Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
File:                     3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier:          3JSa5/lUN4xnbm/bT2FBwntX49k4AEdGP1jJt8EE4bo=
Subject key identifier:   DD:F1:14:E5:DF:CF:57:BD:79:03:CD:A0:3E:3D:6D:85:3A:56:35:61
Certificate issuer:       /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial:       784AC4BFFD9A3103D9F18D7EE4B27555E17BD88D
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/164/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
Signing time:             Wed 28 Dec 2022 15:58:58 +0000
ROA not before:           Wed 28 Dec 2022 15:53:58 +0000
ROA not after:            Wed 27 Dec 2023 15:58:58 +0000
asID:                     49453
IP address blocks:        176.119.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4a:c4:bf:fd:9a:31:03:d9:f1:8d:7e:e4:b2:75:55:e1:7b:d8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
        Validity
            Not Before: Dec 28 15:53:58 2022 GMT
            Not After : Dec 27 15:58:58 2023 GMT
        Subject: CN=DDF114E5DFCF57BD7903CDA03E3D6D853A563561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:e2:91:78:c3:a0:ad:09:9d:74:b4:2c:72:
                    91:a8:e0:cc:25:5a:af:93:95:bb:a9:09:58:73:b0:
                    ca:2a:86:7f:3d:c2:2b:2d:c4:59:8e:67:8e:14:c5:
                    3e:b7:f9:a9:8c:53:c3:dc:52:60:5f:ea:7e:20:42:
                    1a:b5:db:8a:a0:24:b1:23:0e:39:62:59:ae:56:98:
                    cb:85:ef:28:44:f2:0e:f5:5f:9a:20:5f:9c:ce:ba:
                    9d:6b:ca:0b:6f:ab:d8:6e:39:c8:f2:57:43:a1:e6:
                    d8:7b:3f:f2:96:1b:c4:df:98:bb:f5:50:3e:3d:38:
                    be:fc:fb:2b:50:b7:69:3c:8f:cb:e0:ec:35:fe:fb:
                    85:2e:9b:d3:4d:60:38:ce:6e:86:8f:13:4c:89:18:
                    5c:b2:9a:28:4a:20:08:18:af:fd:31:39:14:9a:be:
                    c0:d3:b8:42:e5:b6:9e:83:39:88:e8:24:3f:64:97:
                    33:3e:96:6e:48:c1:e4:d7:00:a1:29:48:ac:2d:5a:
                    cb:cd:6b:34:a0:8e:a8:38:4d:0e:69:58:fe:57:50:
                    1f:a0:8e:04:65:c2:1f:f1:e6:77:11:e1:40:ae:7f:
                    bf:1b:45:21:87:fc:2b:4b:d3:0d:ce:b0:36:67:be:
                    87:ad:54:8d:fb:61:27:70:ae:6f:0d:de:21:c0:0d:
                    6f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F1:14:E5:DF:CF:57:BD:79:03:CD:A0:3E:3D:6D:85:3A:56:35:61
            X509v3 Authority Key Identifier:
                keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:6f:8e:a0:51:5a:5e:91:72:b0:be:dd:45:43:aa:ad:cb:
         d6:ce:56:45:38:ba:c4:12:57:3d:86:30:08:4e:2d:db:ed:fa:
         ee:c1:e9:f4:a0:8c:12:8c:1c:4e:3f:f9:2b:83:ab:2f:6f:86:
         8f:ff:26:62:81:d6:09:c3:33:a4:1c:06:7d:4c:27:9d:f7:47:
         2e:55:99:34:45:9b:8c:31:2e:87:a6:0b:ba:93:56:1c:16:ee:
         1a:c1:ba:b1:d1:c7:2d:c6:a7:57:c1:31:35:0f:29:6a:58:b6:
         c2:e5:a1:aa:c7:b5:93:9b:ac:30:c7:52:d6:4d:f7:a7:60:35:
         49:e5:bd:73:84:84:13:64:64:53:35:91:e0:14:84:42:71:4d:
         56:10:73:e5:db:49:ee:63:e1:02:07:30:fe:78:00:c8:46:67:
         ba:bc:d4:09:51:6a:5b:77:b3:9a:51:8e:00:1b:0d:4b:a9:b2:
         5b:be:b6:cc:58:82:b6:d5:b9:85:47:52:4e:e8:b1:b1:b0:ff:
         c8:88:13:5e:70:6d:09:0d:bc:8a:90:d8:0f:43:e6:51:c2:f8:
         c8:6f:ab:76:2f:0a:35:44:1f:ce:d0:3b:9e:cd:51:e7:41:a4:
         24:73:5e:8e:e3:68:fc:d3:3e:ba:28:d9:9e:33:99:fd:ce:20:
         32:46:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net