Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131302e302f32342d3234203d3e2030.roa
File:                     39312e3233302e3131302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          osBYSzm8WOTfwSOC7bHXIxlzGoXBZUMqwbGebtn+p10=
Subject key identifier:   4C:C0:63:2B:27:15:75:F5:54:4C:E4:1E:DE:05:02:BF:92:F5:98:81
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       433B8A865AB4D0FDE3B99F1A80418B859755E874
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131302e302f32342d3234203d3e2030.roa
Signing time:             Mon 04 Jul 2022 15:43:40 +0000
ROA not before:           Mon 04 Jul 2022 15:38:40 +0000
ROA not after:            Mon 03 Jul 2023 15:43:40 +0000
asID:                     0
IP address blocks:        91.230.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3b:8a:86:5a:b4:d0:fd:e3:b9:9f:1a:80:41:8b:85:97:55:e8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Jul  4 15:38:40 2022 GMT
            Not After : Jul  3 15:43:40 2023 GMT
        Subject: CN=4CC0632B271575F5544CE41EDE0502BF92F59881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:77:35:3d:01:de:ed:14:0a:e1:d5:c9:a7:
                    aa:a6:28:82:2f:6d:65:3c:7b:50:a1:51:85:f4:d3:
                    39:f9:70:c2:94:4b:b5:cc:b0:de:24:10:0c:91:ef:
                    bd:5a:24:94:23:f8:86:94:12:67:31:8b:0c:30:de:
                    cb:44:63:d7:6a:ee:8c:43:d4:b4:f9:57:08:c3:62:
                    92:91:bf:b8:af:f0:a2:d8:6e:d6:dc:cc:52:d1:1e:
                    bc:89:23:66:88:a5:fd:7c:ed:c3:7c:c2:46:70:80:
                    6d:9d:81:9e:d3:d0:b6:34:87:4a:e7:05:c4:72:b0:
                    6b:01:3a:a8:fc:8d:a8:a3:68:a5:cd:ce:76:87:98:
                    99:2e:1f:0b:62:fe:00:10:fe:ff:8e:68:97:41:be:
                    ae:ea:85:a7:69:33:af:85:12:cd:33:1e:d1:7a:9d:
                    1a:90:cd:b6:80:db:22:c8:79:5d:85:f9:3e:44:12:
                    46:3a:47:ec:67:2d:c4:6e:5c:7d:9f:a5:f9:89:2d:
                    f8:86:32:fd:a3:b5:7c:3a:9a:f2:69:7c:4f:d6:ec:
                    89:be:bf:a2:e7:a6:eb:fd:36:bb:7e:3d:0c:73:5d:
                    60:5c:3a:c9:98:84:74:13:99:9f:4f:3e:e9:e9:d2:
                    35:cb:c4:5f:0e:ab:e0:5a:81:a6:70:f6:c7:6d:70:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C0:63:2B:27:15:75:F5:54:4C:E4:1E:DE:05:02:BF:92:F5:98:81
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:83:38:1b:45:e6:de:35:a6:2a:71:7a:62:c3:68:f4:8d:
         a8:b1:f6:dd:8c:9a:e2:cd:0d:e9:e9:54:78:57:8c:5e:00:ab:
         ff:be:16:cc:62:4e:9b:08:e6:37:ee:30:d6:f6:1d:92:81:5c:
         03:ac:92:03:d4:85:65:8b:a9:01:8c:c7:bf:e5:e5:ac:bf:ce:
         f1:9c:a7:97:06:71:39:ed:32:e3:54:ee:ad:0e:21:01:42:ed:
         1a:ff:de:6c:79:a8:e2:91:8d:49:3d:75:1b:0d:c2:bd:fb:d8:
         9e:d5:cf:0d:a1:e1:78:31:d2:a6:ca:19:2e:18:9d:e5:05:7d:
         9c:95:9e:f7:0c:b3:df:96:0a:b1:f0:ea:56:cf:07:88:2c:fc:
         02:c3:d2:3e:24:18:04:6f:b2:4d:96:57:76:7d:b2:0c:1b:11:
         c6:0f:2b:a1:8f:7c:05:68:4b:01:2e:95:d1:22:f5:a3:35:ca:
         c9:46:d4:d9:82:a6:fc:04:04:be:b9:10:d9:36:e8:58:a8:02:
         12:8b:bb:9e:a4:ca:83:f8:25:1c:56:26:a4:a0:de:e6:39:6a:
         c6:d4:48:c4:7a:44:f4:ca:b9:b6:68:0c:19:a8:0c:e3:7e:b6:
         13:c9:92:da:d6:70:08:b8:8a:58:97:f9:e2:80:6c:77:77:ee:
         56:71:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net