Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e2030.roa
File:                     3139332e32322e3134342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          acjvRvVkIZAGTslwXk5cvM9bCTRdHzBaLw+Op5Dn7vA=
Subject key identifier:   7E:76:46:ED:50:F4:A8:12:F4:73:BE:81:16:78:44:A8:C5:4C:EE:E8
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       31121CADBD0B0D4A884E5F4806128A0149019FD4
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e2030.roa
Signing time:             Fri 29 Jul 2022 05:28:39 +0000
ROA not before:           Fri 29 Jul 2022 05:23:39 +0000
ROA not after:            Fri 28 Jul 2023 05:28:39 +0000
asID:                     0
IP address blocks:        193.22.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:12:1c:ad:bd:0b:0d:4a:88:4e:5f:48:06:12:8a:01:49:01:9f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jul 29 05:23:39 2022 GMT
            Not After : Jul 28 05:28:39 2023 GMT
        Subject: CN=7E7646ED50F4A812F473BE81167844A8C54CEEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:a4:db:bb:16:cd:d5:81:37:0c:24:b1:b5:
                    c8:ef:d3:19:ab:63:ed:4a:ad:69:3a:0e:6e:dd:e7:
                    36:7f:c2:18:db:6b:be:89:23:6f:59:8e:e1:db:5e:
                    3d:f4:ad:69:ad:0c:fc:0d:aa:fe:f1:7e:a6:ea:d6:
                    45:21:c9:b0:90:8f:c4:d6:9e:e8:35:c9:99:7f:6c:
                    69:d9:10:06:0c:84:45:30:bf:cd:a6:3e:05:b1:57:
                    ed:b2:77:99:31:31:d7:0f:c3:0f:0e:e3:ca:37:ce:
                    03:8d:91:9c:77:30:5e:0c:69:a8:c5:ff:09:22:d9:
                    73:db:63:7f:47:a4:99:22:2e:ef:54:7f:5d:d8:b3:
                    86:d1:27:2b:9b:d9:9c:4c:f0:a2:a1:18:02:bc:49:
                    36:d2:bd:3b:27:cc:68:52:d0:97:84:c8:c5:3c:87:
                    81:b1:a6:3a:75:c3:a0:ee:2c:fb:93:bc:6d:58:37:
                    f8:fb:bc:4b:1c:0e:23:e3:9a:be:b0:49:55:ce:6e:
                    2a:27:57:a7:21:dd:ad:76:37:40:61:5b:ad:20:64:
                    ab:f1:f7:3b:e6:d9:09:23:cb:bc:cf:14:d8:8f:a5:
                    49:64:d9:b0:53:71:68:84:78:4a:72:09:59:12:54:
                    02:f2:19:62:38:d0:c0:22:34:08:1a:4b:25:09:12:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:46:ED:50:F4:A8:12:F4:73:BE:81:16:78:44:A8:C5:4C:EE:E8
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:98:4a:d4:dd:0c:f8:4a:c1:2a:d2:f7:f9:59:d6:e3:58:77:
         2d:d6:80:02:ec:98:19:13:db:71:35:03:33:5c:18:cb:27:27:
         44:af:0d:0f:66:db:a0:68:f2:c9:47:a5:d9:45:03:90:ab:db:
         b9:c7:d2:a2:8e:0a:90:89:4e:0f:a6:12:43:7f:f7:e8:7b:a4:
         e0:37:dd:2f:b9:62:70:87:c0:e6:9f:e5:08:2a:ed:0b:47:8f:
         a7:46:02:9a:e9:59:07:d7:b4:19:ea:9f:51:b4:b0:ef:ce:7c:
         27:79:0c:d0:50:bd:92:c1:d9:00:27:b5:81:e1:39:79:47:3e:
         74:21:4a:59:e2:dc:c0:11:b4:f7:2c:6e:60:4d:9a:5d:7b:99:
         f8:e5:ba:9e:5b:17:18:a8:11:93:fc:5b:30:35:3f:06:c1:72:
         3f:99:2c:c6:be:3a:8b:17:47:16:91:97:a4:42:2a:71:f2:66:
         6d:95:f5:37:b7:e9:7e:99:53:bb:4e:64:9a:9a:a9:6d:25:21:
         7b:74:b4:60:16:57:50:42:50:4d:71:7f:14:44:ae:f6:ba:52:
         99:fe:95:06:c3:96:f6:af:ca:99:c7:79:f2:28:1c:ee:16:e6:
         c1:ba:f6:94:f9:30:88:31:83:a1:2f:d2:2c:2b:f3:fe:91:f6:
         0c:b0:a0:0d
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUMRIcrb0LDUqITl9IBhKKAUkBn9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjA3MjkwNTIzMzlaFw0yMzA3MjgwNTI4MzlaMDMxMTAvBgNV
BAMTKDdFNzY0NkVENTBGNEE4MTJGNDczQkU4MTE2Nzg0NEE4QzU0Q0VFRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPaTbuxbN1YE3DCSxtcjv0xmr
Y+1KrWk6Dm7d5zZ/whjba76JI29ZjuHbXj30rWmtDPwNqv7xfqbq1kUhybCQj8TW
nug1yZl/bGnZEAYMhEUwv82mPgWxV+2yd5kxMdcPww8O48o3zgONkZx3MF4MaajF
/wki2XPbY39HpJkiLu9Uf13Ys4bRJyub2ZxM8KKhGAK8STbSvTsnzGhS0JeEyMU8
h4Gxpjp1w6DuLPuTvG1YN/j7vEscDiPjmr6wSVXObionV6ch3a12N0BhW60gZKvx
9zvm2Qkjy7zPFNiPpUlk2bBTcWiEeEpyCVkSVALyGWI40MAiNAgaSyUJEi4TAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUfnZG7VD0qBL0c76BFnhEqMVM7ugwHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NS8zMTM5MzMyZTMyMzIyZTMxMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAwRaQMA0GCSqGSIb3DQEBCwUAA4IBAQAhmErU3Qz4SsEq0vf5
WdbjWHct1oAC7JgZE9txNQMzXBjLJydErw0PZtugaPLJR6XZRQOQq9u5x9KijgqQ
iU4PphJDf/foe6TgN90vuWJwh8Dmn+UIKu0LR4+nRgKa6VkH17QZ6p9RtLDvznwn
eQzQUL2SwdkAJ7WB4Tl5Rz50IUpZ4tzAEbT3LG5gTZpde5n45bqeWxcYqBGT/Fsw
NT8GwXI/mSzGvjqLF0cWkZekQipx8mZtlfU3t+l+mVO7TmSamqltJSF7dLRgFldQ
QlBNcX8URK72ulKZ/pUGw5b2r8qZx3nyKBzuFubBuvaU+TCIMYOhL9IsK/P+kfYM
sKAN
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net