Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/218/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
File:                     3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          FQLI9YMhiqiMV0AmH3kzd8TEDWJ8SEKUvXS+iwf25sE=
Subject key identifier:   9C:B7:BA:64:39:6A:10:F9:93:6C:CD:74:1B:BC:97:C5:C6:39:5E:41
Certificate issuer:       /CN=7bca4da732ca1e47104872840269c9f17c9dd5f2
Certificate serial:       7A980D62452C08AC73007FE0C87181C06539404C
Authority key identifier: 7B:CA:4D:A7:32:CA:1E:47:10:48:72:84:02:69:C9:F1:7C:9D:D5:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8pNpzLKHkcQSHKEAmnJ8Xyd1fI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/218/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:46 +0000
ROA not before:           Sat 22 Oct 2022 04:28:46 +0000
ROA not after:            Sat 21 Oct 2023 04:33:46 +0000
asID:                     147049
IP address blocks:        176.100.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:98:0d:62:45:2c:08:ac:73:00:7f:e0:c8:71:81:c0:65:39:40:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bca4da732ca1e47104872840269c9f17c9dd5f2
        Validity
            Not Before: Oct 22 04:28:46 2022 GMT
            Not After : Oct 21 04:33:46 2023 GMT
        Subject: CN=9CB7BA64396A10F9936CCD741BBC97C5C6395E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:d6:e7:cd:b4:dc:fb:de:3f:4a:7c:83:d0:
                    a6:c0:ad:5c:25:ac:cd:57:7c:7c:71:b3:2d:c9:1a:
                    42:27:4c:ef:bd:07:54:48:5b:66:d6:d0:60:5a:55:
                    ba:f0:a9:5a:1a:f9:b5:e8:ee:2e:f6:ec:e8:e7:24:
                    3e:c1:37:63:59:78:cf:68:12:db:d7:0d:f7:59:70:
                    2d:e2:ed:02:7f:91:81:5b:56:67:90:c6:74:2b:f7:
                    ab:ed:a2:5b:c4:a3:07:84:cd:0d:0a:b6:09:ba:3a:
                    14:94:e4:65:44:eb:70:6f:53:1c:8d:8b:4e:45:09:
                    a3:ac:b3:13:de:f0:fc:3c:85:25:e7:92:95:f0:b0:
                    f5:6e:3a:c6:af:9f:88:0a:c3:99:d8:be:1e:e4:fb:
                    c8:11:9c:b8:2e:9a:94:6e:f7:da:82:12:1b:a4:d9:
                    af:be:fe:f1:c0:46:d8:ba:c5:7d:bd:f3:be:7a:c3:
                    91:c8:15:7a:48:85:2c:a9:ad:ec:99:0e:c6:f6:82:
                    82:f7:49:ea:cb:89:b6:91:56:09:01:8d:86:0d:52:
                    bd:49:8e:af:12:ad:46:a6:a1:05:60:45:27:2d:f4:
                    f4:ed:28:fb:df:8f:0d:2d:b8:1a:88:76:2f:e6:e1:
                    5d:b1:47:85:8f:75:f5:22:a3:31:2d:92:a0:d1:10:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B7:BA:64:39:6A:10:F9:93:6C:CD:74:1B:BC:97:C5:C6:39:5E:41
            X509v3 Authority Key Identifier:
                keyid:7B:CA:4D:A7:32:CA:1E:47:10:48:72:84:02:69:C9:F1:7C:9D:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/218/7BCA4DA732CA1E47104872840269C9F17C9DD5F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8pNpzLKHkcQSHKEAmnJ8Xyd1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/218/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.100.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:42:a7:5c:43:52:10:d4:99:b7:c4:95:1f:3b:f6:6d:05:
         10:4e:2a:dd:41:19:cd:44:76:b5:c6:7f:69:58:76:32:b1:f2:
         f9:9a:53:87:f7:f3:ba:6a:c5:eb:6c:07:10:43:53:c9:f3:6c:
         1b:4d:25:ed:02:38:c6:97:87:ba:c2:43:6b:e2:36:4b:09:00:
         16:7c:14:83:cf:ba:0d:7f:05:65:19:43:d6:94:43:8f:8b:7e:
         83:fa:d0:9f:8a:03:b0:d5:37:7d:a0:29:bb:a0:32:9a:9b:89:
         e2:4b:79:26:53:ba:79:b6:00:36:c3:a9:66:ec:7f:ee:8b:24:
         62:d6:00:f1:2b:89:4b:34:76:d1:ac:d8:f9:05:d9:c9:38:12:
         b6:94:ed:36:a4:56:30:79:f3:b8:ad:e1:a9:c3:72:1a:9b:86:
         73:a9:9c:fe:73:61:3a:45:a2:4e:a2:17:b4:b3:62:72:06:b5:
         a8:f3:5e:7e:3b:7a:d8:a4:98:26:e7:f8:e5:41:3e:13:66:bf:
         a6:38:08:51:dd:92:d9:59:e0:d4:75:9a:ec:e1:05:c2:1d:20:
         44:25:ed:83:db:1d:70:4e:50:02:a4:dc:ae:51:b7:4c:93:f6:
         d8:13:ef:63:bf:74:79:76:d0:ca:cf:a8:44:1c:21:3f:18:ca:
         20:2b:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net