Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e2033333536.roa
File:                     3138352e3234392e3232372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          3hsJjvgPwoeUOu8kBqYLRq/13YVbQFkv19iM2zRZnzc=
Subject key identifier:   E8:C8:4B:89:FF:1E:20:D2:AC:88:79:3A:44:F3:48:7D:1A:23:49:92
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       750D58E5D3AD712CB5C2493753A4E5CAF4DEF96E
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:41:04 +0000
ROA not before:           Tue 28 Jun 2022 04:36:04 +0000
ROA not after:            Tue 27 Jun 2023 04:41:04 +0000
asID:                     3356
IP address blocks:        185.249.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0d:58:e5:d3:ad:71:2c:b5:c2:49:37:53:a4:e5:ca:f4:de:f9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:04 2022 GMT
            Not After : Jun 27 04:41:04 2023 GMT
        Subject: CN=E8C84B89FF1E20D2AC88793A44F3487D1A234992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6a:90:e9:87:9b:60:82:f0:84:d9:12:e2:33:
                    52:b9:23:28:6b:24:f2:33:cf:6c:51:ba:f4:a1:b4:
                    73:d2:33:40:fd:50:26:63:ed:d0:d4:01:61:af:0c:
                    44:38:9f:73:cd:b1:21:56:4a:18:ff:e8:d7:c8:21:
                    15:ba:63:4c:80:e6:27:bc:fa:be:9d:dc:92:d2:a4:
                    8d:c4:78:8f:05:b8:cf:a7:46:12:42:6b:37:16:e2:
                    d0:6b:69:21:1d:d3:d8:e2:ef:d7:b2:31:d9:39:a6:
                    39:8d:5f:5f:5b:d6:0a:66:8f:f5:03:b5:cf:f2:6e:
                    ac:f5:8b:24:88:53:47:7e:19:00:28:01:0f:12:4f:
                    a6:41:cb:8d:46:af:e0:41:1c:2a:1d:d2:48:3f:15:
                    84:36:4e:d6:52:7c:74:c9:94:c6:d2:0d:95:b5:6e:
                    da:94:c2:46:16:30:d1:86:6f:94:f6:3c:f6:34:30:
                    2a:18:9b:6f:50:20:6e:34:38:e0:01:fe:c3:e1:e7:
                    69:a9:15:ee:e8:74:5e:cf:ab:2d:22:6a:6d:18:6f:
                    0a:17:08:2f:1e:a8:ad:27:21:1a:2a:2b:29:4d:60:
                    c0:4e:ad:c2:ed:f9:97:56:06:12:9f:5d:6c:9a:0f:
                    8a:41:e7:a9:40:4c:0b:79:a5:8c:4f:4a:5b:87:83:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:4B:89:FF:1E:20:D2:AC:88:79:3A:44:F3:48:7D:1A:23:49:92
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:dc:ce:2c:e0:ea:85:44:0a:16:21:47:18:07:78:5f:97:
         24:ce:ff:b7:2a:fd:69:9f:d0:2c:74:b8:49:71:d1:9a:90:70:
         4c:b5:a2:c5:86:bb:0f:5f:e6:f6:ff:80:80:06:de:65:06:56:
         8f:ef:1c:61:a3:fc:4a:f2:06:38:81:9d:f8:90:42:98:32:c9:
         70:b9:bb:68:e9:f0:0b:b0:a3:70:21:e6:00:49:42:ff:1f:38:
         f6:4d:f5:7e:ac:7a:fa:e3:4e:8e:f0:3d:01:43:93:5a:86:39:
         f5:ff:45:7e:23:2b:cb:cc:4a:9b:23:14:fe:f2:8c:3f:93:8c:
         ee:ac:7f:49:92:60:27:24:c6:78:1d:1a:fd:93:c0:1a:5d:1c:
         1c:4f:8d:8c:c1:48:3d:43:a2:b7:d8:2c:e0:d5:30:16:8f:63:
         92:d2:d3:27:b7:5a:65:eb:e7:63:9b:42:a9:8f:07:c0:10:88:
         81:85:50:37:29:68:90:dc:e6:2e:d1:ea:e9:d2:4c:03:ca:ac:
         df:e3:32:6c:5c:27:fe:5a:a7:8c:af:da:25:37:2e:a4:f9:77:
         71:dc:9b:05:c1:d7:7a:a3:74:f0:71:d9:a8:0b:f1:33:15:1f:
         c3:79:b0:b0:4c:fc:c5:7b:95:d9:43:21:2a:2e:aa:db:c9:b9:
         01:30:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net