Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34332e3131392e302f32342d3234203d3e203631333137.roa
File:                     3139332e34332e3131392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1okmYW9xY/PUAkj+4zzjkg/tOwJU9kl90lHdESAb95w=
Subject key identifier:   BB:60:59:9C:9F:E4:9F:12:AF:2F:9C:5F:21:41:C3:EB:A6:F1:A8:17
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5297D8F88BA7D8A77E190412EF942D298163B54A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34332e3131392e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:10 +0000
ROA not before:           Sat 22 Oct 2022 04:29:10 +0000
ROA not after:            Sat 21 Oct 2023 04:34:10 +0000
asID:                     61317
IP address blocks:        193.43.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:97:d8:f8:8b:a7:d8:a7:7e:19:04:12:ef:94:2d:29:81:63:b5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:10 2022 GMT
            Not After : Oct 21 04:34:10 2023 GMT
        Subject: CN=BB60599C9FE49F12AF2F9C5F2141C3EBA6F1A817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:9f:f1:c6:56:67:87:06:e2:8c:57:96:02:
                    d2:9c:d7:a7:d4:e8:aa:24:c3:7c:2a:87:61:86:91:
                    34:6d:51:21:25:81:a6:8d:14:59:b3:43:98:5b:69:
                    8f:4e:6b:a3:92:34:d4:31:2c:f9:d2:d2:95:6b:84:
                    2a:6d:f6:06:b6:c8:bf:f9:de:15:ed:88:fd:7b:d2:
                    ed:eb:2a:c1:41:6b:69:fd:79:38:26:88:48:68:a6:
                    38:59:74:cc:94:73:c1:d2:7a:86:60:82:f2:79:28:
                    3f:36:6f:f0:2f:a3:51:fc:a7:a6:62:ea:cb:71:84:
                    6e:e7:a0:ed:ea:fa:cd:87:4f:50:cf:7e:ac:6b:ed:
                    a2:78:3a:5d:a0:61:6f:9c:42:c9:55:b7:54:4b:ca:
                    e0:ae:e9:1b:90:3f:17:a1:b6:d6:a0:cf:b6:37:db:
                    a5:ae:ec:57:43:24:e0:26:3c:cf:bc:c7:71:74:7d:
                    f4:e5:7d:e0:fc:45:7f:25:d5:57:5e:02:c6:d8:a6:
                    57:6a:17:05:4d:95:94:92:54:ca:1b:d8:8f:2c:e4:
                    54:72:82:17:ad:d5:be:81:d7:23:95:e4:ca:30:7c:
                    89:32:5b:93:7a:77:9a:69:cb:d3:18:61:71:e8:6d:
                    7b:17:b3:4b:47:61:63:3c:78:22:64:76:8b:84:d8:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:59:9C:9F:E4:9F:12:AF:2F:9C:5F:21:41:C3:EB:A6:F1:A8:17
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34332e3131392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:31:b3:ae:fe:3c:06:a0:33:23:ef:2e:37:38:96:06:5b:ae:
         32:31:21:78:78:2b:4e:85:51:83:d1:0f:31:eb:fd:f0:7d:59:
         fc:ed:b9:2d:e9:ab:3a:5e:f8:8f:ae:af:d4:ee:ad:a3:99:48:
         d6:8d:61:59:8a:cc:62:89:5e:24:14:9e:2b:1f:53:ca:22:66:
         59:c4:bf:a0:b9:42:28:5a:e6:46:c2:c8:fd:ff:bc:df:c9:1b:
         d9:51:36:70:61:9e:9c:6c:e5:ab:50:91:c2:e5:d0:bf:75:74:
         4c:48:ec:d8:c3:15:e8:f4:c5:c1:fe:0a:56:a2:bc:f3:eb:eb:
         7b:a7:4a:e2:97:87:f9:e1:aa:a8:f5:59:c2:08:65:39:92:6e:
         de:1a:b4:9d:b7:1d:5c:a1:6d:cc:fa:18:2d:75:d4:45:44:3a:
         bd:bc:d4:93:bf:3f:01:9e:35:2b:ae:33:ca:ea:51:6f:78:2a:
         f1:1e:2f:92:c6:24:8e:67:c7:8b:a8:ba:65:45:c6:a1:6e:4f:
         d5:5d:3b:ba:2a:98:9c:49:6c:cd:8a:fd:ff:c5:0c:5f:f8:33:
         fe:12:12:df:a1:47:9f:ca:ad:e8:aa:e8:71:93:b9:49:84:a7:
         18:20:dc:f8:56:e7:01:f0:0e:37:df:e4:53:45:90:55:87:c1:
         f0:90:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net