Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e34332e37312e302f32342d3332203d3e203536383736.roa
File:                     3139332e34332e37312e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier:          ZddVzIVUVMUeU6O1xhb52nweRW8lydZuWGc0E3TFltE=
Subject key identifier:   16:59:79:09:7E:4E:B2:2C:F2:05:9E:F7:BF:7E:51:80:EA:0B:26:BB
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       4992E3CC62EB4FA46562E2470FD6AEF081850245
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e34332e37312e302f32342d3332203d3e203536383736.roa
Signing time:             Sat 22 Oct 2022 04:33:55 +0000
ROA not before:           Sat 22 Oct 2022 04:28:55 +0000
ROA not after:            Sat 21 Oct 2023 04:33:55 +0000
asID:                     56876
IP address blocks:        193.43.71.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:92:e3:cc:62:eb:4f:a4:65:62:e2:47:0f:d6:ae:f0:81:85:02:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:55 2022 GMT
            Not After : Oct 21 04:33:55 2023 GMT
        Subject: CN=165979097E4EB22CF2059EF7BF7E5180EA0B26BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2a:45:f9:f8:77:5c:db:e5:b6:84:9e:31:34:
                    e5:ea:65:d2:45:32:a9:7a:58:38:fe:d2:c1:a8:68:
                    d0:0c:df:76:63:d2:46:af:bb:dc:58:50:55:ab:63:
                    6e:86:1e:21:8b:56:7e:bd:ba:ea:63:df:62:45:5d:
                    99:08:cd:db:a6:e7:9f:98:1e:b2:0a:11:87:55:dc:
                    93:93:cc:95:f3:94:a6:a1:f1:f5:26:dd:06:a0:af:
                    12:e3:60:e3:c1:61:42:e3:11:2e:19:cd:1f:f8:4c:
                    61:ec:ec:ec:cb:95:c6:d1:0b:86:35:26:33:80:2d:
                    38:70:1f:f3:76:69:42:c5:9b:96:1e:30:99:9e:ef:
                    4c:e7:a2:24:69:4a:b6:39:15:03:ea:cf:87:ab:51:
                    dc:cf:55:44:b6:48:07:0c:f8:fd:b4:03:18:9e:5c:
                    78:b9:a1:1d:26:ed:19:b0:1a:bc:dc:e5:e5:aa:98:
                    ca:46:8a:fc:e2:ec:1c:bd:78:69:f8:8d:ab:1c:46:
                    6c:c5:ca:b9:60:2f:38:7e:fb:4f:81:4f:38:1c:0a:
                    ac:e3:f5:8a:b1:bb:be:55:1f:5a:1e:5b:44:97:8b:
                    3f:f1:bf:70:20:59:c0:65:85:5c:45:6a:bc:b6:5b:
                    b4:66:92:dc:91:91:f9:89:e7:f0:09:33:c4:c4:01:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:59:79:09:7E:4E:B2:2C:F2:05:9E:F7:BF:7E:51:80:EA:0B:26:BB
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e34332e37312e302f32342d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:df:55:2b:6c:7c:89:3d:15:3f:7d:86:49:8c:af:67:21:a8:
         e4:1b:43:17:00:aa:9e:49:0c:76:47:58:60:37:b3:33:c7:b4:
         2e:9f:86:d4:79:20:1f:81:72:0b:79:4f:6b:2c:88:81:d9:86:
         58:c1:e0:3e:04:ea:c9:a2:a8:18:bc:57:87:0b:46:b9:3f:dd:
         e1:82:ce:9e:0d:b8:f3:06:41:2b:ba:72:b1:a7:ff:22:d0:05:
         a0:92:c2:12:29:52:5d:73:6c:8d:3c:74:5a:05:ec:76:03:38:
         9c:ee:65:b6:46:46:9d:0e:ec:23:c4:e6:65:8f:c2:21:3e:39:
         bd:a9:4a:5f:46:75:78:be:26:af:70:e5:8d:89:35:94:ad:33:
         b6:b1:1f:cc:85:e0:8f:e4:2e:ff:d1:fc:12:ba:86:72:3b:63:
         fa:0f:96:bc:ab:f8:58:c7:ac:9e:47:ab:dc:23:5b:d1:50:f7:
         39:5f:9b:f4:71:3c:f0:b6:6a:c4:6b:60:29:51:4f:6c:fb:81:
         77:f1:0e:37:a8:e1:e7:2b:d2:48:85:ef:e1:9d:b7:39:17:b6:
         6d:54:7c:9e:cd:52:26:aa:db:4c:09:86:fe:83:91:85:6b:c4:
         3a:0a:fe:92:77:15:e7:70:7e:19:29:7c:6c:16:97:d2:86:3c:
         0f:a6:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net