Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235352e302f32342d3234203d3e203537313732.roa
File:                     3138352e3234352e3235352e302f32342d3234203d3e203537313732.roa (raw, json)
Hash identifier:          PirA++TZ1A6vXz5fvu0F2TvqAlW8PdDvDijDNV7DuvY=
Subject key identifier:   16:2A:6E:41:87:C6:DC:86:B8:83:4A:1D:A9:59:B8:E6:D2:A0:D6:38
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       211B955D812A770FCD8A416832CBA818CE44F210
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235352e302f32342d3234203d3e203537313732.roa
Signing time:             Sat 22 Oct 2022 04:34:07 +0000
ROA not before:           Sat 22 Oct 2022 04:29:07 +0000
ROA not after:            Sat 21 Oct 2023 04:34:07 +0000
asID:                     57172
IP address blocks:        185.245.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1b:95:5d:81:2a:77:0f:cd:8a:41:68:32:cb:a8:18:ce:44:f2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:07 2022 GMT
            Not After : Oct 21 04:34:07 2023 GMT
        Subject: CN=162A6E4187C6DC86B8834A1DA959B8E6D2A0D638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:82:15:eb:9d:e5:08:d7:f6:34:03:e3:82:
                    83:73:3d:69:fc:4a:97:b8:fb:8c:92:46:76:f4:e0:
                    4a:49:a8:70:e9:9d:bf:85:a9:65:8f:c0:c9:5c:ec:
                    54:9e:2d:7d:18:01:0b:ca:36:e5:e7:54:51:6d:cd:
                    83:c2:3a:4f:13:25:4f:df:ce:92:5c:7f:72:93:29:
                    dc:83:70:0e:37:8c:1a:b0:bf:51:bf:87:09:d5:7f:
                    5a:e2:59:1e:1d:5f:3f:3e:0f:1d:c7:c5:09:52:90:
                    58:a6:ba:04:ae:a2:9c:37:de:2b:f5:e1:8f:4f:e7:
                    82:51:f6:9f:20:cd:4d:ee:a0:b3:35:cd:1c:fe:7d:
                    86:f7:67:3c:b8:11:23:56:f2:ed:88:39:ea:7c:b9:
                    fb:21:88:0d:4d:fd:3f:06:a0:d2:83:dd:45:f8:73:
                    8a:8f:c6:72:e6:1a:55:4e:2f:6c:41:55:a8:ff:63:
                    1d:4e:97:f3:63:f5:e3:3f:43:3d:44:60:44:51:38:
                    66:b9:0d:a8:6f:6a:ed:2f:2f:83:7f:1e:a7:12:ed:
                    b1:11:cb:0c:ca:f1:4d:19:42:be:dc:b4:ac:5f:13:
                    00:76:36:18:33:92:5a:59:43:54:33:0b:9b:59:20:
                    7d:1a:2d:9b:2e:cc:55:32:d7:92:6e:bb:21:b5:31:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:6E:41:87:C6:DC:86:B8:83:4A:1D:A9:59:B8:E6:D2:A0:D6:38
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235352e302f32342d3234203d3e203537313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:0a:02:76:7d:ed:81:c8:6b:ea:8d:77:02:82:38:ed:98:
         14:52:ff:84:37:c4:3e:3c:d4:e0:09:e9:22:02:82:3b:40:36:
         53:32:3d:0e:bf:7d:48:45:47:06:33:41:6b:5c:4f:69:43:51:
         a3:7c:30:4e:d2:c9:c0:08:62:0a:6d:13:5e:7b:30:ec:40:9c:
         64:a2:c3:6b:9d:20:f3:7e:ab:29:ce:95:9d:63:fe:72:8b:3e:
         3d:1e:42:d7:c6:71:64:c7:14:2a:dd:c4:91:3e:bf:c2:5a:f3:
         f5:5a:20:66:93:69:c4:e2:f7:42:0e:73:38:44:ee:ab:6a:fc:
         32:d3:a6:a9:1a:eb:ed:a6:a3:d7:bd:2e:3f:b7:b7:68:94:ec:
         28:91:af:0b:6c:ae:df:27:8d:a2:cd:83:c8:a9:a7:e9:88:d0:
         cf:83:ae:37:d2:d7:2a:f5:27:29:46:3c:20:76:9e:dc:10:f3:
         5f:e9:5e:5d:3d:14:bf:f7:d1:0f:86:4e:c4:e2:7a:08:3b:f0:
         71:33:6e:f2:97:2e:c9:b3:2a:23:3a:3c:f7:5a:3a:36:40:0c:
         47:5e:63:60:ec:35:d2:8a:17:0a:9c:36:97:80:e1:0a:99:b2:
         06:57:1b:3f:23:50:27:e6:96:6b:69:dc:19:52:b3:44:a3:b7:
         33:48:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org