Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e20313431303339.roa
File:                     39312e3232392e3234342e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          MpVPinWgG2+pvAxrZj8jhshwZh7R0e6ue8rhkJY5aV4=
Subject key identifier:   6E:99:DE:02:1F:67:70:10:A9:3C:06:C8:F2:17:28:DB:B9:40:58:94
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       116316B2420FF6D18C9E3DC5ADBCDA7175F16A43
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 09 Dec 2022 09:21:57 +0000
ROA not before:           Fri 09 Dec 2022 09:16:57 +0000
ROA not after:            Fri 08 Dec 2023 09:21:57 +0000
asID:                     141039
IP address blocks:        91.229.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:63:16:b2:42:0f:f6:d1:8c:9e:3d:c5:ad:bc:da:71:75:f1:6a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Dec  9 09:16:57 2022 GMT
            Not After : Dec  8 09:21:57 2023 GMT
        Subject: CN=6E99DE021F677010A93C06C8F21728DBB9405894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:a6:fa:11:5b:6f:a7:ee:3d:aa:83:8b:78:
                    9b:b2:34:dc:7f:a8:ca:e6:5c:18:3b:b6:d4:3b:4a:
                    7f:9d:09:58:1b:fe:26:e4:10:97:5a:5b:1c:60:cd:
                    01:6b:b6:ee:69:68:9e:09:bf:af:fd:5a:54:0e:84:
                    e6:8d:af:d4:b9:85:b8:dc:83:04:49:85:60:f6:6f:
                    4f:6a:98:61:9c:e1:6b:71:8c:35:f3:ee:0b:a0:ac:
                    04:bb:ab:fc:e3:7d:ef:1e:8e:fc:9b:e0:24:54:2e:
                    52:cc:e9:b0:3c:6f:ef:0a:5e:35:ee:fb:94:37:aa:
                    61:60:ea:87:07:53:89:66:a2:db:84:c9:f0:dc:9e:
                    69:ac:26:91:7d:47:7b:aa:9b:0d:8f:1d:b0:c8:44:
                    29:8e:53:89:7e:bc:45:a9:1f:3d:19:08:9b:f9:66:
                    d8:15:d1:55:63:7e:70:f7:67:d3:4c:a9:85:59:65:
                    2a:60:a8:e5:03:6e:be:b4:f4:6e:13:26:4a:14:99:
                    0a:24:d5:88:b3:85:48:3f:67:a4:51:53:8c:cb:81:
                    49:86:6e:e8:7a:b8:c9:27:e1:34:48:47:34:e8:91:
                    3b:8d:d9:4d:0a:a5:ba:5f:21:ba:30:83:de:e0:85:
                    ec:a9:4c:59:24:30:9e:ca:c3:1f:65:10:9f:6b:88:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:DE:02:1F:67:70:10:A9:3C:06:C8:F2:17:28:DB:B9:40:58:94
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:a2:ae:68:20:68:77:94:de:ef:6f:84:1e:0d:8d:a5:92:
         76:5c:03:4c:4e:a9:67:f6:91:f3:e0:25:ee:3d:e1:1d:b6:8d:
         97:1b:90:2c:0c:3b:40:e9:0b:25:7f:f3:67:6c:58:9d:b8:1a:
         4c:f6:12:9b:1b:a3:ad:55:f6:75:e2:18:e2:6d:3a:41:20:4d:
         e8:90:a0:4f:ce:e6:de:50:d4:17:7d:f5:3b:2b:b0:55:6a:11:
         d1:3d:37:e4:2e:94:7d:7a:e0:a4:11:09:dc:6b:45:01:89:77:
         6b:0c:32:64:cb:1b:af:a3:75:8c:1f:39:83:41:3e:19:a3:0e:
         86:e9:66:c6:14:15:40:3e:9a:55:d8:40:39:ae:0a:54:fd:67:
         f4:60:48:ad:e4:72:8d:f3:78:ff:09:62:52:85:3f:e1:de:a4:
         ab:4f:d6:62:4a:76:ec:4b:ed:dd:7c:96:0d:15:17:3e:8a:e2:
         3d:7c:54:1f:a6:4c:b8:b0:5e:87:ac:d7:84:1c:04:30:d2:62:
         b7:ec:ec:55:94:0c:b8:ff:6e:09:56:1c:a5:2a:74:e8:0f:38:
         c1:6c:55:b1:85:8d:0f:bd:82:db:14:a9:36:c3:fe:72:95:cf:
         eb:91:ac:82:e8:31:46:17:77:1e:bf:20:3e:98:92:64:96:49:
         2a:cc:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net