Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35392e302f32342d3234203d3e2030.roa
File:                     3138352e3234332e35392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          UzsW+Ual9vWr+2finGQv91mh8IWi398KHb/QDIf+cA8=
Subject key identifier:   BF:4C:90:B8:81:5D:B6:B8:4A:92:86:CC:E7:96:87:FF:A5:CF:92:E2
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       3649D69EE6EC0616C45EFC1A01EC9BFCFBAFBACA
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35392e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:42:25 +0000
ROA not before:           Fri 03 Mar 2023 15:37:25 +0000
ROA not after:            Fri 01 Mar 2024 15:42:25 +0000
asID:                     0
IP address blocks:        185.243.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:49:d6:9e:e6:ec:06:16:c4:5e:fc:1a:01:ec:9b:fc:fb:af:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Mar  3 15:37:25 2023 GMT
            Not After : Mar  1 15:42:25 2024 GMT
        Subject: CN=BF4C90B8815DB6B84A9286CCE79687FFA5CF92E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:22:8a:7c:4d:3f:6c:37:c5:3e:1c:9f:08:
                    6d:cd:12:89:14:94:2f:ca:c1:bd:09:fd:01:78:f9:
                    e6:6e:03:a0:34:32:51:2f:a5:7f:57:20:5c:5d:ca:
                    7c:87:f0:ef:b9:64:06:29:f7:08:e9:c6:c3:f9:10:
                    dc:5d:bc:29:a1:ca:d5:4b:f7:7f:e3:d1:9a:5b:b0:
                    4b:a3:45:82:fd:01:32:38:c2:d5:31:ba:42:14:41:
                    a7:5a:4f:a6:d6:62:cc:63:98:e7:53:b1:b3:fb:6c:
                    87:08:96:c1:5f:e9:26:62:ca:52:9f:ee:21:6c:e9:
                    03:33:52:bf:a0:82:b8:e2:8a:9f:3e:59:23:f7:52:
                    55:f1:4c:58:8d:ce:ce:bb:7b:57:39:d7:2d:af:4d:
                    52:52:99:19:89:19:2b:cf:39:6e:55:5b:fb:1d:60:
                    ad:21:76:3d:4d:13:41:48:58:f0:3e:df:23:a2:36:
                    68:af:96:0c:0b:c1:51:dc:c2:f0:7d:28:e6:ec:0f:
                    6b:52:a6:7f:3b:49:e3:53:4a:d8:1a:53:5c:2f:fd:
                    23:49:bf:cb:8e:a6:74:9f:d6:8a:ae:17:ed:6d:94:
                    d0:83:d7:73:08:60:d5:e3:2b:89:9a:98:d8:ca:f2:
                    65:86:f0:ad:19:d2:61:d5:35:56:9c:3f:49:ba:ef:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4C:90:B8:81:5D:B6:B8:4A:92:86:CC:E7:96:87:FF:A5:CF:92:E2
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35392e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:75:23:b8:f5:fa:c9:60:ef:bb:0f:3c:62:b0:7e:c0:55:
         49:d1:d4:d0:bb:4f:44:45:01:68:eb:c2:27:98:db:74:16:f6:
         2f:28:ca:90:b5:06:7c:da:b5:f3:3a:96:f7:4f:6c:93:ee:bb:
         0d:1c:f3:b6:78:4d:69:59:34:de:d2:74:4b:74:34:9d:fa:b1:
         88:37:e3:3d:e7:4b:94:d0:fd:50:95:67:c2:0b:79:26:67:1b:
         d5:e5:46:55:bb:2c:7a:61:96:6c:a5:82:e9:65:98:68:8c:74:
         11:9e:51:f8:bf:00:57:26:0e:47:19:73:75:2e:d0:7c:c5:8d:
         3b:f2:07:26:f5:22:0b:dc:c9:18:f1:3a:a3:8f:1f:15:a0:f2:
         eb:c4:fd:f9:e5:b9:e3:38:7a:52:70:50:db:49:90:15:48:b2:
         f2:52:19:69:a5:a7:69:37:00:8a:1a:8e:5d:79:1c:96:b1:63:
         cc:ce:3a:cd:b9:13:12:89:08:48:52:1a:73:8e:03:db:0c:f2:
         c1:ee:f5:e8:d9:8b:c1:ef:d3:9c:47:7b:b0:43:bf:ab:77:61:
         75:a9:ec:67:2c:15:7d:1b:78:93:a4:3b:7d:9d:d4:4f:bc:ab:
         e2:dd:1f:ce:13:fe:d6:3e:a7:2c:7e:cc:6d:1b:72:09:ca:87:
         6e:56:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org