Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
File:                     3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          XB3crt1cxp/mzzJX8jOsCQUU771NCANyJrmwJc6TMYQ=
Subject key identifier:   74:FD:CB:A5:4C:7F:FA:FB:54:0F:A4:E0:A9:82:4D:79:D5:35:8B:AB
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       3958BF41D0E6A37E29C78BB1ED5AE408A74117FC
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:33:53 +0000
ROA not before:           Sat 22 Oct 2022 04:28:53 +0000
ROA not after:            Sat 21 Oct 2023 04:33:53 +0000
asID:                     204170
IP address blocks:        193.22.144.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:58:bf:41:d0:e6:a3:7e:29:c7:8b:b1:ed:5a:e4:08:a7:41:17:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:53 2022 GMT
            Not After : Oct 21 04:33:53 2023 GMT
        Subject: CN=74FDCBA54C7FFAFB540FA4E0A9824D79D5358BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:ef:a3:91:8c:c4:e8:46:98:18:d3:7b:52:
                    06:2a:9d:c0:19:29:17:7c:f1:61:d4:4c:d1:89:ed:
                    c1:fa:01:47:55:02:01:cb:19:d7:d6:5d:0a:34:a5:
                    69:61:e9:8a:e6:d8:95:30:6a:bc:cf:97:2e:22:c7:
                    8a:d6:3c:14:8b:6e:6d:f5:56:85:48:5b:fc:45:24:
                    3a:b9:13:37:4b:b3:da:43:23:2d:77:88:49:ba:7f:
                    ff:14:d4:9b:2d:78:01:0a:24:f2:37:55:02:59:b2:
                    d3:fd:fd:c6:46:8e:a3:ce:2a:a3:a1:16:15:17:21:
                    de:43:27:ad:5f:58:85:4d:f4:6a:4e:74:52:45:68:
                    53:d8:44:22:fb:15:7b:85:25:bc:53:b6:e5:dd:8a:
                    c0:f8:fe:87:1a:db:06:2a:39:a3:09:b4:62:ff:42:
                    5d:cf:32:c1:f2:66:91:7d:4c:85:b5:ec:bd:9d:23:
                    1b:55:cc:29:bd:51:1e:3a:5f:10:4e:08:68:7f:2d:
                    6d:9c:1d:fc:9a:0e:cb:a8:fe:5e:70:54:65:db:fc:
                    42:df:d4:37:98:85:82:f4:a7:40:50:70:90:fb:78:
                    a9:af:0f:b8:9a:7b:b6:6c:37:05:45:b7:06:98:e7:
                    d9:0c:2d:d5:91:d4:e0:ce:da:1b:8a:99:dc:56:d2:
                    9d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FD:CB:A5:4C:7F:FA:FB:54:0F:A4:E0:A9:82:4D:79:D5:35:8B:AB
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:a3:da:5a:c9:53:41:f8:da:58:97:ca:b1:d4:2b:5b:e1:37:
         37:68:ba:f5:f3:fe:9d:8b:6b:70:14:50:97:20:1e:02:0f:59:
         2c:e2:1b:0d:a8:63:9d:80:b9:53:10:a0:68:a4:7a:69:7b:a2:
         02:e2:94:fc:df:a6:25:b9:e6:00:f4:ef:c8:32:44:3a:39:ee:
         00:f0:29:e2:f9:50:a5:fe:9c:0a:59:47:f8:80:73:aa:e8:26:
         86:e4:d7:9a:6c:e0:19:8c:4a:36:72:d4:e3:51:0a:30:5b:fd:
         09:52:ba:89:6c:93:b0:7f:cf:c4:90:3e:08:1e:11:99:db:41:
         81:b8:bf:60:e2:69:7e:0d:da:1b:cd:42:e0:23:ba:0e:89:82:
         28:32:47:bc:9e:48:b1:4d:71:9f:df:c7:19:c4:58:6f:e2:e1:
         7b:0f:8f:4f:66:3c:5b:b3:4c:83:c6:f0:cc:a8:14:66:b7:e6:
         47:f2:42:c9:2a:5c:f7:fa:d6:10:4a:c5:2d:b1:fd:c5:c6:12:
         68:61:6d:a1:65:bd:5b:44:7f:4e:1a:82:44:ac:19:13:3e:27:
         cb:98:fd:32:55:dc:42:22:a6:52:c6:94:13:d9:5f:09:c5:fd:
         0d:d3:a3:2d:15:18:4b:49:c3:9e:14:db:26:0e:5f:40:a0:9e:
         81:3e:fb:9b
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUOVi/QdDmo34px4ux7VrkCKdBF/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjEwMjIwNDI4NTNaFw0yMzEwMjEwNDMzNTNaMDMxMTAvBgNV
BAMTKDc0RkRDQkE1NEM3RkZBRkI1NDBGQTRFMEE5ODI0RDc5RDUzNThCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOw++jkYzE6EaYGNN7UgYqncAZ
KRd88WHUTNGJ7cH6AUdVAgHLGdfWXQo0pWlh6Yrm2JUwarzPly4ix4rWPBSLbm31
VoVIW/xFJDq5EzdLs9pDIy13iEm6f/8U1JsteAEKJPI3VQJZstP9/cZGjqPOKqOh
FhUXId5DJ61fWIVN9GpOdFJFaFPYRCL7FXuFJbxTtuXdisD4/oca2wYqOaMJtGL/
Ql3PMsHyZpF9TIW17L2dIxtVzCm9UR46XxBOCGh/LW2cHfyaDsuo/l5wVGXb/ELf
1DeYhYL0p0BQcJD7eKmvD7iae7ZsNwVFtwaY59kMLdWR1ODO2huKmdxW0p33AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUdP3LpUx/+vtUD6TgqYJNedU1i6swHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NS8zMTM5MzMyZTMyMzIyZTMxMzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzAzNDMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcEWkDANBgkqhkiG9w0BAQsFAAOCAQEAU6Pa
WslTQfjaWJfKsdQrW+E3N2i69fP+nYtrcBRQlyAeAg9ZLOIbDahjnYC5UxCgaKR6
aXuiAuKU/N+mJbnmAPTvyDJEOjnuAPAp4vlQpf6cCllH+IBzqugmhuTXmmzgGYxK
NnLU41EKMFv9CVK6iWyTsH/PxJA+CB4RmdtBgbi/YOJpfg3aG81C4CO6DomCKDJH
vJ5IsU1xn9/HGcRYb+Lhew+PT2Y8W7NMg8bwzKgUZrfmR/JCySpc9/rWEErFLbH9
xcYSaGFtoWW9W0R/ThqCRKwZEz4ny5j9MlXcQiKmUsaUE9lfCcX9DdOjLRUYS0nD
nhTbJg5fQKCegT77mw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net