Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa
File:                     3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          kNWToP58ArL3wa8TqHZ6xlV7gt3JI+VPfyjYnoDLN5Y=
Subject key identifier:   EC:EF:70:18:38:36:E3:6C:AC:5F:23:3B:FD:D5:08:0C:8E:76:9D:23
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       7E86F7C76B87BDE272113E5ADED3A6DD807CEB7B
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:07 +0000
ROA not before:           Sat 22 Oct 2022 04:29:07 +0000
ROA not after:            Sat 21 Oct 2023 04:34:07 +0000
asID:                     47583
IP address blocks:        185.229.114.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:86:f7:c7:6b:87:bd:e2:72:11:3e:5a:de:d3:a6:dd:80:7c:eb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:07 2022 GMT
            Not After : Oct 21 04:34:07 2023 GMT
        Subject: CN=ECEF70183836E36CAC5F233BFDD5080C8E769D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:3c:87:42:c5:d0:bc:27:34:23:6e:0c:3a:
                    6b:fc:fb:a9:43:6a:18:6f:76:6d:25:77:02:24:95:
                    ea:d9:b6:fc:f7:34:36:57:cd:dc:c3:9b:68:9d:86:
                    b1:00:df:ca:2e:6f:d8:35:76:b6:50:4a:b1:62:d5:
                    ad:67:44:4f:40:d0:d5:61:e3:e7:5a:65:5b:ec:17:
                    d8:b0:06:86:f9:50:26:5e:c3:a8:ef:94:1a:86:1c:
                    ab:cc:e3:3b:7a:7d:5e:99:f3:38:37:e9:d6:c2:b5:
                    14:f5:43:7b:f5:96:56:45:99:7d:30:d4:41:74:07:
                    79:37:73:1e:a3:7d:69:da:d3:f1:21:d7:63:19:45:
                    59:1f:15:a3:70:52:05:f9:7a:89:27:61:5f:4e:72:
                    96:a3:44:ae:09:1d:94:ba:b4:13:e4:5c:52:cb:ae:
                    9e:8f:09:d6:8e:d7:8e:55:34:7a:37:ef:6f:39:97:
                    27:90:c6:36:ba:1e:44:fb:a5:f8:65:57:32:92:16:
                    a1:8f:f2:6c:dc:28:7f:c3:15:31:04:c4:7d:33:f4:
                    8e:74:69:22:6c:97:2f:11:50:d6:20:6b:19:48:18:
                    7e:5e:00:28:1c:c2:02:9e:77:29:44:ef:fd:46:ae:
                    65:e3:8a:ab:e4:75:3f:83:43:2d:61:e5:1d:bf:56:
                    48:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EF:70:18:38:36:E3:6C:AC:5F:23:3B:FD:D5:08:0C:8E:76:9D:23
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:fd:81:97:b4:75:b0:1d:10:9b:f1:0e:91:26:ac:5c:73:
         53:cb:f2:ca:d6:9f:85:16:5e:f9:bb:1f:88:31:95:95:88:ca:
         60:66:8a:57:b6:74:10:8a:65:6f:21:cc:d2:57:f6:53:12:a4:
         e7:b6:a4:0f:68:e4:19:62:c5:06:d6:c2:1b:d3:1a:a5:40:d1:
         d2:e4:a9:24:86:b1:cf:0a:82:24:27:93:c2:9f:33:2f:2b:8a:
         e9:c5:d1:c4:6f:fb:4d:66:06:fd:64:5d:02:59:2e:f3:fa:dd:
         1a:9e:fc:fb:12:81:3d:68:23:8b:98:94:f7:f2:c4:fc:50:4d:
         13:07:ca:3d:71:ef:ff:21:a0:98:75:a3:0c:20:b9:d9:25:df:
         2c:96:1f:f6:c4:50:df:b5:a4:88:14:bd:ec:f6:1e:4e:f5:17:
         12:25:d5:09:4a:12:0e:c7:e4:73:21:29:40:5d:43:2e:96:96:
         2f:7f:3d:f4:80:6f:7e:2a:0f:49:58:fa:d0:aa:73:eb:4f:cd:
         95:c5:a2:95:ad:89:41:eb:e7:ce:f3:de:ea:bf:e8:ac:25:d1:
         dd:af:13:17:82:b6:38:7f:c5:df:82:30:8b:59:dc:72:6a:8a:
         b8:31:e0:b6:8e:44:b0:f2:ae:63:0c:27:dc:49:a3:fc:16:9c:
         fb:65:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org