Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39392e302f32342d3234203d3e20313336373837.roa
File:                     3139342e3233332e39392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          xwJHeQg61aBoy/GLDBirPpf9jPpMMazBDY0qWkr/ljo=
Subject key identifier:   D4:95:BF:F4:23:DF:EF:FD:38:76:77:4F:ED:0D:82:5E:B9:D7:73:68
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       392CB82A4FC0BEA62CDAC357D651204EF5CD8179
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39392e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:26 +0000
ROA not before:           Sat 22 Oct 2022 04:29:26 +0000
ROA not after:            Sat 21 Oct 2023 04:34:26 +0000
asID:                     136787
IP address blocks:        194.233.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2c:b8:2a:4f:c0:be:a6:2c:da:c3:57:d6:51:20:4e:f5:cd:81:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:26 2022 GMT
            Not After : Oct 21 04:34:26 2023 GMT
        Subject: CN=D495BFF423DFEFFD3876774FED0D825EB9D77368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:1b:ac:41:95:1f:c2:5d:cf:b7:fb:00:80:
                    de:f8:d2:cb:04:31:d1:a6:69:5b:3d:22:72:a1:2b:
                    1a:9d:d0:88:ce:0b:d6:e9:e3:eb:f7:8b:4a:d7:73:
                    41:0b:44:c2:06:f7:85:33:4b:7c:23:df:40:a4:45:
                    04:1d:1a:5c:58:f1:46:6c:9d:65:a2:49:5a:80:70:
                    09:4d:7e:7e:4f:fe:73:38:8a:8e:41:a5:2c:d2:f4:
                    e0:7f:59:41:71:be:d3:c0:72:c0:65:bc:a5:6b:06:
                    5c:2d:96:76:01:bf:4a:f8:1a:65:12:cf:ec:40:44:
                    23:8c:a8:f5:4a:7e:1d:b2:02:d7:cd:21:82:38:e5:
                    68:eb:37:ef:7f:21:9d:e6:7d:ec:44:25:fb:09:3a:
                    91:84:68:3a:b3:fd:80:cf:b9:ee:8d:43:99:64:f2:
                    07:ed:89:c3:c2:0b:a7:91:70:a5:86:82:7d:09:0f:
                    46:24:b3:27:27:0c:7b:0e:88:2c:8a:02:1c:a5:7c:
                    20:c4:86:44:12:96:40:59:3e:90:20:d7:5e:0c:e0:
                    f1:48:32:92:9b:a6:c5:4e:36:8a:77:00:ae:c9:6a:
                    38:50:c3:f7:ce:9a:67:fc:74:12:32:c8:ae:9c:13:
                    2f:d2:7f:6d:41:70:e6:64:5d:0f:10:5f:06:79:1f:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:BF:F4:23:DF:EF:FD:38:76:77:4F:ED:0D:82:5E:B9:D7:73:68
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39392e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.233.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:88:24:5e:14:6c:d8:c1:b2:a5:31:2b:dc:bf:1b:8a:72:14:
         98:95:2d:97:7c:2f:05:d0:ac:82:16:45:a1:c3:0b:fa:b9:b8:
         f1:ed:06:10:83:99:40:c9:d7:94:65:be:09:59:fb:83:91:e0:
         99:81:99:ef:28:76:c1:c7:a4:55:67:23:7a:0b:f9:c7:48:1f:
         98:e6:14:ed:d5:15:dd:87:fd:81:a4:c3:a6:2e:74:de:56:c2:
         4a:5c:58:14:e9:80:1f:be:00:b5:7e:93:9c:3e:35:6d:f4:fa:
         dd:f4:33:51:26:19:e1:b3:79:58:ca:39:8d:c0:4a:dd:c6:ab:
         a2:9d:df:82:ec:9f:3b:92:38:da:59:72:00:5b:3b:79:c7:07:
         e7:88:99:ac:47:fd:2f:c2:27:75:38:63:81:50:21:1d:fc:5b:
         05:96:77:27:a5:37:0d:3c:f6:7e:04:37:1a:5c:2e:03:e8:be:
         79:fb:3e:57:77:7a:0c:c9:2e:ae:ef:70:ea:95:ea:c5:d9:7b:
         25:b5:ab:53:86:08:99:87:08:dd:f0:0d:d8:41:32:c9:d5:10:
         01:b9:e0:9e:c5:ed:80:9a:b2:a1:9a:f4:f9:d3:01:86:0a:a1:
         6d:92:71:c1:f5:80:8d:f8:99:2c:77:8e:a3:b1:b8:81:1c:41:
         09:7a:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net