Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3234203d3e20333938343634.roa
File:                     3138352e3137372e3131362e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          YFIf6p34rgrCXivBPlLxuxLBmkSYgtlHmDTHorpFXSQ=
Subject key identifier:   D0:27:53:1D:DB:08:DE:87:BD:BB:D2:20:E6:D9:4A:4E:7A:9E:23:7A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       50C8ACA2146DC8CB5E0129BFCCB4AF1542B5D25E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:49 +0000
ROA not before:           Tue 28 Jun 2022 04:35:49 +0000
ROA not after:            Tue 27 Jun 2023 04:40:49 +0000
asID:                     398464
IP address blocks:        185.177.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c8:ac:a2:14:6d:c8:cb:5e:01:29:bf:cc:b4:af:15:42:b5:d2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:49 2022 GMT
            Not After : Jun 27 04:40:49 2023 GMT
        Subject: CN=D027531DDB08DE87BDBBD220E6D94A4E7A9E237A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:ba:3b:ea:18:c1:f1:29:88:5a:55:01:a2:
                    cf:5c:3c:fb:96:90:5e:16:94:e6:ab:27:68:ad:f5:
                    c5:17:ea:66:fd:d1:a5:31:c2:55:87:a0:71:b4:10:
                    75:87:2b:17:c6:e1:99:85:21:cd:3c:58:f7:13:48:
                    8b:09:fd:20:1c:38:d2:01:4a:83:4d:3b:fd:40:17:
                    d9:f5:58:83:50:42:74:7f:fc:b7:63:0f:f3:e4:f4:
                    ca:ce:ed:50:e3:ed:73:f4:09:5b:95:36:a5:37:89:
                    b1:9a:26:b7:38:88:dd:11:7e:9a:62:3d:6e:74:b1:
                    1b:47:a2:4a:7c:41:3c:98:38:6a:9c:06:aa:c8:6b:
                    1f:af:4d:eb:27:c7:e9:ac:b5:6c:e8:9f:7a:b9:c3:
                    6b:47:7a:d6:69:27:23:d4:d3:71:d3:4e:19:89:6e:
                    f4:07:12:73:24:12:9f:c4:ac:e4:d2:9f:33:99:40:
                    8f:9f:2e:a1:82:10:24:90:30:14:80:17:b7:f5:84:
                    96:80:f4:cb:08:e8:bf:ac:78:f6:3a:98:1a:1c:80:
                    5d:d0:21:89:b3:39:10:d9:3d:c7:58:5e:f6:d6:84:
                    87:dd:cb:90:59:2c:cf:3c:66:6b:64:13:1c:90:bd:
                    0d:f6:6c:d1:ea:20:fd:6c:5e:75:27:4a:10:6d:b4:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:27:53:1D:DB:08:DE:87:BD:BB:D2:20:E6:D9:4A:4E:7A:9E:23:7A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:45:89:e9:37:7e:31:ad:75:77:74:17:f5:be:ed:3f:c4:
         94:3b:c3:e6:f9:57:16:d6:80:ff:2d:a8:ac:11:1f:83:58:5b:
         f1:d6:38:0e:f3:a4:65:78:00:1e:f5:a2:50:7b:1e:ec:4d:b3:
         f2:a7:69:c1:30:15:ab:0b:68:f1:ca:81:2e:a5:2e:bb:49:a0:
         5b:8e:b0:fa:b3:d7:2e:e3:f1:10:b8:dd:ac:0d:b4:76:8b:8e:
         33:e2:8b:4e:1b:87:f3:db:c2:57:d4:85:d8:b6:f0:50:97:0a:
         a9:bd:64:12:dd:92:de:07:51:55:86:c4:f1:1e:c3:8d:7e:d4:
         41:3d:29:fb:c1:62:ac:d2:00:cd:82:22:1e:60:26:14:48:c2:
         8f:df:83:a3:8e:37:4c:3e:2c:d8:7c:42:e8:a5:39:79:99:60:
         95:89:ba:7a:fe:6f:d1:2d:18:ed:b0:37:87:e5:3d:f8:65:4f:
         c8:3c:54:36:16:57:5a:b7:89:e4:08:65:73:07:77:b0:78:8c:
         b0:34:5e:2a:b5:12:fb:b5:c0:ad:f3:81:8b:55:d8:94:5a:67:
         2b:00:35:cf:83:03:bf:e8:88:af:7a:c8:4f:6d:2a:1d:6b:97:
         fb:bf:8a:7e:a7:06:e9:79:42:cd:f4:e1:11:96:53:31:bc:67:
         e3:a7:8a:75
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUUMisohRtyMteASm/zLSvFUK10l4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDlaFw0yMzA2MjcwNDQwNDlaMDMxMTAvBgNV
BAMTKEQwMjc1MzFEREIwOERFODdCREJCRDIyMEU2RDk0QTRFN0E5RTIzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ebo76hjB8SmIWlUBos9cPPuW
kF4WlOarJ2it9cUX6mb90aUxwlWHoHG0EHWHKxfG4ZmFIc08WPcTSIsJ/SAcONIB
SoNNO/1AF9n1WINQQnR//LdjD/Pk9MrO7VDj7XP0CVuVNqU3ibGaJrc4iN0Rfppi
PW50sRtHokp8QTyYOGqcBqrIax+vTesnx+mstWzon3q5w2tHetZpJyPU03HTThmJ
bvQHEnMkEp/ErOTSnzOZQI+fLqGCECSQMBSAF7f1hJaA9MsI6L+sePY6mBocgF3Q
IYmzORDZPcdYXvbWhIfdy5BZLM88ZmtkExyQvQ32bNHqIP1sXnUnShBttNX1AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU0CdTHdsI3oe9u9Ig5tlKTnqeI3owHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzODM1MmUzMTM3MzcyZTMxMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMzMzkzODM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmxdDANBgkqhkiG9w0BAQsFAAOCAQEA
e2hFiek3fjGtdXd0F/W+7T/ElDvD5vlXFtaA/y2orBEfg1hb8dY4DvOkZXgAHvWi
UHse7E2z8qdpwTAVqwto8cqBLqUuu0mgW46w+rPXLuPxELjdrA20douOM+KLThuH
89vCV9SF2LbwUJcKqb1kEt2S3gdRVYbE8R7DjX7UQT0p+8FirNIAzYIiHmAmFEjC
j9+Do443TD4s2HxC6KU5eZlglYm6ev5v0S0Y7bA3h+U9+GVPyDxUNhZXWreJ5Ahl
cwd3sHiMsDReKrUS+7XArfOBi1XYlFpnKwA1z4MDv+iIr3rIT20qHWuX+7+KfqcG
6XlCzfThEZZTMbxn46eKdQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org