Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/215/39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa
File:                     39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          Rh/e3+Ta8G8fvueWQX+uRskZPd+uhTiD7RXodMtcSv8=
Subject key identifier:   7D:10:A9:C3:EE:C7:E6:9A:89:ED:F0:1E:7D:E6:C8:38:D6:6E:DB:8A
Certificate issuer:       /CN=d27757f2b764abcad8b4c1bfb574c9a40ab6cf10
Certificate serial:       25DAEA1E53E3DE560A06107DE80406E57059B4C0
Authority key identifier: D2:77:57:F2:B7:64:AB:CA:D8:B4:C1:BF:B5:74:C9:A4:0A:B6:CF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ndX8rdkq8rYtMG_tXTJpAq2zxA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/215/39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:34:08 +0000
ROA not before:           Sat 22 Oct 2022 04:29:08 +0000
ROA not after:            Sat 21 Oct 2023 04:34:08 +0000
asID:                     203061
IP address blocks:        91.199.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:da:ea:1e:53:e3:de:56:0a:06:10:7d:e8:04:06:e5:70:59:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27757f2b764abcad8b4c1bfb574c9a40ab6cf10
        Validity
            Not Before: Oct 22 04:29:08 2022 GMT
            Not After : Oct 21 04:34:08 2023 GMT
        Subject: CN=7D10A9C3EEC7E69A89EDF01E7DE6C838D66EDB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:bf:af:01:21:89:35:59:ec:28:86:6e:c9:
                    aa:c4:96:bc:ae:74:7a:7b:5a:ef:66:d5:b8:50:38:
                    e4:94:19:f3:9d:1e:72:f1:73:a5:94:a8:2a:f2:97:
                    49:1a:10:da:47:ae:1a:f5:ee:ff:43:dc:50:26:2d:
                    9d:13:8c:0c:b0:93:24:3d:48:d5:3f:a7:33:32:bb:
                    5d:a5:b8:92:b7:28:16:0d:90:7b:8b:a6:62:cb:ba:
                    10:86:8d:fe:bc:e3:68:e4:cc:2a:d0:97:8e:b0:0b:
                    a4:74:b7:18:e5:5d:3d:b7:4a:fc:70:b6:cb:14:d8:
                    66:56:d9:aa:d6:e6:51:44:66:2c:d2:ae:19:bd:c9:
                    47:d0:c6:a4:5c:e4:90:fc:4a:4b:52:6f:5a:d6:cf:
                    8e:f8:b6:39:a2:5e:01:27:1c:b1:1a:9f:43:67:26:
                    a8:3e:0a:23:96:5c:9b:2f:56:70:a7:04:95:b6:2b:
                    e0:fb:73:7b:b8:ab:3c:92:18:ca:a9:36:ae:1a:1e:
                    8f:04:47:9d:35:84:61:dd:f2:d2:80:cb:ff:c8:27:
                    7d:90:7e:f9:60:2e:0c:99:9c:4d:64:ac:21:3e:b0:
                    c0:29:54:e9:a6:21:6d:dd:d6:b4:2f:04:a4:bc:e4:
                    c6:12:02:76:da:9a:7c:1f:64:7a:b6:5a:fd:12:36:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:10:A9:C3:EE:C7:E6:9A:89:ED:F0:1E:7D:E6:C8:38:D6:6E:DB:8A
            X509v3 Authority Key Identifier:
                keyid:D2:77:57:F2:B7:64:AB:CA:D8:B4:C1:BF:B5:74:C9:A4:0A:B6:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/215/D27757F2B764ABCAD8B4C1BFB574C9A40AB6CF10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ndX8rdkq8rYtMG_tXTJpAq2zxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/215/39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:2a:ef:c5:f3:65:01:b4:33:b6:fa:d5:46:79:59:e3:64:68:
         c8:d2:c0:08:fc:a7:8a:1d:6e:6c:17:da:48:20:a0:87:a2:5e:
         4f:5f:c9:a1:62:3f:8a:ca:29:59:63:69:3a:8a:de:de:95:56:
         17:a7:09:10:a1:3f:ae:39:7b:78:ff:41:74:1f:97:c4:b4:b3:
         5d:a3:64:3e:fa:5e:f1:f5:27:cf:7b:24:bf:59:04:26:e0:cf:
         60:da:c2:af:fe:e2:a5:bf:aa:35:d7:aa:72:d5:4b:e5:14:96:
         2d:72:b4:8a:c7:28:36:6f:45:df:f3:eb:29:17:8b:31:da:2b:
         66:fa:8d:b9:3a:63:f5:da:47:03:73:d0:8f:ff:90:c2:22:c9:
         cd:e9:b0:8e:b1:89:e0:e5:79:2d:e9:b5:6f:4d:1b:e6:7d:a8:
         ee:b1:73:9c:d9:50:7d:f3:86:bf:da:a2:11:d0:9e:35:fa:d3:
         92:88:30:a6:c5:03:f1:1f:64:55:f6:45:40:43:2d:f8:88:99:
         f9:ae:a7:91:58:20:de:9d:7f:dd:8e:e4:04:c5:af:8b:5b:1e:
         77:e9:43:78:1b:d2:82:90:f6:dc:59:f0:a0:34:dc:e4:54:4e:
         e9:d1:5c:5d:f0:5e:2c:50:07:62:7e:f5:29:26:5d:01:08:8b:
         c3:d3:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net