Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e203232373733.roa
File:                     3139342e3139352e38372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          bomSrIoYHZM08XHxN31UsO89x6kNWrOAcNN6YEj/Np8=
Subject key identifier:   BA:0C:C8:68:E7:4B:C3:79:DE:44:1B:C3:A3:54:62:1B:62:DA:36:5F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4BDED438A668AF3E3A3A5FF89234B00AB6CD3E69
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:40:41 +0000
ROA not before:           Tue 28 Jun 2022 04:35:41 +0000
ROA not after:            Tue 27 Jun 2023 04:40:41 +0000
asID:                     22773
IP address blocks:        194.195.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:de:d4:38:a6:68:af:3e:3a:3a:5f:f8:92:34:b0:0a:b6:cd:3e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:41 2022 GMT
            Not After : Jun 27 04:40:41 2023 GMT
        Subject: CN=BA0CC868E74BC379DE441BC3A354621B62DA365F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:70:d4:10:f2:8f:b6:5f:40:42:4f:de:7e:
                    76:a9:65:2c:e9:e7:69:1d:8c:5c:4e:03:35:ed:3f:
                    ee:96:24:02:b2:d8:8f:39:a2:f5:e4:6d:e4:71:13:
                    3d:6f:29:d9:e5:0b:e7:0b:f3:0b:42:e8:e4:0a:4a:
                    15:b4:73:95:a3:3d:fe:a9:83:d9:b3:ee:91:ac:86:
                    f6:e4:27:91:90:5d:a0:31:4d:31:32:4e:4e:12:4b:
                    1f:e7:e3:b9:80:0d:0d:bb:31:76:3c:27:37:ea:27:
                    26:ad:71:0d:a7:f2:25:4d:c2:9a:f1:26:3b:93:37:
                    05:d3:cd:08:13:82:2b:3b:7a:68:2c:e3:6b:45:82:
                    27:0f:95:b9:b9:fe:36:6b:74:b5:4c:a5:35:42:a2:
                    68:a5:ad:f0:5e:b5:c1:8d:ec:2b:4e:fe:9f:fd:30:
                    20:97:aa:25:f4:a3:73:a2:2d:b2:6b:02:ca:bc:8b:
                    e2:2c:4d:73:79:15:2e:68:41:47:1b:79:8f:5a:a6:
                    38:39:98:75:60:3f:36:97:34:95:fa:64:d2:57:9f:
                    49:3a:98:b0:6b:e3:a9:da:4b:8a:4e:6c:94:c5:34:
                    4c:44:c9:e8:82:39:22:0b:65:c6:72:e2:bd:a9:04:
                    7e:a4:78:fb:21:f0:7a:89:86:c7:c8:3d:b1:d1:5e:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0C:C8:68:E7:4B:C3:79:DE:44:1B:C3:A3:54:62:1B:62:DA:36:5F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:9b:6d:72:2b:38:a0:ea:c7:34:34:32:9b:dd:69:24:05:
         93:69:df:fb:ab:56:4a:cd:64:2b:a6:f7:15:5d:47:1b:ed:7d:
         c1:da:62:dd:7b:8e:70:b5:07:b0:6f:91:74:39:e0:83:fc:63:
         8a:f4:f3:3a:4f:5c:c4:3b:96:d1:2e:43:f8:d9:37:80:b3:4b:
         cd:43:aa:b0:99:4f:53:8b:38:14:14:42:28:af:bb:9b:75:07:
         62:7d:8e:33:02:e3:98:28:7a:44:1e:ba:a6:e1:c5:ea:ba:4d:
         8b:84:0c:b4:b8:82:f2:24:6e:eb:c1:a5:db:9f:7c:58:10:a5:
         81:b8:bf:37:be:b8:9d:25:77:3d:06:be:b6:86:ad:2c:e7:10:
         c3:21:53:ca:4f:bc:16:c5:fb:2c:8a:b6:1f:66:9a:de:50:c2:
         ac:d8:41:b7:82:a7:be:52:65:d4:a1:19:66:57:70:dc:34:78:
         13:2b:22:e7:30:e0:e0:bb:a7:ec:fa:dd:0f:f5:36:dd:f3:30:
         90:81:b8:dd:a0:cc:5e:a6:42:d9:89:4e:0e:50:7d:a3:18:5b:
         e3:21:8e:3b:3e:41:69:b4:d1:a2:4e:b7:57:63:50:5b:8d:b6:
         c5:04:48:04:75:99:54:9f:b3:df:79:38:b8:28:02:63:58:b6:
         ed:fe:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net