Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e20323132373434.roa
File:                     3139322e3136362e3234352e302f32342d3234203d3e20323132373434.roa (raw, json)
Hash identifier:          yDR5gLqKXNW/JXTaqUTGwJltnrPvd1uSFI0Im9oV02k=
Subject key identifier:   76:B6:EB:99:13:89:45:FE:A6:C7:51:08:43:8A:5D:0F:16:6F:20:4E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       056D015131A11C459C7FAB9FC36CC885E9C462B8
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e20323132373434.roa
Signing time:             Tue 28 Jun 2022 04:41:11 +0000
ROA not before:           Tue 28 Jun 2022 04:36:11 +0000
ROA not after:            Tue 27 Jun 2023 04:41:11 +0000
asID:                     212744
IP address blocks:        192.166.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6d:01:51:31:a1:1c:45:9c:7f:ab:9f:c3:6c:c8:85:e9:c4:62:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:11 2022 GMT
            Not After : Jun 27 04:41:11 2023 GMT
        Subject: CN=76B6EB99138945FEA6C75108438A5D0F166F204E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:72:ee:d3:46:0f:b0:3e:5d:8d:76:6b:cc:
                    7d:82:87:80:1f:71:9b:df:af:fe:53:b6:03:dc:4a:
                    e2:49:fb:5f:22:d6:24:f9:a4:b2:8a:a6:f0:c9:d5:
                    2d:16:ad:96:30:51:73:f5:8d:42:8f:4b:b2:1c:e5:
                    e4:ff:86:0b:64:3c:10:b6:c1:17:ac:4c:1c:0b:44:
                    98:89:27:85:43:83:94:49:34:76:18:1d:3c:3b:0d:
                    5e:2b:7e:bf:73:0e:36:53:5c:8b:50:d4:56:72:16:
                    d8:45:b8:5f:f5:a3:91:0d:bd:4a:05:d0:12:dc:5f:
                    b2:d5:a9:63:de:20:1e:7d:ab:fe:c0:f3:a0:77:cb:
                    06:f3:98:bf:ae:ed:35:f4:58:d6:66:06:2d:6f:cc:
                    a2:60:5a:b3:3d:fc:26:5b:85:8c:d9:5b:f9:46:be:
                    c7:52:36:39:bc:13:4b:de:70:ed:bc:04:07:e5:18:
                    aa:e5:83:02:16:05:d3:f0:33:ae:df:77:b1:2f:0c:
                    ab:c0:5b:bd:6a:b9:4e:58:8e:db:4e:66:12:df:4c:
                    d3:6f:ca:62:87:ab:c9:33:c1:99:3b:06:91:72:71:
                    85:62:b2:e7:76:35:c9:f8:81:61:b2:1d:f1:34:63:
                    c7:e3:45:73:0b:75:1a:d8:60:24:fb:c1:89:d9:38:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B6:EB:99:13:89:45:FE:A6:C7:51:08:43:8A:5D:0F:16:6F:20:4E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e20323132373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:31:4d:17:44:8c:16:5f:08:c5:b1:29:21:e9:34:b1:80:f2:
         7f:27:7e:05:b9:7f:92:8e:26:fb:90:3a:12:ea:ac:e2:91:1f:
         b8:80:46:d7:35:c2:70:52:97:fb:b1:c6:49:93:4f:19:9a:91:
         4c:68:4e:74:a4:31:08:b9:0d:86:36:87:d2:7c:5c:2c:f5:2f:
         0b:0c:59:a0:89:68:40:fe:a0:e8:ab:73:df:22:f9:7d:57:0e:
         1d:e4:2b:e3:1e:4b:84:05:9f:01:14:6a:78:88:99:f5:ea:3f:
         b1:da:43:77:3a:b9:09:2a:05:af:3e:1a:db:17:cc:48:bc:42:
         7b:ce:79:c7:66:3f:7e:0e:2f:2f:e9:4e:75:b4:da:cc:e2:93:
         29:5c:49:82:b2:aa:eb:8c:de:ee:e7:a6:fb:f6:5c:8f:a0:e9:
         cc:f1:4e:47:85:d4:d6:48:9b:6d:fb:1d:37:f7:aa:e3:38:b2:
         9f:29:41:3a:c6:2f:15:84:5f:2c:ab:ad:53:d2:08:03:9d:6e:
         03:66:04:50:53:01:90:bf:bc:cd:f7:40:4f:44:41:16:bf:95:
         12:bd:8a:3d:08:88:b8:cf:63:27:a8:36:ea:e9:93:62:f0:f8:
         7b:32:34:9b:15:45:62:1f:cd:c8:62:6c:e6:d1:c8:9b:de:2b:
         53:6e:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net