Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323132323938.roa
File:                     3139332e34322e302e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          kmwtywJF5F5lznhpJhXhzfk06w24SprnU/N9gC/Z+9E=
Subject key identifier:   AB:42:BA:F0:18:1B:3C:F8:8B:BB:D9:DB:06:7D:69:AE:36:87:E6:45
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       0C178A26D2748FB9A348B5A8A4DF1CA0D93CBCD0
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323132323938.roa
Signing time:             Fri 04 Dec 2020 12:20:56 +0000
ROA not before:           Fri 04 Dec 2020 12:15:56 +0000
ROA not after:            Fri 03 Dec 2021 12:20:56 +0000
asID:                     212298
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:17:8a:26:d2:74:8f:b9:a3:48:b5:a8:a4:df:1c:a0:d9:3c:bc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  4 12:15:56 2020 GMT
            Not After : Dec  3 12:20:56 2021 GMT
        Subject: CN=3082010A0282010100A76DF9E873A9C79A3FAB2CED342BE33DF5852F5ADF27F8488D7EF5FC53603B6240E106D937F88C4BE3224658A260B8CA9422294969BA8C778B95979F1FEF56E680B5541E79BC6A50DC513648AA5BCDFDA5FF1CA2D22FE97D5278EC65047E511D467E322543D7958A705D43D4A1C4C4A976883BBB2B95F646D8C19AC8D8C752D7C221A12BEA888E4D390EE33ED2A5FEAB21DF67A511991D1B3F2DBCC6EDBE322873E122FD6D30B8166698D61215259EFD5978D491B80DC139FABF126C26878B32D118D5B46088A35EF78F5BE131E0DA958E11690175728B0AC07D982FEB226FA2B54BC889453FBAB28F861283962AD7569F54CEA2D1CB7340F6A00DAE5A2075130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:f9:e8:73:a9:c7:9a:3f:ab:2c:ed:34:2b:
                    e3:3d:f5:85:2f:5a:df:27:f8:48:8d:7e:f5:fc:53:
                    60:3b:62:40:e1:06:d9:37:f8:8c:4b:e3:22:46:58:
                    a2:60:b8:ca:94:22:29:49:69:ba:8c:77:8b:95:97:
                    9f:1f:ef:56:e6:80:b5:54:1e:79:bc:6a:50:dc:51:
                    36:48:aa:5b:cd:fd:a5:ff:1c:a2:d2:2f:e9:7d:52:
                    78:ec:65:04:7e:51:1d:46:7e:32:25:43:d7:95:8a:
                    70:5d:43:d4:a1:c4:c4:a9:76:88:3b:bb:2b:95:f6:
                    46:d8:c1:9a:c8:d8:c7:52:d7:c2:21:a1:2b:ea:88:
                    8e:4d:39:0e:e3:3e:d2:a5:fe:ab:21:df:67:a5:11:
                    99:1d:1b:3f:2d:bc:c6:ed:be:32:28:73:e1:22:fd:
                    6d:30:b8:16:66:98:d6:12:15:25:9e:fd:59:78:d4:
                    91:b8:0d:c1:39:fa:bf:12:6c:26:87:8b:32:d1:18:
                    d5:b4:60:88:a3:5e:f7:8f:5b:e1:31:e0:da:95:8e:
                    11:69:01:75:72:8b:0a:c0:7d:98:2f:eb:22:6f:a2:
                    b5:4b:c8:89:45:3f:ba:b2:8f:86:12:83:96:2a:d7:
                    56:9f:54:ce:a2:d1:cb:73:40:f6:a0:0d:ae:5a:20:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:BA:F0:18:1B:3C:F8:8B:BB:D9:DB:06:7D:69:AE:36:87:E6:45
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:66:82:3e:b3:99:44:29:74:d5:07:2c:62:30:9b:df:85:
         28:a6:73:8e:10:77:4b:df:d2:97:f2:cc:71:20:01:23:d9:f5:
         54:62:fc:1a:e8:56:fa:48:da:04:03:f8:da:fa:4f:01:17:5b:
         37:93:90:30:c1:80:b4:e6:ec:8a:0c:c1:25:c0:4f:99:ff:d5:
         d7:de:c0:91:c4:7f:6c:c6:db:ac:37:b4:ae:8e:a8:ff:5c:e5:
         0b:1b:62:c8:fb:42:d0:66:d2:22:0f:59:b2:67:3d:f7:c6:63:
         40:6c:1b:d8:af:4d:7b:a0:cb:e1:6c:3a:cf:3d:16:7b:10:0b:
         07:49:e9:72:05:55:23:fe:35:0c:a4:42:32:df:3b:fe:98:5b:
         64:c4:c8:38:ad:dd:ba:98:eb:79:3d:fc:76:02:2b:42:1e:ee:
         88:25:16:92:53:b1:23:e6:35:f8:4b:24:43:96:9d:1e:8c:04:
         2b:0a:14:99:c1:24:86:97:69:e9:c8:21:04:98:5c:d5:7b:9e:
         74:05:cb:b4:fe:ca:6f:fa:f1:f3:8e:4c:34:0e:d3:ff:3a:4e:
         8e:22:0f:64:8c:5d:ea:7d:0d:f3:ee:fa:38:bf:dd:e0:bd:e5:
         87:8e:4a:4d:27:56:fd:d0:4d:92:59:9b:cc:04:5c:77:2d:1a:
         07:37:84:1b
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUDBeKJtJ0j7mjSLWopN8coNk8vNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdhNmU1MjA2YmUzNTAxZGRkMzhkNmYzMWMzMzY4MjAw
YzQzYTQ3MzAeFw0yMDEyMDQxMjE1NTZaFw0yMTEyMDMxMjIwNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc2REY5RTg3M0E5Qzc5QTNG
QUIyQ0VEMzQyQkUzM0RGNTg1MkY1QURGMjdGODQ4OEQ3RUY1RkM1MzYwM0I2MjQw
RTEwNkQ5MzdGODhDNEJFMzIyNDY1OEEyNjBCOENBOTQyMjI5NDk2OUJBOEM3NzhC
OTU5NzlGMUZFRjU2RTY4MEI1NTQxRTc5QkM2QTUwREM1MTM2NDhBQTVCQ0RGREE1
RkYxQ0EyRDIyRkU5N0Q1Mjc4RUM2NTA0N0U1MTFENDY3RTMyMjU0M0Q3OTU4QTcw
NUQ0M0Q0QTFDNEM0QTk3Njg4M0JCQjJCOTVGNjQ2RDhDMTlBQzhEOEM3NTJEN0My
MjFBMTJCRUE4ODhFNEQzOTBFRTMzRUQyQTVGRUFCMjFERjY3QTUxMTk5MUQxQjNG
MkRCQ0M2RURCRTMyMjg3M0UxMjJGRDZEMzBCODE2NjY5OEQ2MTIxNTI1OUVGRDU5
NzhENDkxQjgwREMxMzlGQUJGMTI2QzI2ODc4QjMyRDExOEQ1QjQ2MDg4QTM1RUY3
OEY1QkUxMzFFMERBOTU4RTExNjkwMTc1NzI4QjBBQzA3RDk4MkZFQjIyNkZBMkI1
NEJDODg5NDUzRkJBQjI4Rjg2MTI4Mzk2MkFENzU2OUY1NENFQTJEMUNCNzM0MEY2
QTAwREFFNUEyMDc1MTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp2356HOpx5o/qyztNCvjPfWFL1rfJ/hIjX71/FNgO2JA4QbZN/iM
S+MiRliiYLjKlCIpSWm6jHeLlZefH+9W5oC1VB55vGpQ3FE2SKpbzf2l/xyi0i/p
fVJ47GUEflEdRn4yJUPXlYpwXUPUocTEqXaIO7srlfZG2MGayNjHUtfCIaEr6oiO
TTkO4z7Spf6rId9npRGZHRs/LbzG7b4yKHPhIv1tMLgWZpjWEhUlnv1ZeNSRuA3B
Ofq/Emwmh4sy0RjVtGCIo173j1vhMeDalY4RaQF1cosKwH2YL+sib6K1S8iJRT+6
so+GEoOWKtdWn1TOotHLc0D2oA2uWiB1EwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FKtCuvAYGzz4i7vZ2wZ9aa42h+ZFMB8GA1UdIwQYMBaAFGem5SBr41Ad3TjW8xwz
aCAMQ6RzMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzgvNjdB
NkU1MjA2QkUzNTAxREREMzhENkYzMUMzMzY4MjAwQzQzQTQ3My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1o2YmxJR3ZqVUIzZE9OYnpIRE5vSUF4RHBITS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTc4LzMxMzkzMzJlMzQzMjJl
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBKgAwDQYJKoZIhvcNAQELBQADggEBAJNbZoI+s5lEKXTVByxiMJvfhSimc44Q
d0vf0pfyzHEgASPZ9VRi/BroVvpI2gQD+Nr6TwEXWzeTkDDBgLTm7IoMwSXAT5n/
1dfewJHEf2zG26w3tK6OqP9c5QsbYsj7QtBm0iIPWbJnPffGY0BsG9ivTXugy+Fs
Os89FnsQCwdJ6XIFVSP+NQykQjLfO/6YW2TEyDit3bqY63k9/HYCK0Ie7oglFpJT
sSPmNfhLJEOWnR6MBCsKFJnBJIaXaenIIQSYXNV7nnQFy7T+ym/68fOOTDQO0/86
To4iD2SMXep9DfPu+ji/3eC95YeOSk0nVv3QTZJZm8wEXHctGgc3hBs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net