Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa
File:                     3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          mbCdLC5QSCvQ3fR66ydxAqOk0MH56FCzUSYIm0rTZZY=
Subject key identifier:   0D:BD:8B:D8:AD:4E:9D:E3:1D:B9:E8:A2:A9:16:DB:74:D9:79:EF:EC
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       112B7F9D954FE5F95F0AEBDA4946C856E3301667
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa
Signing time:             Fri 24 Feb 2023 07:47:36 +0000
ROA not before:           Fri 24 Feb 2023 07:42:36 +0000
ROA not after:            Fri 23 Feb 2024 07:47:36 +0000
asID:                     147049
IP address blocks:        194.233.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2b:7f:9d:95:4f:e5:f9:5f:0a:eb:da:49:46:c8:56:e3:30:16:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 24 07:42:36 2023 GMT
            Not After : Feb 23 07:47:36 2024 GMT
        Subject: CN=0DBD8BD8AD4E9DE31DB9E8A2A916DB74D979EFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:f2:e7:1b:cf:a8:ea:2c:40:b0:90:7a:83:
                    c7:17:f5:b1:a4:2c:8a:b3:fd:84:78:d6:49:47:6b:
                    d4:04:5e:9f:be:ca:3c:54:82:c0:9a:cd:72:57:f9:
                    52:66:9d:90:02:ba:f9:f0:fd:c7:41:bd:2c:fe:ed:
                    0f:a7:5c:82:93:b6:7e:d5:eb:88:e8:7b:b9:52:f3:
                    de:1b:7a:7b:77:63:40:80:40:a7:88:a0:a2:ce:0b:
                    b0:ba:03:34:51:69:c0:1f:20:a5:4f:a1:7b:f0:1f:
                    73:8d:18:e8:0d:f4:46:3e:28:65:24:fa:8b:a9:f3:
                    63:33:ff:73:05:20:aa:84:65:22:de:df:63:40:3b:
                    a5:ae:b4:a0:0f:8c:f3:ba:97:bd:5b:03:89:40:d7:
                    da:c6:02:8b:f5:28:4c:6b:40:a0:a8:c7:cd:fe:5a:
                    c0:37:d0:07:54:7d:21:19:44:fe:b8:f9:89:cd:76:
                    34:2f:05:6f:3c:00:92:26:5f:19:32:d2:96:74:91:
                    a6:db:53:1e:7b:47:56:9b:f6:29:45:e2:8b:64:6e:
                    0d:ff:2c:eb:57:47:c9:27:7f:03:e4:32:b8:db:c7:
                    03:4c:24:67:5f:e2:f0:f4:c3:78:53:49:13:ff:9f:
                    97:62:55:fd:51:e5:eb:c8:c2:79:8a:fd:69:98:aa:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BD:8B:D8:AD:4E:9D:E3:1D:B9:E8:A2:A9:16:DB:74:D9:79:EF:EC
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.233.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:6c:61:2a:70:11:5f:06:06:a2:63:b5:ab:7b:e9:cd:da:
         5e:c3:a4:95:3f:44:a2:7b:9f:3d:d9:27:6f:d9:a4:71:a8:bd:
         aa:e1:1d:f7:ad:af:b7:6a:8b:8a:46:00:a7:54:f1:ee:cf:c8:
         f5:d0:a7:15:f2:9e:92:7d:6c:08:58:1f:b5:59:7c:c9:ca:57:
         37:1c:1a:bb:e7:8c:ad:e7:20:7f:5b:fb:4b:fd:95:3d:26:77:
         d0:65:c2:f1:89:85:ce:9a:01:7e:f2:ce:ea:c1:be:32:f7:7c:
         04:b6:78:78:0c:5a:b6:46:d1:59:46:e0:df:49:da:f4:c8:4c:
         b1:01:dc:54:8b:8c:74:ef:31:d7:3b:67:c4:c7:2f:0b:30:9d:
         b2:01:8b:61:72:a2:72:10:09:83:81:a8:9e:a7:d6:e8:59:db:
         83:a7:d7:63:ed:0c:5e:f3:f2:c6:b0:54:e9:53:09:5c:c4:73:
         6b:28:4a:d7:a4:e1:2b:52:b6:74:e8:ff:ad:b6:b4:3f:34:6e:
         e4:f6:d3:8e:bb:42:b5:1b:8b:6c:b4:14:8a:c7:5d:40:f9:fc:
         6b:83:0d:ed:14:fd:7f:0c:28:71:63:bf:cd:e1:c5:35:64:ae:
         43:50:93:11:b3:de:fa:e0:a6:70:07:37:f7:a6:56:e9:38:d9:
         af:14:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net