Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39342e302f32332d3234203d3e20323037343239.roa
File:                     3139342e3139352e39342e302f32332d3234203d3e20323037343239.roa (raw, json)
Hash identifier:          Wt3CBBMHoyaFg3E6Ve/O02tF9aaf/Azi0ei65VFaGeY=
Subject key identifier:   E7:4A:03:2B:BC:02:E7:59:1B:C5:0C:2F:52:AC:8E:47:2B:50:5F:51
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       55BD58368D2B4FF8E2EBD9D910179D27B48B35F9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39342e302f32332d3234203d3e20323037343239.roa
Signing time:             Sat 22 Oct 2022 04:34:18 +0000
ROA not before:           Sat 22 Oct 2022 04:29:18 +0000
ROA not after:            Sat 21 Oct 2023 04:34:18 +0000
asID:                     207429
IP address blocks:        194.195.94.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bd:58:36:8d:2b:4f:f8:e2:eb:d9:d9:10:17:9d:27:b4:8b:35:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:18 2022 GMT
            Not After : Oct 21 04:34:18 2023 GMT
        Subject: CN=E74A032BBC02E7591BC50C2F52AC8E472B505F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:30:46:77:ee:db:ce:99:76:05:28:8a:86:
                    8d:7e:7d:41:cc:48:50:97:48:c4:62:4e:e2:11:d3:
                    9c:eb:45:61:48:48:8a:94:b0:07:56:38:4b:2a:3a:
                    4c:48:f2:76:6a:64:8b:e4:64:4e:9b:0b:43:f9:6d:
                    a4:e4:77:b0:4a:e4:48:c6:93:bc:41:e1:20:d5:b7:
                    3b:e4:7f:f9:0d:2c:f5:74:c6:58:ba:f1:ff:65:20:
                    62:49:65:11:40:32:7f:b4:21:1a:ef:0d:b0:07:2a:
                    d4:03:dd:5a:79:ad:1b:15:31:f3:de:5f:8c:d0:8d:
                    2e:88:f5:bc:40:34:a8:64:af:20:c1:bb:d1:76:93:
                    21:f2:7b:5b:26:e3:bb:4b:0b:d9:8c:e5:3b:32:24:
                    f2:4d:95:3e:af:a1:fb:3f:c1:ae:de:b0:94:69:aa:
                    96:7d:ad:a5:51:80:12:31:5b:31:6e:80:b8:a5:d9:
                    c2:69:28:11:d9:20:ea:bf:7a:d3:bb:62:c0:ff:19:
                    c6:c2:17:22:2f:38:7b:35:70:b5:e9:da:46:2f:20:
                    49:15:86:b1:b3:bc:43:66:11:59:44:5d:d7:5d:5a:
                    0b:e4:59:a5:24:de:7b:7a:f0:73:9e:0b:3a:99:2e:
                    7a:62:2e:ee:7d:8b:64:ca:06:60:db:25:78:02:67:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:03:2B:BC:02:E7:59:1B:C5:0C:2F:52:AC:8E:47:2B:50:5F:51
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39342e302f32332d3234203d3e20323037343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:59:58:3f:e5:37:e9:d4:66:59:29:6a:5f:f4:e4:20:62:4d:
         a0:b3:39:ed:f7:49:27:90:b1:b3:88:ec:52:41:7d:e2:f2:81:
         b1:ee:1a:2a:04:0f:46:67:fc:f1:c7:7f:36:54:e8:32:f5:98:
         c4:19:84:cd:b4:1f:a0:9a:50:85:3b:cd:a2:1c:31:eb:07:3e:
         8e:be:ed:74:ea:ad:e8:f9:91:6d:70:ee:ae:48:d0:a9:1d:d2:
         21:10:82:71:70:96:15:f5:0d:b4:90:08:cb:0e:cc:ad:06:8a:
         cb:fa:4c:cc:ff:4c:f6:2f:43:df:13:ea:df:72:20:c3:a4:00:
         78:23:49:16:42:7d:2a:47:2f:81:04:71:bf:f7:0a:74:03:ed:
         af:87:cd:65:bb:4f:7d:1f:51:1f:63:26:26:57:bb:ef:99:48:
         c6:40:34:af:41:4d:46:a0:15:4c:8a:d0:a2:8f:1a:36:df:50:
         12:2f:a8:99:ff:a3:ea:c2:8f:d8:c1:e2:eb:fd:e2:47:f0:2f:
         3b:37:db:16:58:af:5a:dc:fe:9b:16:22:53:5a:2a:f9:66:9e:
         2e:8a:1b:6f:78:5b:5c:5c:31:21:1e:60:71:fa:42:a0:49:a6:
         36:80:7e:a7:73:eb:95:de:55:a7:f5:c4:f4:37:46:2b:fb:7a:
         75:6e:52:cc
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUVb1YNo0rT/ji69nZEBedJ7SLNfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MThaFw0yMzEwMjEwNDM0MThaMDMxMTAvBgNV
BAMTKEU3NEEwMzJCQkMwMkU3NTkxQkM1MEMyRjUyQUM4RTQ3MkI1MDVGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yjBGd+7bzpl2BSiKho1+fUHM
SFCXSMRiTuIR05zrRWFISIqUsAdWOEsqOkxI8nZqZIvkZE6bC0P5baTkd7BK5EjG
k7xB4SDVtzvkf/kNLPV0xli68f9lIGJJZRFAMn+0IRrvDbAHKtQD3Vp5rRsVMfPe
X4zQjS6I9bxANKhkryDBu9F2kyHye1sm47tLC9mM5TsyJPJNlT6vofs/wa7esJRp
qpZ9raVRgBIxWzFugLil2cJpKBHZIOq/etO7YsD/GcbCFyIvOHs1cLXp2kYvIEkV
hrGzvENmEVlEXdddWgvkWaUk3nt68HOeCzqZLnpiLu59i2TKBmDbJXgCZ+rXAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU50oDK7wC51kbxQwvUqyORytQX1EwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzQyZTMxMzkzNTJlMzkzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzAzNzM0MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcLDXjANBgkqhkiG9w0BAQsFAAOCAQEAFllY
P+U36dRmWSlqX/TkIGJNoLM57fdJJ5Cxs4jsUkF94vKBse4aKgQPRmf88cd/NlTo
MvWYxBmEzbQfoJpQhTvNohwx6wc+jr7tdOqt6PmRbXDurkjQqR3SIRCCcXCWFfUN
tJAIyw7MrQaKy/pMzP9M9i9D3xPq33Igw6QAeCNJFkJ9KkcvgQRxv/cKdAPtr4fN
ZbtPfR9RH2MmJle775lIxkA0r0FNRqAVTIrQoo8aNt9QEi+omf+j6sKP2MHi6/3i
R/AvOzfbFlivWtz+mxYiU1oq+WaeLoobb3hbXFwxIR5gcfpCoEmmNoB+p3Prld5V
p/XE9DdGK/t6dW5SzA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net