Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa
File:                     3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          9IWtQWUd3MOnu6vAomjiOC2N5BE+zDtyV0+6v12LBY4=
Subject key identifier:   93:9C:78:B8:1B:DC:5B:4A:90:C7:0E:1B:29:94:D0:46:05:A2:0C:BB
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       392152EC939BB68A3743508A251EFB0979264566
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     47583
IP address blocks:        185.214.126.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:21:52:ec:93:9b:b6:8a:37:43:50:8a:25:1e:fb:09:79:26:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=939C78B81BDC5B4A90C70E1B2994D04605A20CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:3f:77:c1:86:d6:12:37:50:84:3e:75:bf:
                    d7:a3:f4:4f:16:a0:c2:90:b6:06:51:6b:ba:33:35:
                    3f:98:64:11:63:96:67:df:76:71:66:b9:6d:c3:18:
                    bd:1d:70:e9:fd:ef:79:48:3f:16:e5:6e:c6:d0:c6:
                    a5:82:cf:b1:ba:38:8c:fc:25:f7:2a:ef:53:90:07:
                    c7:da:5d:13:96:06:e9:81:0f:6c:9c:2c:5c:d4:23:
                    fa:64:fb:a9:32:a6:ee:8a:87:87:e3:3f:13:42:dc:
                    85:7b:cf:b1:93:c2:df:a2:c8:ba:e4:a7:54:30:57:
                    88:87:93:e9:19:f5:55:84:25:a4:d7:9d:1c:8b:03:
                    e0:5e:d0:11:95:e4:5a:64:88:93:07:aa:e4:da:7f:
                    47:23:a3:54:61:8c:6f:c3:d3:59:68:46:ad:08:ac:
                    ea:91:bf:4d:fa:b8:d6:5e:e0:37:32:81:d5:31:c3:
                    15:b5:db:39:65:71:11:e0:c1:27:97:4a:19:df:e1:
                    d9:8b:2d:bb:ca:80:9b:ab:bc:93:73:f1:ee:33:48:
                    82:b6:b8:e0:b6:ca:e0:c3:1f:f9:3e:ea:84:22:9c:
                    06:0b:8d:82:5a:d6:69:fc:19:eb:a6:a1:b1:44:eb:
                    fe:09:58:67:d8:9c:89:19:91:2b:c5:63:91:7f:92:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9C:78:B8:1B:DC:5B:4A:90:C7:0E:1B:29:94:D0:46:05:A2:0C:BB
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:98:87:bc:e1:bc:6f:8a:e0:e4:ac:a4:13:2a:29:14:8d:
         db:2a:41:4c:55:46:1a:d9:24:8c:d0:e4:ff:f9:fc:a1:8e:a6:
         bc:1b:f7:5f:5a:a9:16:60:8b:1e:4b:46:ea:56:b7:e0:59:8e:
         64:eb:32:23:5e:fe:eb:2e:01:fb:20:57:bf:45:b5:bd:ed:27:
         b6:3f:bc:71:cf:d2:5f:a7:93:79:03:2e:3b:0c:c5:97:66:9f:
         df:a2:5b:38:2e:a9:d3:04:3d:b2:34:9c:ff:e7:2d:5f:a0:ed:
         7e:2a:e0:9f:12:e1:57:24:20:43:e2:f3:3b:91:4a:2f:1d:1a:
         fa:4d:f2:45:71:e9:45:6f:45:f8:c6:90:40:f6:58:4c:5f:48:
         8d:03:d2:4a:9a:1c:3a:c3:70:63:46:e7:ef:46:28:ff:02:fc:
         11:62:62:5e:00:88:3f:23:75:f4:44:6c:60:37:44:ec:ed:c3:
         5a:b0:fa:a5:bd:ad:14:0c:19:c6:e0:48:9a:4a:0f:21:4f:04:
         04:01:35:ba:ce:73:be:c4:99:d4:f1:2a:4e:6f:78:ad:c7:40:
         24:ad:ea:94:85:ed:f8:a2:4f:2c:78:1e:a0:a2:85:f7:62:fb:
         2e:5a:3f:f3:25:39:eb:3f:a3:09:f7:4f:4d:c3:68:23:c8:06:
         12:f9:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org