Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
File:                     38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          56DD5hrLvfIId4UnvVDCNFsioGhY8DtphnCXp9nmskQ=
Subject key identifier:   A0:D2:FE:F9:55:DC:6F:F3:26:5B:BF:4B:4B:E0:69:9A:2E:DD:D3:C9
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2892C82A980E3104C5D0DE155CCCEB7FC51E19B9
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     201341
IP address blocks:        80.245.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:92:c8:2a:98:0e:31:04:c5:d0:de:15:5c:cc:eb:7f:c5:1e:19:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=A0D2FEF955DC6FF3265BBF4B4BE0699A2EDDD3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:1e:2c:43:6a:42:e7:2a:c3:33:7c:7b:e2:
                    dd:4c:1d:20:ce:fb:a6:78:3e:6f:ab:8e:31:fd:46:
                    8e:96:5f:ef:42:cd:b3:89:f7:0b:2e:38:04:f6:93:
                    4d:79:b9:7f:6f:2b:a3:93:19:8b:32:8f:0d:06:01:
                    a0:f9:5c:d4:c3:ca:01:60:03:d4:bd:26:d1:90:f5:
                    d7:b1:59:97:36:c2:86:6c:91:58:ef:69:fc:97:f2:
                    a5:20:04:cc:ba:e0:c5:e7:e2:43:db:c4:e7:eb:bc:
                    5d:b1:95:73:d8:92:4c:b9:0a:e6:fe:9a:c7:20:4e:
                    20:86:19:fb:7d:14:3e:37:14:8c:0e:d7:f1:23:e6:
                    66:b7:d7:4f:dd:d0:c4:97:7d:12:10:fb:c0:36:01:
                    bc:d6:16:97:2a:42:35:40:b3:7d:08:12:67:69:9c:
                    72:f2:16:d8:ae:e1:ab:fa:15:ce:3c:99:5f:26:08:
                    d3:46:b1:2c:d3:2a:e2:94:29:4e:45:ee:94:9b:e3:
                    4e:31:67:57:5f:f3:af:bd:c6:0b:c1:74:28:13:37:
                    73:ed:52:68:8f:2c:db:da:b0:c5:b1:21:90:35:0d:
                    c7:02:b5:54:13:54:54:e4:4f:c3:3b:d6:f5:d2:40:
                    e9:45:99:de:10:ac:bb:cb:fc:71:8e:ec:57:38:f4:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D2:FE:F9:55:DC:6F:F3:26:5B:BF:4B:4B:E0:69:9A:2E:DD:D3:C9
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.245.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a6:11:8b:b1:cf:8f:3c:bf:ee:0c:c5:1d:c6:73:df:45:7f:
         27:c7:85:48:08:dc:a4:66:e8:14:8c:c1:5e:2f:f0:62:de:f9:
         29:ee:02:9a:20:9f:75:6e:89:13:8c:12:d8:43:af:d0:a9:42:
         e1:e7:a9:4d:0c:1a:44:76:a1:94:89:b5:10:2d:f7:be:66:cd:
         02:91:6e:d4:cf:58:40:a6:52:69:a6:a3:0a:e9:9a:4b:b0:19:
         f5:7e:52:a4:50:8c:33:33:91:66:b9:37:32:1e:9b:94:2b:bb:
         01:4f:74:53:09:ac:28:70:bb:c8:42:f9:53:6b:06:0d:a0:a8:
         be:e7:8b:20:ce:6d:b0:75:57:75:5d:9e:a7:d8:4f:26:b4:22:
         82:b1:fd:ce:9d:b3:27:54:51:ee:34:1e:90:f4:e6:8a:d7:39:
         6a:16:75:8a:f8:f0:e1:cf:6d:b0:22:86:35:25:7a:85:66:be:
         7d:42:4f:c7:f1:8a:0b:7e:3e:18:ec:e6:92:30:e8:b3:92:58:
         88:27:b4:66:82:f6:14:a7:bb:2a:7f:b7:f5:2f:ab:ad:a2:07:
         2e:68:78:e7:18:fe:6a:a0:10:0e:91:81:15:cd:19:56:2d:88:
         7f:35:7e:de:08:73:03:6c:de:f4:41:bf:ca:70:22:83:3c:9f:
         af:d0:98:31
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUKJLIKpgOMQTF0N4VXMzrf8UeGbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDJaFw0yMzEwMjEwNDMzNDJaMDMxMTAvBgNV
BAMTKEEwRDJGRUY5NTVEQzZGRjMyNjVCQkY0QjRCRTA2OTlBMkVEREQzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1B4sQ2pC5yrDM3x74t1MHSDO
+6Z4Pm+rjjH9Ro6WX+9CzbOJ9wsuOAT2k015uX9vK6OTGYsyjw0GAaD5XNTDygFg
A9S9JtGQ9dexWZc2woZskVjvafyX8qUgBMy64MXn4kPbxOfrvF2xlXPYkky5Cub+
mscgTiCGGft9FD43FIwO1/Ej5ma310/d0MSXfRIQ+8A2AbzWFpcqQjVAs30IEmdp
nHLyFtiu4av6Fc48mV8mCNNGsSzTKuKUKU5F7pSb404xZ1df86+9xgvBdCgTN3Pt
UmiPLNvasMWxIZA1DccCtVQTVFTkT8M71vXSQOlFmd4QrLvL/HGO7Fc49JKLAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUoNL++VXcb/MmW79LS+Bpmi7d08kwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zODMwMmUzMjM0MzUyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAlD1bDANBgkqhkiG9w0BAQsFAAOCAQEAb6YR
i7HPjzy/7gzFHcZz30V/J8eFSAjcpGboFIzBXi/wYt75Ke4CmiCfdW6JE4wS2EOv
0KlC4eepTQwaRHahlIm1EC33vmbNApFu1M9YQKZSaaajCumaS7AZ9X5SpFCMMzOR
Zrk3Mh6blCu7AU90UwmsKHC7yEL5U2sGDaCovueLIM5tsHVXdV2ep9hPJrQigrH9
zp2zJ1RR7jQekPTmitc5ahZ1ivjw4c9tsCKGNSV6hWa+fUJPx/GKC34+GOzmkjDo
s5JYiCe0ZoL2FKe7Kn+39S+rraIHLmh45xj+aqAQDpGBFc0ZVi2IfzV+3ghzA2ze
9EG/ynAigzyfr9CYMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org