Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34332e302f32342d3234203d3e203530363733.roa
File:                     33312e3232302e34332e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier:          n75SjhQke4soKlNi23GghO/ZNxnc8Mq7jxdxHYv3pxw=
Subject key identifier:   9B:CA:E0:F9:A8:7E:63:49:7B:DF:E7:12:71:C0:4D:57:24:32:36:BE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       269C15B5F6F072732266CA081D24EA3FA9C52D53
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34332e302f32342d3234203d3e203530363733.roa
Signing time:             Sat 22 Oct 2022 04:34:13 +0000
ROA not before:           Sat 22 Oct 2022 04:29:13 +0000
ROA not after:            Sat 21 Oct 2023 04:34:13 +0000
asID:                     50673
IP address blocks:        31.220.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9c:15:b5:f6:f0:72:73:22:66:ca:08:1d:24:ea:3f:a9:c5:2d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:13 2022 GMT
            Not After : Oct 21 04:34:13 2023 GMT
        Subject: CN=9BCAE0F9A87E63497BDFE71271C04D57243236BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:ed:1d:79:4f:ce:64:63:65:41:b8:62:40:
                    5d:1b:e5:d8:94:1d:79:9f:17:a5:00:d2:8f:a9:75:
                    db:07:5f:2d:88:0f:23:0a:53:50:e6:fc:de:fb:5e:
                    70:8c:81:61:cc:87:df:5b:a0:21:a2:22:27:08:e5:
                    13:2d:b5:b9:7c:fe:fa:bf:f5:dc:2a:4c:1c:06:3a:
                    5c:41:30:ab:7d:4a:6a:34:70:e2:ee:5b:f2:76:f5:
                    c1:d5:c5:4f:ae:43:17:e5:39:c2:4b:3a:eb:c4:ea:
                    1b:9c:8a:5f:a1:ed:f6:f8:a3:6d:b5:94:53:0f:a5:
                    96:f6:f0:e0:ef:de:c9:8a:4c:37:36:e2:49:39:4d:
                    b5:f7:4b:cb:e1:85:54:2f:af:0d:52:17:60:18:ed:
                    16:de:03:da:cc:ff:66:98:ea:ec:f3:e2:41:eb:21:
                    77:6f:20:39:4c:87:51:c7:d4:7f:99:4c:78:10:3b:
                    c2:2d:5d:43:54:93:65:bc:5a:ac:0c:32:74:5a:e6:
                    ef:e2:33:cf:d0:a1:32:7c:e9:9f:b5:20:07:39:3c:
                    70:a8:7e:1d:07:31:6a:e4:0b:3f:ff:89:18:a7:54:
                    e9:b3:ae:b2:b3:cd:ab:53:bf:53:2a:06:b6:10:6e:
                    a5:ee:4d:cd:d3:1d:a6:ff:b2:ef:3e:aa:5a:d2:ac:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:E0:F9:A8:7E:63:49:7B:DF:E7:12:71:C0:4D:57:24:32:36:BE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34332e302f32342d3234203d3e203530363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:28:bd:62:51:45:8d:5e:11:f3:de:d7:42:85:4d:cb:7f:a6:
         ba:86:6f:9c:6c:b6:d0:9e:09:ae:f7:fd:8e:63:48:9a:ed:4e:
         d0:d4:20:2f:b9:da:3f:8c:7d:71:4f:1e:c4:5d:b3:ed:cb:08:
         cc:ba:3e:ea:a6:e6:52:e6:81:da:3e:35:a9:f1:c4:56:0e:28:
         e1:ed:8d:9d:59:1d:79:64:bc:d2:a7:48:2c:8e:93:f1:46:82:
         6b:6e:e9:82:32:e7:93:5d:67:6f:63:29:7a:50:e0:11:8a:04:
         de:7a:67:e3:10:96:8f:ba:27:70:a3:15:8e:30:15:fa:af:23:
         2b:a3:1b:76:a8:f3:d4:af:1b:53:71:a5:26:ab:25:1b:f1:0c:
         d1:0e:d1:a2:2c:72:63:10:42:ae:4e:a1:f7:db:87:0f:89:79:
         4c:a8:24:44:ba:fb:ba:85:b5:15:60:24:1a:f5:5e:6f:23:36:
         f8:55:3e:f7:54:ee:f5:e7:b0:e7:d1:81:51:e8:f9:9a:6a:0b:
         4b:69:b8:83:88:30:d1:7c:89:75:02:ad:04:24:a9:6c:25:aa:
         b2:42:52:d2:52:9b:7a:1f:bf:19:fc:05:cb:7a:29:d1:69:fc:
         61:bb:0a:8d:a8:6c:c7:b2:5f:d8:04:60:cd:49:d1:7b:76:af:
         41:c0:6d:6c
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUJpwVtfbwcnMiZsoIHSTqP6nFLVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MTNaFw0yMzEwMjEwNDM0MTNaMDMxMTAvBgNV
BAMTKDlCQ0FFMEY5QTg3RTYzNDk3QkRGRTcxMjcxQzA0RDU3MjQzMjM2QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20u0deU/OZGNlQbhiQF0b5diU
HXmfF6UA0o+pddsHXy2IDyMKU1Dm/N77XnCMgWHMh99boCGiIicI5RMttbl8/vq/
9dwqTBwGOlxBMKt9Smo0cOLuW/J29cHVxU+uQxflOcJLOuvE6hucil+h7fb4o221
lFMPpZb28ODv3smKTDc24kk5TbX3S8vhhVQvrw1SF2AY7RbeA9rM/2aY6uzz4kHr
IXdvIDlMh1HH1H+ZTHgQO8ItXUNUk2W8WqwMMnRa5u/iM8/QoTJ86Z+1IAc5PHCo
fh0HMWrkCz//iRinVOmzrrKzzatTv1MqBrYQbqXuTc3THab/su8+qlrSrKc/AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUm8rg+ah+Y0l73+cSccBNVyQyNr4wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMzMxMmUzMjMyMzAyZTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMw
MzYzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAH9wrMA0GCSqGSIb3DQEBCwUAA4IBAQBEKL1iUUWN
XhHz3tdChU3Lf6a6hm+cbLbQngmu9/2OY0ia7U7Q1CAvudo/jH1xTx7EXbPtywjM
uj7qpuZS5oHaPjWp8cRWDijh7Y2dWR15ZLzSp0gsjpPxRoJrbumCMueTXWdvYyl6
UOARigTeemfjEJaPuidwoxWOMBX6ryMroxt2qPPUrxtTcaUmqyUb8QzRDtGiLHJj
EEKuTqH324cPiXlMqCREuvu6hbUVYCQa9V5vIzb4VT73VO7157Dn0YFR6PmaagtL
abiDiDDRfIl1Aq0EJKlsJaqyQlLSUpt6H78Z/AXLeinRafxhuwqNqGzHsl/YBGDN
SdF7dq9BwG1s
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org