Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa
File:                     3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          ajx3xM98e+ggX/Vkb+u01OfbAgm0Xjg7TUenSZnIm3Y=
Subject key identifier:   BA:BD:42:D2:19:16:D1:8C:F1:F7:4C:F7:71:9F:D4:6C:41:E8:EE:BA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3166230436E1EB3FE31E212CA14DA3B2CB41580E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa
Signing time:             Sat 22 Oct 2022 04:34:32 +0000
ROA not before:           Sat 22 Oct 2022 04:29:32 +0000
ROA not after:            Sat 21 Oct 2023 04:34:32 +0000
asID:                     141039
IP address blocks:        193.43.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:66:23:04:36:e1:eb:3f:e3:1e:21:2c:a1:4d:a3:b2:cb:41:58:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:32 2022 GMT
            Not After : Oct 21 04:34:32 2023 GMT
        Subject: CN=BABD42D21916D18CF1F74CF7719FD46C41E8EEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:b4:f8:21:22:77:01:a3:83:7f:36:5b:62:a2:
                    0c:b2:80:1a:fd:ff:eb:93:e2:f7:71:5c:b4:ae:f1:
                    63:92:f3:e5:68:43:5d:4e:f7:d0:94:7d:b4:da:e3:
                    63:65:3b:c7:64:4c:75:77:7a:4b:29:a5:f2:b0:60:
                    83:27:3b:f0:56:58:6b:df:27:ba:e5:6e:97:ca:69:
                    70:1f:04:7c:52:92:9a:f9:34:cf:6b:f1:0b:43:ad:
                    91:da:bc:c6:2c:7d:e2:2b:72:c0:65:5a:f2:62:01:
                    44:68:86:7d:4a:17:63:09:44:04:41:56:fa:56:41:
                    88:86:0b:f7:98:d1:5b:f3:89:0e:db:e3:a6:11:9a:
                    94:40:ab:88:6b:36:92:d3:70:a0:e1:f6:95:dc:e5:
                    70:2c:a7:ed:89:d3:a3:c6:f0:b1:58:94:47:97:20:
                    8c:66:e7:3d:3b:f5:12:da:c5:bd:97:2f:c0:bb:4a:
                    5c:a4:9a:2d:74:d0:70:5c:0d:6c:6b:1f:6a:b3:a9:
                    d5:02:1e:9e:80:74:01:9e:73:31:37:e5:08:84:a7:
                    8a:91:60:1c:78:16:00:a7:db:ae:84:b4:26:01:ee:
                    91:4d:52:67:79:48:03:a4:bf:98:cb:3f:64:e0:00:
                    ea:f3:e6:8c:84:3f:32:13:79:ce:eb:d6:2c:f5:38:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:42:D2:19:16:D1:8C:F1:F7:4C:F7:71:9F:D4:6C:41:E8:EE:BA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:3f:bc:e9:23:ef:8e:63:4b:cd:a2:29:d6:4d:18:5e:a1:46:
         fa:37:6c:2d:db:2d:ea:6e:2f:ec:9b:6e:45:e2:f3:f7:d5:e5:
         75:2c:22:89:b5:45:87:f7:3d:dc:e5:f5:99:11:33:09:0d:d2:
         26:ed:d3:46:ca:55:5f:88:eb:8e:42:c9:a3:64:c1:39:25:cd:
         74:af:e3:af:91:c2:dc:fe:5f:b3:5c:30:24:54:7f:21:f2:25:
         ee:c5:ba:b0:9b:0d:99:ae:ae:83:73:00:f7:87:27:a9:b8:c8:
         18:f0:de:d4:93:75:0a:c6:93:8e:c1:bd:fe:c5:c3:7c:e0:e1:
         55:7c:51:88:57:28:26:ee:33:a8:f0:92:ce:34:e3:bd:e3:ef:
         6f:e2:6b:52:54:0f:e0:5e:9a:8d:a9:d4:6e:04:59:a0:b3:b4:
         b2:15:f7:7a:4a:3c:f6:d3:90:e4:91:2b:c4:0c:30:d4:22:e5:
         1e:e3:89:80:99:ca:7d:08:41:64:da:9d:a9:35:cc:89:06:6c:
         b8:b1:a6:e2:b5:1f:15:b0:6b:e7:b2:84:bf:e6:3a:46:ea:33:
         c8:9f:52:2c:00:7a:6e:01:52:f5:dc:eb:97:78:35:a4:bd:b3:
         f6:6c:4a:56:b4:b8:e0:87:dd:07:f1:8d:8e:42:4e:53:6f:a3:
         65:0d:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net