Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2037373234.roa
File:                     3139332e3230332e31352e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          XwbuMulxjJo/rxrVTBSJ5zfpM4CCfJpZ99Jr+gXO95Y=
Subject key identifier:   94:D6:BC:20:95:0E:96:BD:75:8E:C1:C2:D9:35:89:21:AB:8B:48:30
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       1567FF70389CF80FE9C8112581F8272D5E45254E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2037373234.roa
Signing time:             Tue 28 Jun 2022 04:41:09 +0000
ROA not before:           Tue 28 Jun 2022 04:36:09 +0000
ROA not after:            Tue 27 Jun 2023 04:41:09 +0000
asID:                     7724
IP address blocks:        193.203.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:ff:70:38:9c:f8:0f:e9:c8:11:25:81:f8:27:2d:5e:45:25:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:09 2022 GMT
            Not After : Jun 27 04:41:09 2023 GMT
        Subject: CN=94D6BC20950E96BD758EC1C2D9358921AB8B4830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:c5:f1:b9:24:ba:0e:5a:1a:9c:56:13:3a:
                    11:7d:52:69:80:45:79:82:1a:a0:d0:b2:1c:11:2a:
                    dc:03:67:1e:cd:80:79:eb:d5:5c:fe:7d:e2:9b:7b:
                    c7:a4:66:1a:79:b3:04:fd:f0:aa:b0:5e:da:81:1c:
                    39:96:bc:fa:58:8a:75:9f:2b:a7:7c:13:85:33:4c:
                    04:da:6f:36:5e:71:8f:6e:99:e2:52:12:17:98:13:
                    c0:df:0f:c4:63:6e:6b:e2:74:43:63:46:87:dc:e3:
                    6d:96:00:b6:1e:bf:9b:7a:49:e3:ec:a7:02:84:55:
                    cf:57:1b:3a:7f:25:18:f7:90:65:0a:76:86:56:2b:
                    a5:31:7d:8a:13:fb:6b:e7:ab:17:ab:85:d6:7a:60:
                    5d:c7:a7:f6:80:a0:6f:90:c8:df:d3:00:bf:c2:0e:
                    13:d1:bf:db:79:46:97:67:29:82:c9:fb:48:d5:f9:
                    2b:10:d8:b9:36:bc:21:0d:9d:45:81:f8:7c:e1:53:
                    46:a4:09:95:94:ab:20:03:b2:8c:29:79:de:dc:6c:
                    1c:84:cd:20:b2:95:fa:5e:30:f9:80:22:be:71:78:
                    76:0b:a4:b7:3d:3b:68:bc:a5:3c:11:06:73:7c:bc:
                    de:7c:a6:fd:18:9f:03:ce:b3:18:88:ba:bd:7a:f5:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:BC:20:95:0E:96:BD:75:8E:C1:C2:D9:35:89:21:AB:8B:48:30
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c7:77:4d:12:48:81:74:ef:a2:f8:7f:78:db:3b:c9:90:44:
         00:44:ca:c7:5f:03:f0:39:fa:5c:96:67:61:33:0e:ea:8a:3c:
         58:08:ac:34:1a:2e:e5:ce:4a:77:80:f0:27:25:17:38:a3:29:
         f8:17:2b:02:c9:31:8f:c5:43:8d:01:ed:f9:0f:a7:58:d0:08:
         99:88:66:b6:72:78:2c:d8:d9:32:2a:bc:79:5e:a7:45:d3:9e:
         8a:32:fd:f2:04:77:4c:9a:b2:b7:1e:d0:9b:50:eb:38:bf:de:
         53:bc:6f:f2:d5:b8:7a:af:fc:34:c0:0f:27:34:12:71:8b:4b:
         9e:e8:db:52:e7:5c:61:4b:75:73:78:6f:c7:d0:69:10:23:19:
         f2:fb:ed:55:69:75:d6:20:31:02:c2:6c:9d:7c:ec:bf:18:99:
         08:68:d0:c8:8d:64:13:dd:a2:c3:9c:9e:bc:0f:be:3b:4b:58:
         18:48:a8:82:60:72:a7:6f:37:6f:d2:eb:51:b0:e9:b5:b7:de:
         41:06:91:0a:ae:d3:87:6e:44:c3:b3:96:27:bc:eb:9c:6b:3b:
         12:31:d5:cd:c0:ef:43:dd:89:72:0a:cb:95:05:e1:ef:d8:70:
         c1:e8:32:47:31:fb:b3:1e:19:e4:37:0f:70:ea:45:9e:b4:df:
         73:f5:e6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net