Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e203531373635.roa
File:                     3139342e3134372e35392e302f32342d3234203d3e203531373635.roa (raw, json)
Hash identifier:          GnvcOryh7sEh7Pqx7m8hDmiao0WwJktEIFXojK8tKCQ=
Subject key identifier:   2C:70:27:B1:8A:B7:CC:C4:BF:C3:DD:0A:CB:F3:1B:39:7C:4F:91:97
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       0B058BA22B1C7A6834EB31F5C358D202217A1A68
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e203531373635.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     51765
IP address blocks:        194.147.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:8b:a2:2b:1c:7a:68:34:eb:31:f5:c3:58:d2:02:21:7a:1a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=2C7027B18AB7CCC4BFC3DD0ACBF31B397C4F9197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:2a:28:04:9f:df:32:b6:73:a6:fe:74:cf:
                    56:24:67:e0:f7:b5:43:92:61:37:c1:db:b0:58:bf:
                    51:60:7c:05:16:c4:16:1c:89:fe:32:1e:c5:55:aa:
                    f2:69:c0:4c:0e:46:d2:70:fc:9e:b8:23:0e:69:d8:
                    29:cd:49:ad:27:65:5d:14:8b:0f:14:23:66:fa:47:
                    cb:2e:f8:80:65:29:9f:d9:45:7b:b8:83:af:03:b7:
                    95:5b:b9:38:98:70:5f:ad:92:8b:9f:4c:05:4b:6f:
                    29:99:0b:5a:bf:74:db:72:ea:5d:b0:ed:5a:f7:ac:
                    e2:91:03:0c:0c:1c:42:c5:8d:d1:8e:73:96:7c:63:
                    99:d7:b2:2b:4e:9d:e7:98:e2:49:dd:ab:97:26:14:
                    bf:1e:b3:bc:2f:21:7a:fb:16:fb:74:02:41:1d:49:
                    a5:60:e0:c6:2c:b6:1e:0c:74:f9:2a:2b:37:36:a2:
                    ea:39:64:df:c4:82:3b:25:f6:cd:2c:85:c4:ec:b7:
                    3c:cf:6f:87:4e:1e:19:db:4d:89:ca:0a:e6:23:2f:
                    cd:7a:a8:b1:b4:70:33:04:f1:63:dd:04:eb:ab:ec:
                    b9:e3:1f:29:40:b0:f8:e9:24:1d:b6:13:d3:3b:ec:
                    01:ac:ab:8b:aa:f4:3e:32:21:94:1a:5c:3d:4c:d6:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:70:27:B1:8A:B7:CC:C4:BF:C3:DD:0A:CB:F3:1B:39:7C:4F:91:97
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e203531373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:01:a4:ba:41:08:71:48:78:8c:4b:d1:5d:02:8a:0e:a7:43:
         46:9e:ee:48:8a:c9:cf:19:af:9b:29:94:57:16:87:b2:59:4e:
         84:5b:5c:08:73:bb:b6:56:23:06:20:a5:29:32:12:13:7c:af:
         10:c5:e6:da:a5:d6:50:bf:4b:17:95:f6:17:1d:9a:3f:c2:fd:
         33:82:d8:e0:cc:b5:b8:d4:06:6e:0e:4f:51:ab:1f:ec:2a:0d:
         85:fd:62:fb:99:82:68:88:ca:83:5c:83:f0:ee:3b:e2:46:92:
         1a:a7:42:1c:27:e2:fd:06:02:d4:fc:57:40:54:13:16:bd:af:
         22:67:c8:ae:c9:6f:42:a8:2a:1d:d4:fe:a9:d8:e0:99:e9:12:
         fb:db:0f:22:ca:99:b7:fe:13:83:2c:e1:76:6e:1c:77:58:99:
         a7:6f:05:3d:c5:95:9a:4e:4f:3f:21:c1:65:69:91:77:7c:c9:
         36:65:6b:5a:4b:13:56:81:4b:14:8f:b0:5a:0c:22:95:78:1a:
         05:0a:6b:b7:d1:83:a1:dc:b2:88:74:87:0c:f2:11:57:e9:be:
         94:0d:dd:a3:84:97:1c:9f:eb:16:00:b4:c1:e7:e0:4a:cd:8e:
         c9:b3:ea:f3:58:1a:9d:6d:bf:7e:ac:41:6a:39:9c:95:a4:aa:
         11:2d:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net