Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa
File:                     3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          JtBmFJ5MK8FLjGrJ7c0QlQlWlQalZqLnVRFlQ8eXjeY=
Subject key identifier:   07:D6:F5:D7:BA:0E:F5:45:A8:F3:CD:B9:CC:73:F7:FB:34:6D:52:DC
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7A809BF73988812015F4F1DD3ACD58CCCD1B91C2
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:11 +0000
ROA not before:           Sat 22 Oct 2022 04:29:11 +0000
ROA not after:            Sat 21 Oct 2023 04:34:11 +0000
asID:                     47583
IP address blocks:        195.179.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:80:9b:f7:39:88:81:20:15:f4:f1:dd:3a:cd:58:cc:cd:1b:91:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:11 2022 GMT
            Not After : Oct 21 04:34:11 2023 GMT
        Subject: CN=07D6F5D7BA0EF545A8F3CDB9CC73F7FB346D52DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:83:03:c9:f2:d9:f7:d8:ff:84:0f:e8:db:
                    bb:09:cb:bf:b3:af:40:9d:07:da:f0:b8:6e:db:90:
                    76:dd:0d:28:8e:85:bf:1b:17:a5:6a:aa:7d:fa:32:
                    30:ff:45:5f:a3:94:c3:35:3d:ff:b4:e8:5e:6e:9e:
                    8f:c9:09:d4:35:20:f3:d2:9b:6d:18:6d:89:f7:37:
                    86:3c:37:d0:4c:ca:0a:30:bb:fa:77:d2:20:b6:d4:
                    06:d6:37:01:cd:69:60:1a:52:8a:07:2e:7e:8e:99:
                    94:a5:6f:50:7d:44:0f:ea:66:88:4b:38:a5:db:fa:
                    18:77:37:c6:91:d7:d1:40:71:25:34:21:53:98:d2:
                    57:08:ac:2e:d0:6d:32:ef:f2:91:78:8d:4a:ba:cf:
                    34:bd:eb:d4:1b:d4:e4:ac:4f:4b:d1:22:90:09:2f:
                    7c:61:9d:b2:a3:62:13:44:0a:65:f9:ec:db:84:c8:
                    bb:29:e5:44:53:b4:23:0b:04:85:d7:5c:0f:ef:25:
                    57:56:4f:ab:98:ea:c9:c3:56:2f:96:25:fe:75:9d:
                    63:05:34:05:2c:18:b2:fd:e9:be:ff:12:7a:a7:1d:
                    04:dc:31:b6:6d:84:0a:d8:3c:72:ba:f2:6c:37:65:
                    d7:51:16:a6:c6:81:16:22:91:67:50:10:60:dc:88:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:F5:D7:BA:0E:F5:45:A8:F3:CD:B9:CC:73:F7:FB:34:6D:52:DC
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.179.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ea:f0:f4:a6:6e:4b:d2:a0:42:95:9e:46:55:14:6d:67:a6:
         2e:dd:95:df:73:c9:aa:e1:1b:e0:d8:e0:14:a6:c2:28:da:ba:
         74:59:8c:24:9e:d9:5f:8d:f0:7f:72:72:d0:81:90:e3:22:d0:
         29:42:8f:c2:04:ce:db:54:92:71:6b:33:a6:30:e4:0d:eb:e7:
         96:90:78:c8:37:74:3d:c9:15:42:3f:87:bb:26:b1:3a:25:e9:
         f6:fd:f5:d0:85:ef:82:66:e9:9b:3a:ac:b6:b2:a3:59:2c:db:
         b7:e3:b2:5a:67:c7:d2:38:8f:e3:51:12:ce:ea:e4:2b:c8:ab:
         82:56:7a:4d:d9:56:b1:f5:de:cd:38:2b:5b:48:ad:e1:bd:47:
         07:97:c8:b7:18:ce:a1:29:7a:43:bf:f3:2e:99:35:b4:b0:ea:
         b4:5a:c3:bd:d0:4d:d0:69:51:b9:94:74:7e:e6:6b:2a:5d:ef:
         f2:6d:2d:32:ce:81:20:fd:2b:58:3b:a9:04:bb:f1:f5:64:85:
         2d:05:5d:be:25:23:13:1f:25:8b:cf:12:0f:f0:e4:12:94:a3:
         26:ef:7c:af:88:31:26:f3:f7:44:c9:e5:d5:97:bf:b1:44:cd:
         2d:08:04:f5:c9:8c:17:63:3f:62:fa:f0:7e:75:d2:98:02:96:
         ad:35:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net