Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134352e302f32342d3234203d3e20333935383030.roa
File:                     3139332e32322e3134352e302f32342d3234203d3e20333935383030.roa (raw, json)
Hash identifier:          UMYVaDDuHN/YUXU2iTm+7pytJtq0+n7ibusXTM1oOUU=
Subject key identifier:   19:F7:D5:AC:BA:0F:24:68:3D:F4:7D:04:5E:8A:C7:64:77:E5:C4:E8
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       22A67B2272741059DD69018AF7DBBD1AE33A84B9
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134352e302f32342d3234203d3e20333935383030.roa
Signing time:             Tue 28 Jun 2022 04:40:55 +0000
ROA not before:           Tue 28 Jun 2022 04:35:55 +0000
ROA not after:            Tue 27 Jun 2023 04:40:55 +0000
asID:                     395800
IP address blocks:        193.22.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a6:7b:22:72:74:10:59:dd:69:01:8a:f7:db:bd:1a:e3:3a:84:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jun 28 04:35:55 2022 GMT
            Not After : Jun 27 04:40:55 2023 GMT
        Subject: CN=19F7D5ACBA0F24683DF47D045E8AC76477E5C4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:0d:31:30:d2:c3:4e:81:97:62:bb:59:3c:
                    bb:7f:79:cf:b1:3a:e9:7b:ed:2d:02:8a:87:0f:46:
                    7e:fd:83:97:bd:d8:4a:34:36:6d:27:ab:1d:58:dc:
                    0c:7c:b9:1e:17:3f:d1:9f:0a:3c:e7:56:9d:73:f6:
                    47:32:26:d3:34:c4:ce:bf:6e:72:97:77:8d:07:d2:
                    5c:b8:0d:1d:af:58:28:ce:20:cd:12:aa:05:ac:72:
                    6d:93:6c:3d:3b:bc:d3:e0:21:e5:2d:0e:24:e4:a4:
                    9b:fd:26:f9:a7:35:29:b8:bc:76:94:37:a7:fc:63:
                    42:18:76:74:8a:8c:dc:f0:9b:78:a2:35:18:14:18:
                    e6:b4:e2:7e:95:06:d4:57:7b:d2:ab:29:19:37:81:
                    57:1d:c2:2d:95:b7:9d:0a:1b:ff:2f:16:8b:d8:39:
                    3a:b3:37:33:76:90:ba:c0:a0:6b:5e:0d:0c:92:85:
                    e4:ab:5f:12:72:9b:c4:5e:4b:44:64:34:a1:e1:c6:
                    da:da:02:a5:1f:2b:f8:f5:55:e5:08:bb:03:fb:7f:
                    99:ed:94:4c:a4:72:c1:b9:01:b6:c9:84:0c:c4:27:
                    ea:a7:74:8f:ec:3c:8e:6a:77:41:d6:99:bc:04:36:
                    12:5d:c6:74:83:6c:34:49:78:41:dc:d5:1f:d8:ad:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:D5:AC:BA:0F:24:68:3D:F4:7D:04:5E:8A:C7:64:77:E5:C4:E8
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134352e302f32342d3234203d3e20333935383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:95:4f:37:d7:0c:34:05:d5:52:ae:f9:09:0e:30:c2:48:01:
         9b:f2:cc:d0:fc:5e:36:7b:33:5b:06:1e:c9:f2:42:14:cc:a4:
         83:48:da:d1:d6:f4:b7:c1:3b:1d:f5:f7:ac:49:a8:f7:4e:35:
         05:d4:7a:cf:68:12:95:34:86:74:56:36:0c:56:f4:29:c3:80:
         4c:6e:1a:10:87:77:ca:62:5f:09:1d:19:21:e9:ef:bf:42:de:
         2a:12:b7:ca:38:14:3d:ce:b1:49:b3:2b:a5:33:83:e3:be:ee:
         6e:bf:d0:c3:44:2f:1c:e5:7b:e1:54:93:f9:c3:7d:95:85:20:
         fb:50:6f:cb:d3:e2:3a:12:50:2d:e8:be:77:fc:95:e1:db:81:
         63:85:7a:2f:4c:bc:6e:74:e5:05:cb:e1:6c:6a:1f:10:8f:3d:
         f6:3e:d0:7c:35:c1:51:58:11:60:f3:76:a9:b8:d9:1e:be:2a:
         fc:20:c9:c2:90:52:40:63:81:2e:52:da:06:99:6a:17:1f:45:
         79:1a:d5:13:c9:d7:69:05:41:9b:37:16:bb:ad:57:bf:47:7e:
         3e:5c:02:73:d6:c4:cd:be:31:91:f5:90:29:ee:fa:72:d3:52:
         1b:23:48:5d:0b:38:ba:14:a0:43:91:79:2f:ee:b9:33:97:1d:
         eb:77:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net