Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3137362e35332e3137362e302f32322d3234203d3e2030.roa
File:                     3137362e35332e3137362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          UsGIrPu7jq6HNeo4tk/QT8wZVTJVPQ5UtU+csGBFHaY=
Subject key identifier:   69:65:85:C2:D8:8F:E7:D4:6D:87:A3:2B:A9:D7:5D:C7:2B:59:7F:CA
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       412973DF70F6C4FE8CD27AB81D9AB7C2FA27F5AD
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3137362e35332e3137362e302f32322d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:19:26 +0000
ROA not before:           Fri 03 Mar 2023 16:14:26 +0000
ROA not after:            Fri 01 Mar 2024 16:19:26 +0000
asID:                     0
IP address blocks:        176.53.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:29:73:df:70:f6:c4:fe:8c:d2:7a:b8:1d:9a:b7:c2:fa:27:f5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Mar  3 16:14:26 2023 GMT
            Not After : Mar  1 16:19:26 2024 GMT
        Subject: CN=696585C2D88FE7D46D87A32BA9D75DC72B597FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:dc:c7:d0:eb:f6:a5:fd:b6:d3:6e:59:b2:
                    a8:8d:e4:35:49:59:43:7f:0c:f5:71:ba:5b:73:44:
                    12:28:b2:3a:9a:8f:cd:21:d0:49:54:18:40:02:d0:
                    de:cc:9a:8f:0e:23:5c:98:99:6e:ba:4e:f3:84:b1:
                    76:45:a7:72:84:9f:99:b5:6d:c5:64:29:cd:03:64:
                    ee:27:74:3a:ff:e0:68:fc:84:f2:52:91:8e:9c:27:
                    32:5d:16:56:21:6a:d8:2f:24:1d:88:b9:2b:78:ab:
                    fa:56:07:dd:29:e8:87:8d:34:f3:4c:cb:93:08:e4:
                    07:e0:d1:e4:5d:04:bb:8b:4f:8b:23:75:f5:47:91:
                    e9:17:3d:8e:26:a4:4d:2b:c1:b1:4f:7a:60:28:b4:
                    55:b6:d7:71:cd:93:82:a7:c5:db:ed:1e:bb:eb:1e:
                    ce:e5:2f:92:f2:f2:4f:da:8c:df:7e:b8:5e:88:54:
                    a6:aa:0c:db:82:22:cb:87:d1:0a:bf:7f:8f:ac:e9:
                    76:77:26:b8:66:14:ed:6f:b6:61:27:55:b4:98:aa:
                    20:97:49:87:8c:bc:a0:12:4f:0a:dd:85:9c:ab:ba:
                    cf:4f:0e:71:92:f4:8a:80:1b:5c:ef:de:16:38:3d:
                    34:56:e8:4f:c2:1a:23:61:3a:76:73:69:88:41:ac:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:65:85:C2:D8:8F:E7:D4:6D:87:A3:2B:A9:D7:5D:C7:2B:59:7F:CA
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3137362e35332e3137362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:58:4f:7a:10:db:76:82:d4:71:dd:cf:88:c5:0c:a6:1a:cb:
         57:24:77:11:1a:e2:36:0d:4c:a7:72:6e:ea:e6:3b:25:18:b3:
         fd:7d:ac:3c:ed:2f:53:cb:25:b6:e3:00:da:fc:76:12:1a:8a:
         98:bf:54:e7:65:98:1d:ef:92:81:91:ce:4c:9d:16:f4:fb:1f:
         16:db:92:fb:6c:01:67:ae:95:2c:87:d1:ed:eb:61:06:a9:e9:
         c6:77:13:98:6e:71:bb:46:ec:67:93:3c:bf:47:39:0f:c2:b9:
         08:a4:83:58:2a:3b:30:3f:42:4d:d6:3f:93:dc:d7:bd:63:f9:
         e0:91:f0:a7:82:08:e8:a7:55:cb:54:34:fb:00:89:b6:19:8f:
         0b:1c:25:c1:f6:23:4e:4b:8c:6d:c4:12:19:3a:5b:fa:87:cf:
         42:41:6d:4b:05:88:d4:df:52:69:40:4d:0a:4c:72:af:16:0d:
         ae:d6:2a:d0:b8:86:52:28:65:46:63:b3:14:4c:e8:72:45:82:
         79:a0:4b:26:8b:38:8f:96:93:72:78:2a:da:60:ae:aa:4a:bc:
         a3:53:48:a7:6a:df:7e:11:a6:10:79:20:89:0a:a3:7f:b9:b5:
         5d:d5:83:63:1f:b5:0b:7b:b2:33:d8:cf:ac:83:55:0c:70:cc:
         59:5b:36:19
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUQSlz33D2xP6M0nq4HZq3wvon9a0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMzAzMDMxNjE0MjZaFw0yNDAzMDExNjE5MjZaMDMxMTAvBgNV
BAMTKDY5NjU4NUMyRDg4RkU3RDQ2RDg3QTMyQkE5RDc1REM3MkI1OTdGQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gNzH0Ov2pf22025ZsqiN5DVJ
WUN/DPVxultzRBIosjqaj80h0ElUGEAC0N7Mmo8OI1yYmW66TvOEsXZFp3KEn5m1
bcVkKc0DZO4ndDr/4Gj8hPJSkY6cJzJdFlYhatgvJB2IuSt4q/pWB90p6IeNNPNM
y5MI5Afg0eRdBLuLT4sjdfVHkekXPY4mpE0rwbFPemAotFW213HNk4KnxdvtHrvr
Hs7lL5Ly8k/ajN9+uF6IVKaqDNuCIsuH0Qq/f4+s6XZ3JrhmFO1vtmEnVbSYqiCX
SYeMvKASTwrdhZyrus9PDnGS9IqAG1zv3hY4PTRW6E/CGiNhOnZzaYhBrNDhAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUaWWFwtiP59Rth6MrqdddxytZf8owHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM3MzYyZTM1MzMyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCsDWwMA0GCSqGSIb3DQEBCwUAA4IBAQAAWE96ENt2gtRx3c+I
xQymGstXJHcRGuI2DUyncm7q5jslGLP9faw87S9TyyW24wDa/HYSGoqYv1TnZZgd
75KBkc5MnRb0+x8W25L7bAFnrpUsh9Ht62EGqenGdxOYbnG7Ruxnkzy/RzkPwrkI
pINYKjswP0JN1j+T3Ne9Y/ngkfCnggjop1XLVDT7AIm2GY8LHCXB9iNOS4xtxBIZ
Olv6h89CQW1LBYjU31JpQE0KTHKvFg2u1irQuIZSKGVGY7MUTOhyRYJ5oEsmiziP
lpNyeCraYK6qSryjU0inat9+EaYQeSCJCqN/ubVd1YNjH7ULe7Iz2M+sg1UMcMxZ
WzYZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org