Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa
File:                     3139342e3136332e33322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          cAcb1TMtfBXH0NsBD3S24wtNC04d7RJAin6LuDyKDkk=
Subject key identifier:   C9:3D:CD:D4:F1:61:79:3F:D4:F2:7C:45:52:7A:8B:4A:27:D5:47:39
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2CBA0072FAB99CA4428754951F6160B431049E87
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:35 +0000
ROA not before:           Sat 22 Oct 2022 04:29:35 +0000
ROA not after:            Sat 21 Oct 2023 04:34:35 +0000
asID:                     61317
IP address blocks:        194.163.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ba:00:72:fa:b9:9c:a4:42:87:54:95:1f:61:60:b4:31:04:9e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:35 2022 GMT
            Not After : Oct 21 04:34:35 2023 GMT
        Subject: CN=C93DCDD4F161793FD4F27C45527A8B4A27D54739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:e3:71:ce:53:f0:26:26:b1:db:2c:31:fe:
                    26:20:1d:9b:e9:26:8a:14:0e:37:aa:b2:80:5b:0d:
                    9a:c8:f8:50:2e:bb:99:60:2e:6d:9e:9f:3c:84:a5:
                    17:24:2d:96:d5:14:79:0e:51:46:c7:06:37:d2:50:
                    72:14:99:6b:1a:0a:a7:2e:0e:97:cf:74:66:24:23:
                    e5:91:65:eb:72:4e:08:84:1d:6a:7b:70:75:b8:47:
                    3e:78:19:5f:3d:c7:80:cb:27:18:09:7f:a0:e9:2f:
                    d5:cb:b1:7e:c4:1b:ae:98:72:0b:bb:b6:d2:45:ec:
                    e3:74:65:14:4c:55:fa:29:4b:ce:14:1f:7d:3e:f8:
                    39:2c:e6:97:2d:80:a0:a4:0c:81:e6:3b:a1:42:bb:
                    1e:e6:19:25:ec:81:8f:85:64:7a:32:65:71:d1:f3:
                    55:13:7a:20:dc:fe:4d:83:54:18:ca:a0:24:7d:a6:
                    ba:72:37:37:a3:97:b6:22:41:ac:6e:fc:77:0c:79:
                    75:cc:b9:db:84:70:43:d6:ae:51:0f:aa:52:67:48:
                    e0:f5:69:86:4e:c3:b2:32:59:9d:69:69:2b:6d:a3:
                    e2:63:9c:37:62:06:03:00:85:fd:00:3f:40:41:3b:
                    eb:5d:00:1e:1d:53:95:ab:e6:8b:9e:06:04:26:5a:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3D:CD:D4:F1:61:79:3F:D4:F2:7C:45:52:7A:8B:4A:27:D5:47:39
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.163.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:bb:29:73:a4:e5:80:02:08:14:4d:f9:07:74:e3:ff:29:
         d7:ab:30:2d:f1:6e:6f:33:a3:2c:c4:7b:18:93:91:f7:f9:3a:
         69:91:35:b6:fa:36:c3:10:ff:cd:9e:09:0c:d2:c2:5c:17:f2:
         39:41:03:7e:48:83:78:10:8e:ef:44:eb:87:55:26:34:69:12:
         f3:db:2b:01:40:ff:4a:8f:fa:0a:77:eb:9e:3c:b8:93:4c:24:
         e7:8f:70:9c:52:4b:32:fe:5b:9e:62:52:39:bc:19:f4:5e:d6:
         95:09:44:d7:33:fe:d4:17:81:b0:21:2c:fa:e2:e2:56:00:0d:
         1f:c3:64:d5:2e:c1:42:2c:56:ae:45:46:1c:f1:11:51:1f:a1:
         04:b2:46:cc:84:04:57:c4:30:6f:57:cd:a8:1b:b3:c8:7c:ae:
         d6:c0:27:7d:af:02:b1:a1:8f:8f:5c:7b:e0:71:7f:4d:d8:1b:
         a0:0e:4c:29:9e:0b:e6:3d:19:09:40:d8:26:55:14:d4:9c:ae:
         43:57:9c:bd:f0:0f:13:62:03:88:e6:a5:35:3a:4d:5c:25:d3:
         46:66:db:53:26:42:4b:18:56:f9:19:5d:1a:dd:b4:ea:19:03:
         38:42:71:c7:fd:8e:7b:52:1d:b1:76:0a:d7:c1:fe:c2:c7:c4:
         03:29:6a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net