Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/201/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
File:                     3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier:          +nr8j3HgxBi4RIDGNwT8mkN9Ci5zmwL6OH+ZTavaohI=
Subject key identifier:   2E:09:D9:29:5F:0D:B3:E3:6B:D3:D5:4D:D4:B2:EF:93:AE:C8:08:CF
Certificate issuer:       /CN=4c584bca2a103df4db67b2835de221aebe1ad26e
Certificate serial:       6280DEE875F88BC0A2FE2E28E453BCE600B36567
Authority key identifier: 4C:58:4B:CA:2A:10:3D:F4:DB:67:B2:83:5D:E2:21:AE:BE:1A:D2:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFhLyioQPfTbZ7KDXeIhrr4a0m4.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/201/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
Signing time:             Sat 22 Oct 2022 04:33:47 +0000
ROA not before:           Sat 22 Oct 2022 04:28:47 +0000
ROA not after:            Sat 21 Oct 2023 04:33:47 +0000
asID:                     205659
IP address blocks:        193.46.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:80:de:e8:75:f8:8b:c0:a2:fe:2e:28:e4:53:bc:e6:00:b3:65:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c584bca2a103df4db67b2835de221aebe1ad26e
        Validity
            Not Before: Oct 22 04:28:47 2022 GMT
            Not After : Oct 21 04:33:47 2023 GMT
        Subject: CN=2E09D9295F0DB3E36BD3D54DD4B2EF93AEC808CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:c3:e7:fd:27:d6:62:00:b9:ab:c9:71:25:
                    60:37:7b:f8:45:a3:97:6a:bc:70:44:4b:17:cf:10:
                    81:7e:df:8b:79:47:82:9e:d6:a9:72:ca:39:43:f0:
                    72:b4:9c:2d:0f:7b:ea:5c:4d:6f:ed:72:d3:07:8d:
                    3b:63:e9:39:5e:68:30:d3:8c:d2:3c:cb:48:70:8f:
                    f8:17:f3:ea:aa:90:83:4c:98:aa:f2:06:c0:3e:1a:
                    4a:bc:18:68:97:e0:ce:71:b4:fe:a1:37:d7:50:4a:
                    1d:a8:c9:83:85:fa:60:96:9f:14:37:f4:23:9a:50:
                    28:57:1f:4c:87:0c:68:57:79:11:e6:a2:16:db:26:
                    6b:e9:bb:8e:76:4f:ed:ec:e9:82:4a:2b:f1:1a:5d:
                    c7:53:cb:20:df:86:a6:f8:fc:ca:b4:d0:fc:9d:c6:
                    82:cf:81:2d:4c:2f:87:86:7d:92:22:74:92:4f:a2:
                    65:15:1a:cd:24:60:ff:76:d0:1a:10:97:2f:fb:66:
                    e9:bd:0f:10:49:0a:87:ec:24:b0:5e:db:f3:11:25:
                    f0:72:1a:f8:45:ef:2a:57:46:88:37:38:73:78:63:
                    1d:8a:06:5e:08:f4:77:2f:44:80:9d:71:e1:26:a1:
                    a9:11:6e:28:3d:ff:8b:2a:f8:d6:d6:b9:12:28:53:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:D9:29:5F:0D:B3:E3:6B:D3:D5:4D:D4:B2:EF:93:AE:C8:08:CF
            X509v3 Authority Key Identifier:
                keyid:4C:58:4B:CA:2A:10:3D:F4:DB:67:B2:83:5D:E2:21:AE:BE:1A:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/201/4C584BCA2A103DF4DB67B2835DE221AEBE1AD26E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFhLyioQPfTbZ7KDXeIhrr4a0m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/201/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:64:0b:3b:98:d5:80:a3:df:dc:c2:c2:07:c4:78:c3:6a:83:
         b1:60:78:8c:e2:c1:9b:7d:dc:c3:b1:53:3e:23:31:0d:08:01:
         79:da:74:7e:85:5d:1b:bd:67:e4:fc:61:89:88:08:3e:12:39:
         4c:0e:29:4e:d9:2e:11:d1:62:44:92:14:04:87:e4:6a:2c:9c:
         65:b0:d1:24:7e:80:07:10:5e:4a:64:2c:bb:08:7a:5a:3f:f4:
         2a:9c:dc:64:8d:f1:0a:f2:39:31:04:fb:a4:6b:86:9d:0d:82:
         52:17:54:6c:4b:92:28:4d:c0:ae:ce:61:be:e1:3b:34:aa:60:
         03:5c:ab:f5:71:6f:9d:dc:a9:35:93:01:6a:90:c7:3c:9b:7b:
         81:13:81:20:e7:19:10:8a:2c:29:16:7b:ad:17:a6:2e:1d:8d:
         05:e1:f8:0b:aa:86:82:f3:93:41:c2:05:7d:8d:02:4d:53:cb:
         83:2e:15:95:6b:14:e7:8f:27:dc:ac:20:ab:3b:12:27:1c:3e:
         5c:c4:99:d7:47:09:0a:b1:76:aa:a8:4b:a1:b1:25:02:8b:71:
         6a:b9:69:08:3f:06:d5:1b:6a:d2:55:75:32:c6:75:e0:11:7c:
         85:45:f6:14:f0:58:42:01:dd:0c:03:bf:42:88:16:a3:c3:ae:
         77:03:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net