Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33362e302f32342d3234203d3e203437353833.roa
File:                     3136302e3233382e33362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          ZlDLDFsDEXch8jnZJycVyayCha7XdrekH1+FnbvBcPQ=
Subject key identifier:   AC:42:36:BB:6D:EF:13:42:94:DE:67:E6:1C:E0:22:C8:3E:C5:7E:AD
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       5F2F31211F33655780275ECC074A1E1D0D1C8E6B
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33362e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:40 +0000
ROA not before:           Sat 22 Oct 2022 04:28:40 +0000
ROA not after:            Sat 21 Oct 2023 04:33:40 +0000
asID:                     47583
IP address blocks:        160.238.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2f:31:21:1f:33:65:57:80:27:5e:cc:07:4a:1e:1d:0d:1c:8e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:40 2022 GMT
            Not After : Oct 21 04:33:40 2023 GMT
        Subject: CN=AC4236BB6DEF134294DE67E61CE022C83EC57EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:08:cf:e9:25:9d:85:b2:d7:99:1d:5c:61:
                    6e:ff:0c:cb:e2:a1:35:37:dc:bd:9e:db:d2:e2:dc:
                    ef:a1:dc:ff:cd:d4:18:7c:72:c6:65:26:84:c9:0c:
                    e4:37:66:39:7d:f8:c0:f6:b5:f6:b5:53:49:ee:b5:
                    c2:97:f8:ad:ca:cc:45:87:92:05:28:4f:c0:3d:9e:
                    0b:f1:d7:c8:dd:9c:cf:33:81:61:ef:69:08:e0:6e:
                    97:53:00:25:3d:ad:2e:ba:52:85:ff:c3:47:ac:02:
                    90:79:15:92:e2:4e:b6:db:c2:2d:a2:6f:b2:ad:30:
                    2e:aa:51:1d:b6:a8:ef:b6:26:9d:2b:57:d1:e7:90:
                    fc:49:93:f9:db:cf:94:d6:62:5b:4a:20:ed:2e:11:
                    d9:93:81:25:51:59:55:3b:17:2f:69:b6:ca:27:b7:
                    5c:4e:e8:f4:c3:5f:e4:12:bf:3f:d0:0e:f4:da:97:
                    a5:cb:3c:74:2f:9a:e4:b6:65:34:2b:ba:2c:88:99:
                    33:55:a4:1e:80:21:74:98:cc:15:c2:2e:fc:50:54:
                    58:9d:1b:d4:5a:2b:19:29:48:d0:b7:07:ec:de:04:
                    f4:fb:1f:37:cd:dd:1c:75:ad:50:64:8e:b6:30:80:
                    d7:5a:24:62:ce:0f:43:23:2d:77:a2:62:71:37:84:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:36:BB:6D:EF:13:42:94:DE:67:E6:1C:E0:22:C8:3E:C5:7E:AD
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33362e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e6:d6:f9:c5:99:82:17:21:69:5d:2f:6a:2e:9c:63:a1:36:
         f0:40:f9:b5:c3:c7:81:1e:ae:3b:0c:3b:d2:bb:7e:1d:20:ec:
         25:65:c3:7b:69:80:71:5d:07:b5:09:6d:cf:4d:ef:be:f6:4d:
         f3:1e:8c:ea:42:90:2d:e3:e0:fd:04:40:56:5b:cb:1a:e7:7e:
         89:ba:ca:d2:06:25:67:e6:a1:1f:07:a7:a3:e1:dc:a0:5b:fd:
         8a:18:a9:94:be:4d:cf:a8:fc:3b:55:b4:54:e6:39:ee:34:0d:
         d4:c4:6f:6b:84:5a:ec:88:65:f7:09:d5:8a:e2:c5:0a:f5:1d:
         f6:2f:00:9d:bb:ae:30:ac:7a:e1:c0:a4:aa:f1:d4:d1:15:b5:
         3e:d4:32:4f:c6:8a:51:be:2f:83:54:bb:39:5f:c2:78:39:7a:
         05:57:ad:44:65:c2:9d:74:72:5e:9f:0e:cc:d7:58:ee:21:07:
         0d:aa:e8:6f:ef:2e:4a:8c:88:a2:41:cd:81:b8:58:75:c1:73:
         7a:4a:33:6f:95:b8:fc:af:ea:a4:03:19:25:c6:be:5a:02:33:
         18:14:8a:84:df:18:01:e4:77:36:54:dd:ec:af:7b:86:f7:f2:
         de:60:ce:02:0d:cc:cc:53:5a:24:f2:4f:a4:0c:93:4e:52:c5:
         23:30:33:19
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUXy8xIR8zZVeAJ17MB0oeHQ0cjmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDBaFw0yMzEwMjEwNDMzNDBaMDMxMTAvBgNV
BAMTKEFDNDIzNkJCNkRFRjEzNDI5NERFNjdFNjFDRTAyMkM4M0VDNTdFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GAjP6SWdhbLXmR1cYW7/DMvi
oTU33L2e29Li3O+h3P/N1Bh8csZlJoTJDOQ3Zjl9+MD2tfa1U0nutcKX+K3KzEWH
kgUoT8A9ngvx18jdnM8zgWHvaQjgbpdTACU9rS66UoX/w0esApB5FZLiTrbbwi2i
b7KtMC6qUR22qO+2Jp0rV9HnkPxJk/nbz5TWYltKIO0uEdmTgSVRWVU7Fy9ptson
t1xO6PTDX+QSvz/QDvTal6XLPHQvmuS2ZTQruiyImTNVpB6AIXSYzBXCLvxQVFid
G9RaKxkpSNC3B+zeBPT7HzfN3Rx1rVBkjrYwgNdaJGLOD0MjLXeiYnE3hPmrAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUrEI2u23vE0KU3mfmHOAiyD7Ffq0wHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTM2MzAyZTMyMzMzODJlMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzczNTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACg7iQwDQYJKoZIhvcNAQELBQADggEBACbm1vnF
mYIXIWldL2ounGOhNvBA+bXDx4EerjsMO9K7fh0g7CVlw3tpgHFdB7UJbc9N7772
TfMejOpCkC3j4P0EQFZbyxrnfom6ytIGJWfmoR8Hp6Ph3KBb/YoYqZS+Tc+o/DtV
tFTmOe40DdTEb2uEWuyIZfcJ1YrixQr1HfYvAJ27rjCseuHApKrx1NEVtT7UMk/G
ilG+L4NUuzlfwng5egVXrURlwp10cl6fDszXWO4hBw2q6G/vLkqMiKJBzYG4WHXB
c3pKM2+VuPyv6qQDGSXGvloCMxgUioTfGAHkdzZU3eyve4b38t5gzgINzMxTWiTy
T6QMk05SxSMwMxk=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org