Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323132303737.roa
File:                     3139332e34322e302e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          9qaMujIK0emQOU643rwmbGkGKZAZVgE6nO89W/U4br0=
Subject key identifier:   86:E3:C5:FC:32:53:38:B0:3D:33:5F:96:F3:E3:22:55:6F:EE:0D:4B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4BBE7C75671E2E31E67C14000B1B6A030A4E8036
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323132303737.roa
Signing time:             Tue 28 Jun 2022 04:40:46 +0000
ROA not before:           Tue 28 Jun 2022 04:35:46 +0000
ROA not after:            Tue 27 Jun 2023 04:40:46 +0000
asID:                     212077
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:7c:75:67:1e:2e:31:e6:7c:14:00:0b:1b:6a:03:0a:4e:80:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:46 2022 GMT
            Not After : Jun 27 04:40:46 2023 GMT
        Subject: CN=86E3C5FC325338B03D335F96F3E322556FEE0D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:60:94:cb:73:c2:a2:ad:2b:6b:0a:04:23:
                    51:47:18:d8:40:cf:2d:24:15:8f:0e:1d:5c:09:87:
                    7d:2d:24:f3:d4:bf:63:7d:dc:26:23:59:1e:34:94:
                    ba:4f:ad:a3:3f:6d:77:c2:a5:66:e3:fe:14:e6:43:
                    ea:2a:a0:1b:44:9a:07:b7:ef:14:e6:1a:e4:23:88:
                    c6:55:f7:c3:a4:3e:ee:ba:9c:22:d3:bb:4d:3e:57:
                    3e:cd:4d:37:b0:a8:09:c6:48:82:7a:84:d2:73:66:
                    42:25:a9:7f:37:cf:cb:a2:1d:60:85:f8:f0:b1:af:
                    03:9f:a2:99:f0:f0:64:70:23:8d:67:cf:16:96:a4:
                    56:a8:19:6d:be:40:ea:28:91:0c:04:86:48:03:51:
                    bd:7b:da:c3:ee:c7:35:c7:1c:f8:f7:d1:76:f5:18:
                    4b:1b:01:7a:41:f8:f9:c3:69:22:cc:e3:f2:1b:7e:
                    58:ce:88:c6:54:be:65:ec:2b:2f:8d:e8:11:9b:5f:
                    59:f3:cb:7d:b7:1c:0f:7e:64:fc:59:f8:8e:cc:1c:
                    d2:c2:46:6d:d4:29:0f:06:e1:b2:06:03:d5:8a:aa:
                    01:7d:1c:3b:47:10:37:07:b8:4c:40:9c:27:4f:91:
                    4b:b0:e1:5b:b0:ac:f5:bc:57:4f:47:a9:75:4d:5e:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E3:C5:FC:32:53:38:B0:3D:33:5F:96:F3:E3:22:55:6F:EE:0D:4B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:39:72:a8:18:c1:db:80:72:6d:c6:6d:75:cf:36:4d:7f:01:
         b6:51:44:fc:65:2b:a0:b7:e2:f5:98:21:cd:52:94:10:21:f1:
         b9:1a:34:b2:4c:b8:61:10:7c:97:7f:34:12:05:62:c5:14:46:
         c8:3e:b5:7b:ad:07:75:fd:c4:d2:e4:e4:fd:f9:4f:1e:31:b2:
         ef:f2:2d:d8:9e:78:ef:51:77:d1:a2:98:e4:70:53:41:5d:5e:
         e6:d1:1c:88:5b:e5:db:0a:15:4d:45:b2:ec:da:1f:ba:60:45:
         8c:cd:5a:1b:8d:01:99:5d:5d:f0:12:70:a9:2b:1c:1c:ea:33:
         65:93:b4:9a:69:a4:ae:1a:76:7f:3c:3d:7a:9b:3b:2d:13:70:
         04:52:86:01:b3:9a:ae:18:00:1e:5f:28:8a:24:bb:61:04:a3:
         d9:24:0d:88:79:b0:42:2a:41:74:fb:e5:b6:27:b7:90:b7:cb:
         11:e6:c8:d1:29:71:98:c1:7a:f5:24:f4:97:4a:22:a5:ce:03:
         f7:8c:73:be:74:f9:4d:0c:31:2d:38:84:22:d9:6a:ef:e0:ca:
         77:01:cd:47:da:3a:a6:69:59:26:f9:fb:3d:c0:ff:ed:72:96:
         c9:01:cd:e1:58:8d:63:be:d1:24:5f:f6:14:14:63:60:d3:94:
         17:04:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net