Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e20323132363330.roa
File:                     3139332e34322e3133362e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          FBRzdBvwtg89J1Ps0GlvImOQ5t03aaqMzRi1NzcEd8k=
Subject key identifier:   7B:8B:6B:B0:10:36:E6:89:E0:7C:19:FA:DA:D0:2C:E7:5A:6D:01:82
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       23E488AEA7E0B3EC1107BC13F4A79CBB2DC77977
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e20323132363330.roa
Signing time:             Thu 03 Dec 2020 15:57:09 +0000
ROA not before:           Thu 03 Dec 2020 15:52:09 +0000
ROA not after:            Thu 02 Dec 2021 15:57:09 +0000
asID:                     212630
IP address blocks:        193.42.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e4:88:ae:a7:e0:b3:ec:11:07:bc:13:f4:a7:9c:bb:2d:c7:79:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:09 2020 GMT
            Not After : Dec  2 15:57:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:a5:7d:f2:d2:90:66:c5:96:97:4a:82:36:
                    fa:a2:71:83:1f:06:d0:9a:fc:91:94:04:9b:3a:ed:
                    0e:ff:21:a0:6a:39:71:40:50:89:7d:e2:3f:78:87:
                    6f:a9:6a:1a:3f:f5:16:f4:54:54:b0:41:17:ad:dc:
                    78:59:6e:b9:3c:10:71:ff:9d:95:f9:c9:2d:73:94:
                    f8:fc:7b:08:d7:46:f1:03:ea:46:f8:57:a6:2c:a3:
                    1e:c5:1c:fc:ab:f4:3f:03:47:81:34:c9:38:42:9f:
                    06:d7:dc:10:bc:2f:af:bb:f6:e4:82:4b:06:05:46:
                    c9:7f:4c:76:b3:a5:e8:e0:3f:b5:67:8d:f9:c9:2f:
                    d3:be:9e:22:ef:c3:8b:57:1e:59:0a:cc:cf:a6:df:
                    1d:2f:01:27:fc:85:eb:1e:d8:61:52:fa:01:f0:26:
                    d8:a7:95:33:85:e9:fd:a9:ae:31:a3:0e:ae:ef:94:
                    d8:9d:52:99:33:1e:38:26:0a:fa:34:78:ee:38:46:
                    f4:5b:c1:98:76:36:30:c7:de:8b:8e:48:93:44:73:
                    f6:a7:54:8e:cc:e4:94:33:2c:35:b8:e5:1d:f2:78:
                    fc:62:2b:e4:ca:15:3d:fe:5d:f1:2d:0e:86:5b:ac:
                    49:9c:37:79:6a:0b:1c:37:f0:17:82:ac:56:e2:b4:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8B:6B:B0:10:36:E6:89:E0:7C:19:FA:DA:D0:2C:E7:5A:6D:01:82
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:fb:8f:f9:d1:42:db:42:1c:c5:df:c4:d0:67:4a:52:fc:
         c0:f2:1b:ce:63:53:a2:19:cf:58:c0:6e:d5:8b:8f:5f:39:4c:
         df:1e:61:85:99:30:49:b9:d3:95:69:3c:75:46:c6:36:b6:28:
         29:10:31:e0:8f:cb:b9:cd:f7:a2:9a:c0:c3:9e:52:d2:52:85:
         e3:60:bd:d2:07:6a:16:a1:3c:64:45:fe:73:8b:d0:6a:9d:b2:
         43:4c:cd:76:1f:58:34:1b:40:f8:a6:01:bf:7d:1e:6e:71:a3:
         15:5e:57:1f:2e:b7:b7:60:a8:77:97:9d:4f:2b:49:a2:c0:a0:
         94:2c:27:db:70:c4:31:07:c7:72:4e:35:dd:11:c4:fc:bb:bf:
         a5:c6:3e:fe:f0:41:64:f6:bb:f2:ee:ec:66:cb:9a:85:a0:a6:
         ef:4e:5b:7a:11:07:ff:4c:e4:6c:d3:14:ee:4f:b7:62:d4:fd:
         72:8f:74:85:4a:df:51:75:80:2d:7e:56:ff:82:c5:82:11:bd:
         3a:d2:1e:fd:ba:94:fd:a9:f5:e9:42:08:ab:25:93:3c:7c:14:
         31:75:89:6c:dc:ce:f7:e9:9b:80:d7:64:74:63:8c:89:a6:b5:
         dc:19:90:58:65:2a:98:7b:86:b3:a1:76:77:03:14:43:54:bf:
         a4:ef:fd:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net