Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa
File:                     3139322e3134352e33372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          1tWf16EinuKpztEVF8EZJbJHXvUeQwQX+Y4Cj2lbSPM=
Subject key identifier:   78:2E:56:E5:35:DC:03:E7:25:D5:1D:69:A5:A8:63:64:59:1B:3B:64
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2EA182566E6622F3095D9A59ECECC983A6C617CD
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:02 +0000
ROA not before:           Sat 22 Oct 2022 04:29:02 +0000
ROA not after:            Sat 21 Oct 2023 04:34:02 +0000
asID:                     51167
IP address blocks:        192.145.37.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a1:82:56:6e:66:22:f3:09:5d:9a:59:ec:ec:c9:83:a6:c6:17:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:02 2022 GMT
            Not After : Oct 21 04:34:02 2023 GMT
        Subject: CN=782E56E535DC03E725D51D69A5A86364591B3B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:fd:e8:9e:cb:73:41:fc:bf:07:15:6e:02:
                    b4:06:63:3d:eb:83:60:13:dd:a7:7b:a9:bf:90:0f:
                    99:c3:55:6d:ff:47:73:e1:29:77:3b:5f:cd:f9:77:
                    4c:2d:c1:03:4e:6c:e4:ae:fd:1a:40:ae:64:04:d3:
                    89:16:61:5f:f9:15:92:b3:e4:b3:05:ee:a9:7e:87:
                    6e:53:7a:1b:b0:82:7d:f9:cf:2e:da:8a:41:1d:9c:
                    3b:18:a8:ad:ad:99:03:9d:f7:4d:76:20:a3:9f:94:
                    96:66:96:6c:8f:0a:e4:ec:e8:82:50:f4:a9:c3:49:
                    2e:38:0b:7c:67:d9:bc:0f:9b:f8:ea:4d:12:41:ce:
                    ab:1f:f4:bc:98:9c:21:47:06:a4:01:ba:e1:5e:ba:
                    47:a1:ea:e6:3b:6b:5e:4a:ec:b3:85:5f:2d:23:01:
                    74:fb:ab:eb:a8:2f:6b:3f:e2:aa:e0:7c:28:fc:d2:
                    23:5b:ca:6f:f4:6b:3d:dc:b1:9d:97:a5:08:06:d4:
                    c8:7f:1f:f4:52:13:b7:88:45:e0:e9:4c:c3:c7:bb:
                    13:a0:bb:1c:3e:9d:e5:32:70:5e:13:7b:8a:e5:3c:
                    46:97:10:da:c3:c3:21:18:b7:88:41:9d:c9:b3:1f:
                    be:ca:f1:66:67:f6:e1:61:7f:a9:78:a9:20:aa:2b:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2E:56:E5:35:DC:03:E7:25:D5:1D:69:A5:A8:63:64:59:1B:3B:64
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:be:85:3f:ac:cf:d9:26:76:59:db:ba:ac:f2:f6:ae:ba:20:
         d6:f7:5c:16:7b:cd:e7:e1:f3:90:89:fa:0f:14:24:47:b9:65:
         c9:71:3c:ee:cc:1e:d8:0c:b7:00:db:3a:7c:a3:d7:f2:3b:28:
         8b:95:9a:60:7a:e3:71:93:a5:9e:c0:f2:e3:ea:ac:40:d8:79:
         c3:39:90:0c:16:c0:db:1c:f5:e8:2d:f9:cd:90:ae:83:31:bb:
         34:84:73:79:86:be:2f:d2:1c:53:c8:4e:79:f5:bc:48:5f:ea:
         41:d3:da:53:6e:0b:85:c9:06:9f:13:c4:f9:15:36:50:12:94:
         5f:47:3d:0a:f7:f0:7e:1c:cc:d9:2c:3c:05:a6:bb:f0:28:7c:
         5b:ea:d7:f1:98:9e:c1:d6:a2:b4:a4:75:ac:f9:dd:78:78:f7:
         6e:97:34:75:c4:ab:8b:3a:4e:4b:8e:87:80:b5:8b:ab:2e:90:
         4d:eb:75:19:67:f8:fc:bf:ce:82:70:c3:a3:a2:1a:92:01:b1:
         cf:9a:cb:aa:fd:61:a1:35:c5:15:cf:4b:c7:4a:0e:03:4d:1d:
         36:41:73:40:75:43:37:67:99:d7:bd:1e:9a:2a:82:de:ec:58:
         1b:e1:48:df:5e:c5:6c:29:7c:80:e9:82:ca:8d:f3:9a:3b:97:
         a2:8c:76:a1
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIULqGCVm5mIvMJXZpZ7OzJg6bGF80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI5MDJaFw0yMzEwMjEwNDM0MDJaMDMxMTAvBgNV
BAMTKDc4MkU1NkU1MzVEQzAzRTcyNUQ1MUQ2OUE1QTg2MzY0NTkxQjNCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+P3onstzQfy/BxVuArQGYz3r
g2AT3ad7qb+QD5nDVW3/R3PhKXc7X835d0wtwQNObOSu/RpArmQE04kWYV/5FZKz
5LMF7ql+h25Tehuwgn35zy7aikEdnDsYqK2tmQOd9012IKOflJZmlmyPCuTs6IJQ
9KnDSS44C3xn2bwPm/jqTRJBzqsf9LyYnCFHBqQBuuFeukeh6uY7a15K7LOFXy0j
AXT7q+uoL2s/4qrgfCj80iNbym/0az3csZ2XpQgG1Mh/H/RSE7eIReDpTMPHuxOg
uxw+neUycF4Te4rlPEaXENrDwyEYt4hBncmzH77K8WZn9uFhf6l4qSCqK2blAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUeC5W5TXcA+cl1R1ppahjZFkbO2QwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zMTM5MzIyZTMxMzQzNTJlMzMzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAkSUwDQYJKoZIhvcNAQELBQADggEBACq+hT+s
z9kmdlnbuqzy9q66INb3XBZ7zefh85CJ+g8UJEe5ZclxPO7MHtgMtwDbOnyj1/I7
KIuVmmB643GTpZ7A8uPqrEDYecM5kAwWwNsc9egt+c2QroMxuzSEc3mGvi/SHFPI
Tnn1vEhf6kHT2lNuC4XJBp8TxPkVNlASlF9HPQr38H4czNksPAWmu/AofFvq1/GY
nsHWorSkdaz53Xh4926XNHXEq4s6TkuOh4C1i6sukE3rdRln+Py/zoJww6OiGpIB
sc+ay6r9YaE1xRXPS8dKDgNNHTZBc0B1Qzdnmde9Hpoqgt7sWBvhSN9exWwpfIDp
gsqN85o7l6KMdqE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net