Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39332e302f32342d3234203d3e20313336373837.roa
File:                     3139342e3139352e39332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          hmbApNZ1pS326FJ8gyR27+JQHsO8xogh2DS1JKJL/vc=
Subject key identifier:   13:5C:46:92:C9:2D:09:72:CC:74:BB:F6:3A:6B:A0:A3:09:34:25:8B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4C5F72A011C5806331CCA032AA50BFB96D8D34BA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39332e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:33 +0000
ROA not before:           Sat 22 Oct 2022 04:29:33 +0000
ROA not after:            Sat 21 Oct 2023 04:34:33 +0000
asID:                     136787
IP address blocks:        194.195.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5f:72:a0:11:c5:80:63:31:cc:a0:32:aa:50:bf:b9:6d:8d:34:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:33 2022 GMT
            Not After : Oct 21 04:34:33 2023 GMT
        Subject: CN=135C4692C92D0972CC74BBF63A6BA0A30934258B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:16:21:5b:65:56:c5:7d:80:33:17:ff:d3:
                    b8:09:66:93:5f:c3:a9:dd:70:d1:6d:44:b4:00:9a:
                    b4:e0:d7:4a:f4:77:38:f6:06:32:37:c7:49:2f:a0:
                    38:96:2f:40:38:e6:d6:8f:0d:77:6f:c1:c6:c9:1d:
                    7e:8e:7c:80:6b:64:69:68:d1:7d:5a:c6:eb:68:97:
                    ee:d2:79:34:b3:86:0c:35:ea:63:ff:68:de:9d:6a:
                    7e:60:5b:b5:fd:78:ed:91:22:4c:1c:0f:45:3c:77:
                    6c:f9:7a:3a:38:a3:62:84:29:6a:58:5a:cd:58:66:
                    48:fa:2c:4c:0b:63:39:12:e4:19:34:ba:40:59:d3:
                    0e:76:06:ac:b9:99:1d:6e:05:41:59:83:da:25:1c:
                    88:22:73:52:73:6b:3e:81:ae:4f:0a:57:97:63:79:
                    01:e1:40:2f:1e:75:f8:db:73:bf:1b:cd:46:35:2e:
                    c9:2e:d2:47:7f:cc:06:51:e1:0a:69:db:87:67:45:
                    9f:48:0f:77:50:e7:57:7e:d6:ac:33:11:dc:68:b4:
                    47:76:67:d1:1c:2d:df:8d:26:b7:bb:c7:c7:79:06:
                    c0:40:03:16:c9:81:73:72:d6:da:da:fd:3a:b0:ce:
                    ed:b5:d5:d4:90:78:42:8a:9e:89:b4:da:81:3f:51:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5C:46:92:C9:2D:09:72:CC:74:BB:F6:3A:6B:A0:A3:09:34:25:8B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:33:e7:4c:b8:df:cd:a3:ef:14:0b:d7:88:1a:1a:ab:58:
         38:29:85:1f:b5:14:0a:5f:23:02:55:05:af:40:5b:b3:88:4a:
         c5:0c:a8:47:91:7b:83:07:06:5a:89:20:35:64:7f:ce:ca:6e:
         0c:8c:0a:9a:69:39:9f:96:d2:03:09:a5:14:6a:ae:30:37:41:
         4e:b8:ad:69:00:e0:63:ba:21:af:ff:3d:2b:e9:75:08:cf:8c:
         3e:c7:3d:76:4a:3b:d7:f5:62:5a:71:28:5e:89:f5:7c:fc:19:
         ed:e4:5c:e9:7c:4a:b1:e9:b8:40:37:b7:17:e7:9e:75:fe:c8:
         fd:9b:eb:6f:74:3d:7c:d6:8e:cc:19:0e:0f:62:3c:9f:66:09:
         84:2b:9e:7a:a0:a3:29:da:8b:c9:5a:44:57:4d:2c:72:41:91:
         51:b8:93:e4:c9:5e:16:ec:64:05:f3:e2:6f:3f:7c:4d:44:0f:
         75:49:7b:9a:a0:ad:fd:8a:6c:00:fc:fe:c4:b6:1e:f5:a5:70:
         f7:6a:11:64:d2:93:ab:c8:3f:b1:dc:40:8a:a5:cb:c9:e6:04:
         02:a7:32:33:c2:ff:30:bb:71:61:14:81:bb:ce:36:54:d3:24:
         82:52:e0:2f:d9:58:dd:31:2a:3a:a8:95:e5:3c:06:b4:0d:82:
         b0:65:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net