Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa
File:                     3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa (raw, json)
Hash identifier:          UlOnmq4KE5KdivBtqytr1Amopjpr7YMJ78IkAlgMVNw=
Subject key identifier:   2C:83:0A:D1:81:1C:00:49:63:8A:E7:C7:3B:BD:28:AB:8C:CB:70:3A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       72ACB5C9F708AF56458490294648775EEFCFF27A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa
Signing time:             Sat 22 Oct 2022 04:34:25 +0000
ROA not before:           Sat 22 Oct 2022 04:29:25 +0000
ROA not after:            Sat 21 Oct 2023 04:34:25 +0000
asID:                     203098
IP address blocks:        193.189.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ac:b5:c9:f7:08:af:56:45:84:90:29:46:48:77:5e:ef:cf:f2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:25 2022 GMT
            Not After : Oct 21 04:34:25 2023 GMT
        Subject: CN=2C830AD1811C0049638AE7C73BBD28AB8CCB703A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:c2:b5:09:d2:37:ba:96:0b:fc:0a:72:3c:
                    09:bf:56:c3:86:88:dc:e9:af:75:7e:d8:3c:ee:69:
                    e2:66:a9:a8:25:a5:96:bf:bc:50:f0:30:2a:b6:02:
                    87:0e:35:3a:1a:b6:a6:f5:e3:6b:8d:b8:0f:61:ca:
                    4f:31:59:f9:57:0c:84:8e:6b:3c:eb:22:a7:a7:47:
                    d7:89:4e:22:28:88:ed:b3:50:e2:cc:c6:56:27:19:
                    7e:0b:a2:08:f7:f7:82:ef:16:ba:a9:54:e4:ec:eb:
                    92:b7:8e:a5:ad:9c:22:05:66:2a:bf:73:b2:d2:18:
                    75:98:00:24:38:86:f0:98:db:9e:04:79:69:96:85:
                    9b:48:09:8f:2b:5f:dd:51:93:79:fb:b0:74:46:56:
                    d5:e7:b8:5f:45:5b:db:af:8b:8c:cc:71:24:fe:6e:
                    e4:5e:38:ed:6d:a9:65:fb:78:1c:f8:0b:5e:ac:e7:
                    21:c4:b1:e1:97:96:48:94:c4:b1:05:16:16:87:98:
                    c1:42:8e:e6:ef:15:98:3e:c5:6e:2c:41:26:c9:a6:
                    f5:a4:17:5b:71:62:2d:1a:11:9d:22:1d:58:71:16:
                    91:98:b0:e6:48:07:ff:5d:14:db:42:12:61:0b:2b:
                    16:be:c1:22:1e:bb:c2:30:3a:94:d7:a6:75:c7:8d:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:0A:D1:81:1C:00:49:63:8A:E7:C7:3B:BD:28:AB:8C:CB:70:3A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.189.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:ec:c3:ec:cb:ec:3a:f7:56:20:2f:f6:59:09:67:38:bf:d9:
         cf:5b:38:78:e6:af:df:f7:e4:56:cf:29:98:98:95:4c:7a:43:
         3c:84:ce:1b:9c:09:35:72:e4:39:74:0e:09:01:72:84:06:05:
         f7:73:1b:2f:92:1c:e8:4a:99:46:d1:41:ae:d4:70:82:97:12:
         b8:73:8e:0d:55:8f:7f:e1:8f:4b:34:55:48:32:db:c2:31:55:
         e2:43:69:56:4d:2a:79:6f:6a:07:4c:eb:f4:62:71:d8:46:cf:
         8e:98:b1:41:f5:a2:87:f6:d4:7f:aa:05:ea:f3:4b:64:7d:06:
         f8:29:37:77:0a:ce:63:ea:58:de:fd:b8:5e:af:17:a0:de:52:
         1e:cf:6d:85:37:c3:05:f2:56:df:1e:02:d5:3d:3f:c5:34:4f:
         f3:1b:2d:94:05:f1:a8:4c:54:64:d0:34:ac:41:93:a7:da:39:
         01:fc:65:02:20:c3:08:1b:59:5b:be:8e:e9:90:72:12:51:75:
         40:79:1a:3c:c6:3e:93:05:27:b8:3d:99:02:97:05:19:fd:1f:
         5b:d9:2f:ed:86:31:58:1d:50:e7:89:7a:c2:ba:7c:58:c5:49:
         1e:83:7f:17:dc:85:56:92:c8:0b:6a:46:3c:63:b9:ed:6d:9c:
         10:8c:7e:c5
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUcqy1yfcIr1ZFhJApRkh3Xu/P8nowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjVaFw0yMzEwMjEwNDM0MjVaMDMxMTAvBgNV
BAMTKDJDODMwQUQxODExQzAwNDk2MzhBRTdDNzNCQkQyOEFCOENDQjcwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjcK1CdI3upYL/ApyPAm/VsOG
iNzpr3V+2DzuaeJmqaglpZa/vFDwMCq2AocONToatqb142uNuA9hyk8xWflXDISO
azzrIqenR9eJTiIoiO2zUOLMxlYnGX4Logj394LvFrqpVOTs65K3jqWtnCIFZiq/
c7LSGHWYACQ4hvCY254EeWmWhZtICY8rX91Rk3n7sHRGVtXnuF9FW9uvi4zMcST+
buReOO1tqWX7eBz4C16s5yHEseGXlkiUxLEFFhaHmMFCjubvFZg+xW4sQSbJpvWk
F1txYi0aEZ0iHVhxFpGYsOZIB/9dFNtCEmELKxa+wSIeu8IwOpTXpnXHjZt/AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQULIMK0YEcAEljiufHO70oq4zLcDowHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzOTMzMmUzMTM4MzkyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2Uy
MDMyMzAzMzMwMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcG9ajANBgkqhkiG9w0BAQsFAAOCAQEA
NOzD7MvsOvdWIC/2WQlnOL/Zz1s4eOav3/fkVs8pmJiVTHpDPITOG5wJNXLkOXQO
CQFyhAYF93MbL5Ic6EqZRtFBrtRwgpcSuHOODVWPf+GPSzRVSDLbwjFV4kNpVk0q
eW9qB0zr9GJx2EbPjpixQfWih/bUf6oF6vNLZH0G+Ck3dwrOY+pY3v24Xq8XoN5S
Hs9thTfDBfJW3x4C1T0/xTRP8xstlAXxqExUZNA0rEGTp9o5AfxlAiDDCBtZW76O
6ZByElF1QHkaPMY+kwUnuD2ZApcFGf0fW9kv7YYxWB1Q54l6wrp8WMVJHoN/F9yF
VpLIC2pGPGO57W2cEIx+xQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net