Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203139343337.roa
File:                     38302e36352e3230392e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          xxDOsfzcz/7K8NNHQp3tEE9SvpnZpFPaLmadC9TPwT4=
Subject key identifier:   A1:11:ED:C4:B7:00:9F:28:E7:6F:6E:00:3C:BE:68:4A:75:13:83:A3
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       15C123B798AC61C918BE56BBA04B7722F23F2928
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203139343337.roa
Signing time:             Sat 22 Oct 2022 04:33:59 +0000
ROA not before:           Sat 22 Oct 2022 04:28:59 +0000
ROA not after:            Sat 21 Oct 2023 04:33:59 +0000
asID:                     19437
IP address blocks:        80.65.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c1:23:b7:98:ac:61:c9:18:be:56:bb:a0:4b:77:22:f2:3f:29:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:28:59 2022 GMT
            Not After : Oct 21 04:33:59 2023 GMT
        Subject: CN=A111EDC4B7009F28E76F6E003CBE684A751383A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:ce:6e:33:44:8d:ee:f4:9f:55:02:1a:1f:
                    6f:c4:b0:96:a7:fc:1e:c9:e2:86:75:3d:94:d9:1e:
                    2a:49:1c:6a:cf:a4:f1:1b:53:9d:0b:13:9b:b6:fa:
                    6d:4a:24:e0:d9:a7:ac:e5:50:7c:4f:96:b9:79:9f:
                    e0:80:ad:8d:0e:e2:ff:14:86:a7:51:41:f1:5d:7c:
                    53:54:bb:b1:71:c9:8f:eb:a8:5c:da:e0:82:fc:63:
                    12:f0:33:d8:5e:50:d4:dc:1f:73:f1:4e:c5:17:6f:
                    1e:90:39:69:ff:fe:b5:15:c3:f5:73:bd:ce:21:92:
                    90:20:7a:c3:19:0a:ca:12:18:03:56:ce:09:de:c3:
                    d0:c4:c6:75:7f:6f:39:85:28:57:75:14:d0:ec:ba:
                    d7:1d:07:60:f7:93:c9:2e:56:a9:c6:ec:ec:6c:3f:
                    15:75:c8:0c:24:12:54:30:d5:5a:ff:f5:e0:e6:04:
                    d4:2d:f5:b5:18:dd:73:79:d6:f9:81:c4:40:a4:a8:
                    ba:ea:df:b4:96:b2:78:15:29:59:51:d4:e5:b7:07:
                    c7:81:8f:a7:87:6b:e8:b0:37:1e:33:c2:d0:b6:5e:
                    6c:a7:a8:2b:51:4e:32:94:92:49:8e:be:4c:63:48:
                    b9:09:4f:96:84:f3:2f:ae:78:f0:1e:19:2c:48:9a:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:ED:C4:B7:00:9F:28:E7:6F:6E:00:3C:BE:68:4A:75:13:83:A3
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.65.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:68:f1:12:55:b1:2b:9a:f0:17:a7:0a:b5:9a:3d:4f:32:
         91:8f:3a:0e:b2:5f:4c:c7:e2:fb:d9:94:9e:24:6b:6a:6e:73:
         cd:25:1b:c3:5b:1a:b4:4c:b2:0e:31:ef:6a:7d:b9:ca:90:8e:
         bd:c5:36:4f:80:f6:7b:ab:7c:f4:c0:01:2b:81:ba:fb:b8:0f:
         dc:e0:52:00:a0:6c:d0:77:08:a4:21:ff:db:28:e0:8d:b8:71:
         bf:f6:42:8c:47:6c:da:45:a5:f1:ce:3f:98:36:9a:7e:57:19:
         c2:87:00:ad:06:8a:1c:ea:de:c4:36:36:06:1b:55:ec:30:a8:
         ee:fd:05:1d:00:74:eb:bd:5e:99:48:63:fa:6a:10:22:a9:0d:
         92:77:1a:00:26:b3:c0:0f:2f:d1:00:92:30:3c:e4:7a:c8:67:
         ca:56:e4:f8:e9:8c:26:1b:9c:48:5c:c3:c9:79:79:d2:9e:48:
         6d:7c:44:34:8c:65:bd:fc:6c:26:07:f2:43:e5:85:dd:fe:75:
         b7:58:d5:58:63:03:a5:b7:1d:8d:9b:6c:3d:ca:f1:e2:6d:0f:
         2d:04:32:1b:38:a3:22:ab:03:8d:b0:aa:70:6a:60:4a:57:0c:
         8e:fe:d2:d3:ab:b6:25:8c:63:46:8a:d1:19:7a:4c:51:86:95:
         5d:d8:fb:42
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUFcEjt5isYckYvla7oEt3IvI/KSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI4NTlaFw0yMzEwMjEwNDMzNTlaMDMxMTAvBgNV
BAMTKEExMTFFREM0QjcwMDlGMjhFNzZGNkUwMDNDQkU2ODRBNzUxMzgzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIks5uM0SN7vSfVQIaH2/EsJan
/B7J4oZ1PZTZHipJHGrPpPEbU50LE5u2+m1KJODZp6zlUHxPlrl5n+CArY0O4v8U
hqdRQfFdfFNUu7FxyY/rqFza4IL8YxLwM9heUNTcH3PxTsUXbx6QOWn//rUVw/Vz
vc4hkpAgesMZCsoSGANWzgnew9DExnV/bzmFKFd1FNDsutcdB2D3k8kuVqnG7Oxs
PxV1yAwkElQw1Vr/9eDmBNQt9bUY3XN51vmBxECkqLrq37SWsngVKVlR1OW3B8eB
j6eHa+iwNx4zwtC2XmynqCtRTjKUkkmOvkxjSLkJT5aE8y+uePAeGSxImvTXAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUoRHtxLcAnyjnb24APL5oSnUTg6MwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zODMwMmUzNjM1MmUzMjMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAUEHRMA0GCSqGSIb3DQEBCwUAA4IBAQAdf2jxElWx
K5rwF6cKtZo9TzKRjzoOsl9Mx+L72ZSeJGtqbnPNJRvDWxq0TLIOMe9qfbnKkI69
xTZPgPZ7q3z0wAErgbr7uA/c4FIAoGzQdwikIf/bKOCNuHG/9kKMR2zaRaXxzj+Y
Npp+VxnChwCtBooc6t7ENjYGG1XsMKju/QUdAHTrvV6ZSGP6ahAiqQ2SdxoAJrPA
Dy/RAJIwPOR6yGfKVuT46YwmG5xIXMPJeXnSnkhtfEQ0jGW9/GwmB/JD5YXd/nW3
WNVYYwOltx2Nm2w9yvHibQ8tBDIbOKMiqwONsKpwamBKVwyO/tLTq7YljGNGitEZ
ekxRhpVd2PtC
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org