Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e3133372e302f32342d3234203d3e203437353833.roa
File:                     3139332e34322e3133372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          0rJgpcj+9II7lFbaHEKR6Gg6QEnmcGH6HcoCuQ6wpLY=
Subject key identifier:   23:77:41:5A:04:FE:9B:29:55:B8:ED:6F:8E:48:49:48:2B:E6:E3:72
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       710C6196BDF61BCB44D00B68FBA41A689EA846F9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e3133372e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:13 +0000
ROA not before:           Sat 22 Oct 2022 04:29:13 +0000
ROA not after:            Sat 21 Oct 2023 04:34:13 +0000
asID:                     47583
IP address blocks:        193.42.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0c:61:96:bd:f6:1b:cb:44:d0:0b:68:fb:a4:1a:68:9e:a8:46:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:13 2022 GMT
            Not After : Oct 21 04:34:13 2023 GMT
        Subject: CN=2377415A04FE9B2955B8ED6F8E4849482BE6E372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:35:e4:e7:7a:a9:ad:85:eb:af:5e:cf:72:
                    05:6c:99:e5:0e:aa:32:8e:5b:ab:d1:8a:a8:f2:ef:
                    30:38:2d:80:ab:a9:2e:f4:87:c4:75:26:87:50:b0:
                    63:51:35:8e:2e:f6:ad:cd:95:db:ec:ed:dd:71:a1:
                    c9:f8:f2:67:40:68:4e:ff:16:d3:1c:04:17:cb:54:
                    16:df:f9:87:c9:10:f6:47:c3:0e:56:6b:3d:37:66:
                    1e:e7:bc:cd:09:c5:5c:d9:3a:ba:7a:ed:2a:1d:46:
                    70:dd:13:70:3b:b8:13:9d:a2:95:47:e7:db:d3:39:
                    dc:62:b1:43:72:58:68:d5:45:9c:38:aa:23:7f:48:
                    26:41:c4:6d:35:88:b2:02:4b:f6:5c:85:f4:08:e5:
                    c5:bf:5a:6a:ca:c0:9c:d0:d3:db:a9:79:02:eb:b7:
                    06:19:52:2d:a4:a9:cc:31:4b:97:9a:18:e7:7e:db:
                    62:b1:c6:03:b0:26:79:d9:f5:6b:75:e0:75:e2:8d:
                    a3:5a:12:8b:29:fc:b2:7d:fe:fc:74:bb:1b:ed:30:
                    b6:2c:7b:7b:53:5f:1e:59:fa:c6:ec:e2:54:6e:97:
                    4b:b7:31:da:6d:9c:13:27:e9:6b:33:ab:e9:12:e3:
                    be:7e:7e:0f:1b:08:67:28:91:09:fd:3d:0d:ab:ae:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:77:41:5A:04:FE:9B:29:55:B8:ED:6F:8E:48:49:48:2B:E6:E3:72
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e3133372e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:49:91:2d:ae:0f:0a:3a:63:9d:72:17:e8:60:b4:70:1e:
         83:8a:c5:e7:89:6b:3a:65:4f:56:a2:1f:ef:43:cc:28:d9:c5:
         91:4b:28:57:ea:d8:ed:d0:ed:4a:91:11:9d:82:bd:43:36:84:
         69:4d:de:65:48:58:f2:c6:21:1c:e3:c0:27:c9:cf:ba:14:9f:
         5e:cc:3e:d1:5b:98:1a:c8:82:f9:a0:8c:a2:0a:20:bd:0d:cf:
         65:05:cb:71:91:c4:d4:5a:22:43:ed:f9:80:78:85:a6:c1:44:
         b0:d0:4d:07:2c:5c:5e:f3:32:fa:88:c7:22:1b:af:18:4f:bb:
         83:d4:33:24:3e:73:d2:18:79:ae:09:18:3b:2f:e7:5f:8c:04:
         e9:46:e3:05:34:4f:30:d0:fc:2f:12:91:f9:71:69:95:7b:79:
         31:65:a6:99:5d:e7:2b:d7:7b:47:e9:37:7d:2e:37:fa:2f:00:
         b0:75:88:b5:be:ce:73:1c:73:5e:80:73:db:ce:88:4d:6b:7a:
         2d:8d:57:2b:3f:f5:89:a7:58:dd:8b:4d:7d:45:67:cf:18:0d:
         1f:af:92:0f:4c:4e:6a:42:1a:12:89:f5:2a:bb:16:c8:12:be:
         e8:24:05:40:80:98:6d:52:b9:e9:85:6a:da:a2:8f:c0:91:66:
         82:9d:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net