Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/162/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
File:                     3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier:          YLX8F7p56Pdto0aCnVMcPpvTkgYIVnW9Hif3aVoAPo8=
Subject key identifier:   6F:8A:C1:5D:11:F8:12:F6:DD:96:45:77:42:18:EF:60:12:30:45:A6
Certificate issuer:       /CN=16dc80862ec40036e8a388634fb573b2ed2adff7
Certificate serial:       4A23973945D5AE3817927BDB9DDE26E5E55AE835
Authority key identifier: 16:DC:80:86:2E:C4:00:36:E8:A3:88:63:4F:B5:73:B2:ED:2A:DF:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtyAhi7EADboo4hjT7Vzsu0q3_c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/162/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
Signing time:             Sat 22 Oct 2022 04:33:51 +0000
ROA not before:           Sat 22 Oct 2022 04:28:51 +0000
ROA not after:            Sat 21 Oct 2023 04:33:51 +0000
asID:                     49453
IP address blocks:        176.119.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:97:39:45:d5:ae:38:17:92:7b:db:9d:de:26:e5:e5:5a:e8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16dc80862ec40036e8a388634fb573b2ed2adff7
        Validity
            Not Before: Oct 22 04:28:51 2022 GMT
            Not After : Oct 21 04:33:51 2023 GMT
        Subject: CN=6F8AC15D11F812F6DD9645774218EF60123045A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:3e:08:bc:ea:49:c4:a5:4e:24:d7:be:69:
                    9e:1f:58:29:cc:93:b6:8b:f0:5a:2a:2d:6b:cd:50:
                    03:ac:bc:c4:81:f7:8d:67:d2:17:9f:eb:7f:a6:4b:
                    90:ce:6a:fb:e7:45:06:5c:42:8f:d2:54:a1:06:c6:
                    8a:32:40:2b:01:9b:41:c3:d8:19:df:fd:45:2a:d8:
                    7d:90:0b:9f:41:4d:3b:c2:97:12:07:5d:df:55:c3:
                    84:21:55:1b:ec:96:26:a1:74:12:38:53:38:10:4c:
                    16:4c:4b:88:50:71:52:1c:0b:14:fb:e3:bb:68:34:
                    50:74:12:0e:66:87:d3:9b:56:15:9d:f1:f5:2f:df:
                    82:7e:16:c8:cb:fd:6e:31:59:1b:81:2c:dd:23:89:
                    55:8d:c8:e0:b1:85:b4:ed:58:e4:de:62:26:63:5b:
                    82:27:c8:bf:1b:c1:17:47:cf:28:71:de:b2:a7:7d:
                    90:7b:c3:f1:7b:d0:17:10:6c:84:ed:b5:6d:19:be:
                    28:4d:09:4f:e7:08:64:1d:e7:c3:f4:b2:0b:b7:4a:
                    01:81:d1:69:94:e9:11:38:12:5b:77:a8:2f:c8:3d:
                    1a:32:2c:96:44:5e:20:c2:a7:c2:8c:4d:5d:c5:7f:
                    60:a1:f8:53:74:6e:d6:d9:1f:b9:5d:08:f3:d2:86:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8A:C1:5D:11:F8:12:F6:DD:96:45:77:42:18:EF:60:12:30:45:A6
            X509v3 Authority Key Identifier:
                keyid:16:DC:80:86:2E:C4:00:36:E8:A3:88:63:4F:B5:73:B2:ED:2A:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/162/16DC80862EC40036E8A388634FB573B2ED2ADFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtyAhi7EADboo4hjT7Vzsu0q3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/162/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:65:0e:74:5c:88:dc:c5:2d:d8:b8:40:3e:af:43:44:c8:e7:
         af:5d:73:ce:4a:28:e7:6c:f2:b1:76:7d:47:c9:2c:b5:4c:57:
         e0:63:a0:79:34:b3:a6:f7:ae:ba:cf:e6:b5:27:78:c2:5e:f0:
         3d:88:c9:f8:34:3c:c3:59:ee:12:80:c2:2d:1e:e5:9f:27:69:
         25:49:9c:c3:8d:69:8c:f1:6e:7a:6a:c3:ec:61:4d:f3:48:e6:
         2a:69:e0:c5:3d:3a:6f:8c:e8:f0:5f:34:77:2c:ba:81:c3:ce:
         c5:59:41:16:2d:85:fd:f4:9f:a9:b6:bc:19:4e:aa:70:79:23:
         a2:ce:ba:01:46:b2:24:8a:c5:d7:2d:06:d2:ef:3f:02:30:dd:
         41:b7:ed:d8:55:da:cc:35:7a:c7:f4:8a:c5:c3:c1:5e:ec:04:
         48:89:e5:09:6e:c4:d1:50:59:00:83:a7:0f:6e:e4:62:f8:b5:
         a9:94:93:9d:bf:7c:33:5f:93:5d:c0:e9:e0:d0:79:b8:9e:e1:
         6b:24:87:46:44:64:01:14:29:b1:69:7f:1d:1d:08:a1:08:b8:
         eb:45:4b:06:d6:ba:bf:2d:89:06:13:43:4b:82:f2:38:cb:f3:
         f1:34:49:10:f2:1d:e0:98:58:b6:1a:28:49:0c:d8:db:6b:de:
         f1:7e:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net