Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
File:                     3139342e3233332e39372e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier:          zOKSo6U6/5Rz50eUNWEHmPIKGPMl1PuTY4WJb4VaOc8=
Subject key identifier:   35:85:1D:C8:12:50:E4:4F:39:1C:CC:86:39:EB:D0:50:5C:B0:1B:01
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       56156856F387FB0D2CAF9BF3DB7A50FA6D39A8D8
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
Signing time:             Fri 16 Dec 2022 09:00:38 +0000
ROA not before:           Fri 16 Dec 2022 08:55:38 +0000
ROA not after:            Fri 15 Dec 2023 09:00:38 +0000
asID:                     49453
IP address blocks:        194.233.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:15:68:56:f3:87:fb:0d:2c:af:9b:f3:db:7a:50:fa:6d:39:a8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 16 08:55:38 2022 GMT
            Not After : Dec 15 09:00:38 2023 GMT
        Subject: CN=35851DC81250E44F391CCC8639EBD0505CB01B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:89:d6:cd:b8:47:e1:3a:12:84:df:69:7b:
                    40:c0:5e:6f:02:6d:c7:ad:27:3a:c1:e3:f4:00:71:
                    37:aa:f7:8e:40:6a:fa:9e:20:a9:91:d8:56:bf:81:
                    74:2f:af:13:83:b7:80:85:9f:a8:8d:87:e3:b4:ec:
                    cc:a4:23:55:ae:f3:3c:e5:d0:40:49:85:2a:ef:45:
                    53:0b:2e:22:4d:14:58:d8:62:f8:cb:be:cf:ed:a6:
                    59:0e:63:cf:71:96:7e:6f:31:77:34:71:8b:88:86:
                    70:eb:66:cb:2a:30:dd:a8:a1:80:51:18:74:07:5c:
                    6e:b1:5f:62:71:b4:a5:a7:34:54:20:14:a7:88:71:
                    86:6b:55:bf:38:09:82:41:e1:b3:f2:a8:cb:8f:22:
                    50:b6:10:a2:a2:57:49:8f:3c:75:85:ae:fd:d2:22:
                    25:61:3e:9a:d5:30:50:6a:92:39:22:40:49:c0:c8:
                    bc:7c:2e:62:e9:69:46:04:71:fe:a3:19:ab:8d:2e:
                    47:70:85:4a:4d:ae:62:28:c8:96:71:e5:bb:3f:a3:
                    21:0b:6d:c6:96:bd:8f:66:c8:d5:3d:12:ff:d1:f8:
                    1a:43:68:0f:fa:4c:00:01:39:06:16:c9:6d:3c:e5:
                    b1:52:06:3e:ab:f4:98:b2:1e:8e:7b:7e:62:4a:89:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:85:1D:C8:12:50:E4:4F:39:1C:CC:86:39:EB:D0:50:5C:B0:1B:01
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.233.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:48:b2:da:4a:7e:11:24:51:0a:99:be:7a:28:7f:ae:3e:31:
         ea:9b:b9:66:4e:c5:41:81:bf:e7:f5:7b:4f:bf:07:8d:0c:2a:
         f3:8d:92:ee:86:1d:a6:4e:16:bd:f9:b1:08:be:1d:05:a5:fe:
         6a:47:16:11:46:8f:86:1d:7a:dc:f5:80:d0:1b:0f:65:f5:1a:
         fc:a2:30:ad:cf:dc:39:6f:5c:0e:90:03:0e:04:da:4d:34:b5:
         37:96:e2:80:fe:92:13:2d:4d:b3:81:92:bf:4d:1b:34:17:32:
         ed:0c:f3:e8:f7:90:62:69:2c:45:14:39:b1:87:aa:4b:24:2c:
         6b:bc:9b:d2:86:5e:83:a2:02:22:eb:8d:9c:c3:6c:dd:87:85:
         d6:de:59:58:66:30:87:aa:fc:a6:fe:e4:47:ba:22:ef:80:ea:
         ba:13:e6:cf:6c:ed:cd:90:4e:b0:4e:61:de:e6:d0:2d:70:34:
         d9:64:52:b3:82:71:71:7f:9f:2c:09:02:bd:05:40:36:e0:4d:
         d6:5b:1a:53:4f:7a:7c:42:44:e8:cf:2e:23:97:d4:79:e6:bc:
         58:6d:60:e9:1c:c1:ef:c0:b5:1a:75:39:b1:81:06:a1:99:77:
         58:d3:26:3d:e0:a3:e6:e8:c2:14:42:5e:a7:2d:31:4b:62:5b:
         89:89:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net