Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232332e3235342e302f32332d3234203d3e2030.roa
File:                     3138352e3232332e3235342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          Z3YS2gulQrEgi9MORBaFoKrIhqcdq6KSJtiQbBpK7eo=
Subject key identifier:   13:4F:34:47:D0:E5:D6:45:64:64:E6:EC:56:25:1F:94:74:47:66:B6
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       15B5667CBE521BA8765B5800C1AA5937BB76EF95
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232332e3235342e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:37:23 +0000
ROA not before:           Fri 03 Mar 2023 15:32:23 +0000
ROA not after:            Fri 01 Mar 2024 15:37:23 +0000
asID:                     0
IP address blocks:        185.223.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b5:66:7c:be:52:1b:a8:76:5b:58:00:c1:aa:59:37:bb:76:ef:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Mar  3 15:32:23 2023 GMT
            Not After : Mar  1 15:37:23 2024 GMT
        Subject: CN=134F3447D0E5D6456464E6EC56251F94744766B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:de:88:f9:41:8e:bd:d2:b4:4c:67:27:30:
                    17:a7:82:e9:5b:a0:eb:a7:86:fa:6f:0a:c9:72:12:
                    79:ae:60:ec:f5:da:dd:a0:ec:4c:a1:9b:17:d1:88:
                    60:79:21:d9:a5:d0:cd:c7:58:09:12:93:d2:10:a6:
                    72:fb:fd:e7:9e:e1:68:f3:35:38:eb:98:47:07:a9:
                    72:6f:7a:cf:96:59:48:52:93:65:fd:b3:0f:16:55:
                    e4:e3:4d:73:c8:f8:cc:01:eb:42:ff:5a:2c:96:97:
                    99:b0:cc:33:6e:e8:c1:88:2a:2f:20:6b:dc:6e:f6:
                    85:c0:57:90:24:94:4c:fc:7c:c7:65:1e:79:e0:1c:
                    3a:07:57:b3:58:da:ce:1c:3e:8f:8e:3c:58:23:e4:
                    8f:d8:b2:1a:f1:45:ee:db:f7:3a:d1:95:0f:7b:d6:
                    5e:86:c4:46:75:b3:d7:93:93:e3:5f:07:e0:20:43:
                    40:17:2d:ad:41:2c:e2:6d:9f:f1:0e:3f:90:b5:87:
                    7f:59:74:db:af:81:78:e7:2d:12:e1:27:47:1b:3a:
                    82:e1:23:ac:db:46:3e:3c:a4:2b:54:fa:1d:f8:b6:
                    f6:23:df:af:9c:d6:cd:c5:52:f2:f9:cc:1e:0a:db:
                    96:eb:f1:35:1d:e1:1f:31:aa:1d:e9:0c:e9:99:38:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:34:47:D0:E5:D6:45:64:64:E6:EC:56:25:1F:94:74:47:66:B6
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232332e3235342e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:aa:4a:c3:29:e9:ff:c4:0f:93:dc:fc:59:b1:fd:e5:9a:c5:
         07:a5:7e:3c:92:33:a1:2c:0b:9d:23:6d:6f:68:64:7e:fc:d6:
         30:61:a2:29:84:11:e3:56:be:90:07:c8:78:30:d6:b9:21:05:
         2f:ca:40:87:74:65:18:db:be:6b:38:9d:3c:19:a3:f5:77:87:
         15:33:b2:33:ce:d4:9c:2e:62:d0:f0:51:27:c5:ca:5c:0e:c4:
         a2:24:f3:6d:6c:22:0e:25:8a:3b:50:34:c0:c7:71:67:77:32:
         f3:0e:dc:a9:27:ef:4b:fb:5b:1f:f9:09:1a:e3:66:43:1f:a5:
         fb:7b:32:be:14:ad:ad:b1:8f:4b:3c:a3:b1:ac:c3:32:c2:ac:
         c2:8d:ea:50:04:0a:c4:82:b8:fc:ab:96:ec:9b:c6:a6:c3:a2:
         4a:38:0a:0f:7f:d2:0b:5f:a2:92:12:ce:43:25:22:71:dd:58:
         b1:39:16:63:e1:2f:98:93:e0:a2:e4:8c:7c:76:8c:b7:1f:f4:
         7f:a7:7e:c3:47:6d:39:9f:46:24:b8:a5:61:85:8a:40:fd:db:
         8b:5b:c3:33:07:30:73:f6:da:d3:5c:98:81:68:81:ad:29:15:
         87:4f:5e:3b:34:10:c2:d6:27:b6:22:d0:a2:9b:1f:d5:52:56:
         09:27:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org