Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3232203d3e2031323939.roa
File:                     3139352e3137392e3139362e302f32322d3232203d3e2031323939.roa (raw, json)
Hash identifier:          hjPR3Bc3dT6zE84QIBwineu3nePz85tzGfWz0eUF5eI=
Subject key identifier:   D0:AA:73:C6:B0:3A:63:DF:49:8E:3B:D6:29:86:62:94:72:53:A4:E3
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       268D78637B9B1834AFDCC15C19F17BB8F7869BB7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3232203d3e2031323939.roa
Signing time:             Wed 11 May 2022 09:21:39 +0000
ROA not before:           Wed 11 May 2022 09:16:39 +0000
ROA not after:            Wed 10 May 2023 09:21:39 +0000
asID:                     1299
IP address blocks:        195.179.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8d:78:63:7b:9b:18:34:af:dc:c1:5c:19:f1:7b:b8:f7:86:9b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: May 11 09:16:39 2022 GMT
            Not After : May 10 09:21:39 2023 GMT
        Subject: CN=D0AA73C6B03A63DF498E3BD6298662947253A4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:fa:91:48:10:f3:79:5b:eb:33:45:01:86:
                    94:48:0c:d9:7b:c6:5d:d2:24:3c:ff:df:fc:c2:df:
                    4b:53:9d:a4:31:92:36:d0:96:68:f3:dc:62:33:86:
                    98:d4:76:b7:ef:de:6a:07:f3:7a:34:9e:25:18:45:
                    b6:55:13:bf:30:ab:2b:e2:5a:98:a2:c1:db:c2:b0:
                    8c:15:80:18:89:4c:0e:0f:72:53:08:80:47:a4:7c:
                    a4:38:ba:0a:79:4e:ca:44:b5:85:73:a2:da:5d:98:
                    8c:69:9f:9e:1d:fd:d4:25:56:82:33:e5:45:db:97:
                    31:95:68:b6:b3:1d:76:42:66:4c:26:15:ca:81:4c:
                    0e:fc:69:0a:51:aa:dc:ff:a6:13:4f:a0:2a:de:92:
                    60:40:03:55:2e:fd:1f:a0:1a:5b:83:2c:42:c2:c2:
                    7f:31:49:79:d0:be:18:64:87:1f:2e:55:9f:fc:a4:
                    95:ba:c4:f0:e9:cb:41:17:e7:d6:1f:c4:da:c1:ac:
                    df:fc:49:62:52:ff:0b:b1:10:f4:4b:5a:80:29:6a:
                    10:1d:da:d3:1d:18:07:b9:74:83:f1:6a:08:7b:1a:
                    33:5f:29:c6:86:1c:c3:a2:71:04:b3:82:a4:0f:64:
                    17:e1:62:71:2b:e4:f4:aa:af:16:f6:58:60:7d:6d:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AA:73:C6:B0:3A:63:DF:49:8E:3B:D6:29:86:62:94:72:53:A4:E3
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3232203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.179.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:7e:2c:d8:68:78:d8:0f:d1:ad:2a:05:86:ed:d5:10:21:01:
         88:fa:02:77:9d:b1:b7:f2:6d:93:6a:89:53:5c:b0:95:56:44:
         39:eb:c5:cb:da:33:ed:b8:3a:53:e8:b9:c9:85:22:22:a5:6a:
         07:3b:80:c7:cc:f3:af:2f:0e:3b:50:a9:e7:35:89:db:8e:5c:
         47:1e:3c:75:1b:c0:21:84:80:05:c5:11:ca:38:63:14:0a:f7:
         4a:03:48:9a:ca:f5:30:86:e3:d6:0e:52:2a:fd:99:25:25:36:
         1a:b4:e0:59:31:56:08:46:2b:8e:e6:90:76:e5:91:a2:ea:f8:
         ed:7d:c3:19:ed:14:37:5e:60:af:a7:6a:1d:ca:aa:e3:4d:ac:
         ba:18:a4:d3:d5:cc:e9:3a:3c:9d:8e:3b:69:c2:d2:6f:b7:13:
         b7:0b:d1:a7:82:b6:9a:a1:b7:12:c3:a0:4c:3a:a7:67:bb:e6:
         27:43:b7:82:c7:4f:05:79:bc:d6:44:89:5d:46:2d:89:fa:05:
         1a:18:1d:2e:6c:b7:c6:2c:2e:4a:37:0e:bb:e5:b1:c0:6a:fb:
         44:e6:a0:f2:64:97:28:05:47:a5:9d:8a:64:95:d1:3d:e9:57:
         9b:34:56:9c:c7:33:ca:21:fd:a7:d2:28:0e:b1:04:b9:a3:6d:
         75:0b:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net