B:9B:9A:C6:A2:AF:4A:6E:F6:CA:FF:D9:D0:D9:C3:54
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d5:2a:11:54:64:05:37:9a:68:22:c4:94:49:c2:4d:fc:21:
         cb:70:f4:74:07:44:4e:c2:26:b6:77:b3:9a:dd:32:33:4c:b8:
         53:37:36:e5:87:4b:d4:7b:15:8f:23:ae:6b:e7:0e:2c:3f:95:
         58:74:90:12:1a:25:67:85:1a:59:eb:ad:2f:27:e3:8d:26:0a:
         d8:d7:e2:02:09:8b:f5:92:35:89:a2:3f:0a:51:2c:d6:62:62:
         05:3f:fa:bf:5f:30:d2:e5:41:62:7d:ff:bc:43:a3:5a:0b:4c:
         e4:1a:b6:ac:db:65:f4:08:b8:9b:be:1c:50:0d:9e:26:52:78:
         75:06:15:4f:4a:94:e4:47:cb:77:8c:05:a9:d2:62:49:ed:5c:
         19:91:1b:3a:19:af:00:e3:d1:9c:7a:94:fa:d2:aa:cf:67:59:
         a0:e4:1c:50:72:f0:8c:f0:5c:8c:9d:9f:f3:58:65:b0:b5:2f:
         cf:3d:3b:8f:67:cb:88:c9:d1:8b:2a:cc:d9:d8:5a:5c:72:7b:
         f3:a4:e3:8a:83:bc:0f:30:bc:16:b5:87:bb:4b:60:19:0c:f3:
         0b:e0:36:03:8f:f3:25:76:a9:83:0d:61:e3:21:26:25:18:49:
         0b:00:fb:39:be:7c:98:0a:d8:63:cd:ff:b9:6c:6d:f5:ae:5a:
         09:ad:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net