Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32342d3234203d3e20313336373837.roa
File:                     3139342e3139352e38382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          Ik1SGLI2Il/mW/8gfBtfhqhbtMs5Uf15hIX2EVv5xWY=
Subject key identifier:   F4:E8:D8:94:F1:3E:E7:AF:BF:F3:24:54:88:51:DA:2A:F2:CF:7D:9F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5020A5687DA9294F1144EA10036F22798AFD0F79
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32342d3234203d3e20313336373837.roa
Signing time:             Thu 29 Dec 2022 10:01:42 +0000
ROA not before:           Thu 29 Dec 2022 09:56:42 +0000
ROA not after:            Thu 28 Dec 2023 10:01:42 +0000
asID:                     136787
IP address blocks:        194.195.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:20:a5:68:7d:a9:29:4f:11:44:ea:10:03:6f:22:79:8a:fd:0f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 29 09:56:42 2022 GMT
            Not After : Dec 28 10:01:42 2023 GMT
        Subject: CN=F4E8D894F13EE7AFBFF324548851DA2AF2CF7D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:1e:af:18:8a:7e:17:60:e6:ad:15:1c:56:
                    f9:4b:e3:75:8e:ca:93:de:fb:9a:40:50:63:94:b1:
                    86:68:03:f5:78:54:6f:82:32:b2:47:a7:79:6c:d5:
                    e7:3b:b8:d6:27:50:41:29:09:4c:f9:50:0b:19:d0:
                    70:4d:59:52:1a:2b:78:dc:7c:6a:70:a0:33:93:64:
                    41:21:f1:92:82:c9:4a:67:96:db:f0:9e:c3:ea:14:
                    38:a2:f3:96:30:d2:37:9d:8e:f9:a5:01:10:2c:0e:
                    aa:74:ba:32:66:71:20:10:22:59:52:6c:46:49:41:
                    1e:2d:ce:d0:b2:e5:8d:46:56:c0:4b:39:bb:9f:e8:
                    4c:fb:94:70:75:da:b2:4a:4e:3c:49:eb:d9:da:74:
                    9c:ef:f3:63:47:99:ee:65:40:4a:6f:36:aa:a7:5c:
                    0d:72:e9:e6:cb:2b:93:39:0b:30:c2:c5:32:0f:78:
                    58:33:ae:d1:55:09:b0:94:17:f9:e6:de:25:45:50:
                    1a:ce:ff:b8:22:4a:02:44:d3:13:9f:22:fa:95:2c:
                    6d:af:91:8b:27:de:c4:d5:f1:5b:a2:d1:33:85:a7:
                    89:89:07:b2:ae:9f:06:e3:c6:33:ee:4a:06:49:e2:
                    e6:00:36:6b:61:53:0c:ce:39:b0:8e:44:70:fd:2c:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E8:D8:94:F1:3E:E7:AF:BF:F3:24:54:88:51:DA:2A:F2:CF:7D:9F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:41:88:cb:f7:da:7b:2f:55:88:5d:03:0a:48:f1:2c:54:
         2e:77:b9:5a:3c:0a:80:43:b3:f9:26:f7:8e:42:ee:ee:c3:3d:
         5e:30:df:0d:af:b6:f3:68:09:df:e4:f1:7a:f0:8d:c8:2b:ab:
         a9:1e:24:07:11:eb:59:8d:28:57:78:bc:01:3b:30:80:37:3f:
         da:7f:02:c0:79:12:6f:a3:8d:d5:fc:60:73:25:c8:c4:d5:66:
         04:32:a0:68:57:39:3b:be:bb:1f:cb:d9:3e:b8:45:65:76:5b:
         fb:ba:dc:47:de:b0:e4:67:8d:b4:e7:8d:e0:c7:65:5d:f3:7b:
         16:34:54:5b:17:d5:1d:ec:29:d0:a4:ce:06:a4:ea:bf:9a:63:
         d4:d8:48:80:94:4d:a5:04:74:d1:84:92:55:89:74:d0:d1:72:
         14:f7:88:d0:28:61:d8:c5:f7:39:9c:47:a4:f4:24:20:69:cc:
         62:a7:a3:e0:cb:35:0b:b3:24:4b:67:14:f0:ba:f1:24:ef:8b:
         fe:0c:31:2e:3a:4c:9f:32:8f:95:eb:ed:76:9c:7d:13:10:37:
         e9:44:23:b8:56:99:29:48:af:f1:0e:cb:3e:a6:94:0a:e6:9b:
         29:f7:30:43:e1:ce:54:d6:7a:7f:20:6e:25:16:9f:34:5e:d3:
         85:61:73:5f
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUUCClaH2pKU8RROoQA28ieYr9D3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMjkwOTU2NDJaFw0yMzEyMjgxMDAxNDJaMDMxMTAvBgNV
BAMTKEY0RThEODk0RjEzRUU3QUZCRkYzMjQ1NDg4NTFEQTJBRjJDRjdEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Gx6vGIp+F2DmrRUcVvlL43WO
ypPe+5pAUGOUsYZoA/V4VG+CMrJHp3ls1ec7uNYnUEEpCUz5UAsZ0HBNWVIaK3jc
fGpwoDOTZEEh8ZKCyUpnltvwnsPqFDii85Yw0jedjvmlARAsDqp0ujJmcSAQIllS
bEZJQR4tztCy5Y1GVsBLObuf6Ez7lHB12rJKTjxJ69nadJzv82NHme5lQEpvNqqn
XA1y6ebLK5M5CzDCxTIPeFgzrtFVCbCUF/nm3iVFUBrO/7giSgJE0xOfIvqVLG2v
kYsn3sTV8Vui0TOFp4mJB7KunwbjxjPuSgZJ4uYANmthUwzOObCORHD9LHlJAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU9OjYlPE+56+/8yRUiFHaKvLPfZ8wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzQyZTMxMzkzNTJlMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMLDWDANBgkqhkiG9w0BAQsFAAOCAQEAOelB
iMv32nsvVYhdAwpI8SxULne5WjwKgEOz+Sb3jkLu7sM9XjDfDa+282gJ3+TxevCN
yCurqR4kBxHrWY0oV3i8ATswgDc/2n8CwHkSb6ON1fxgcyXIxNVmBDKgaFc5O767
H8vZPrhFZXZb+7rcR96w5GeNtOeN4MdlXfN7FjRUWxfVHewp0KTOBqTqv5pj1NhI
gJRNpQR00YSSVYl00NFyFPeI0Chh2MX3OZxHpPQkIGnMYqej4Ms1C7MkS2cU8Lrx
JO+L/gwxLjpMnzKPlevtdpx9ExA36UQjuFaZKUiv8Q7LPqaUCuabKfcwQ+HOVNZ6
fyBuJRafNF7ThWFzXw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net