Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31322e302f32342d3332203d3e203531313637.roa
File:                     3139342e3134362e31322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          gJOC2WFsHahh/h5MAXmQqKiRxT8YmDTiGy9PCJvRMXA=
Subject key identifier:   15:35:75:6B:54:FA:04:B7:3C:3F:84:D9:4E:45:99:77:A9:8D:BC:D6
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       7E173EFD7B3592B4C0676D24C70A986E4F44AFAC
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     51167
IP address blocks:        194.146.12.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:3e:fd:7b:35:92:b4:c0:67:6d:24:c7:0a:98:6e:4f:44:af:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=1535756B54FA04B73C3F84D94E459977A98DBCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:6c:8f:7f:dd:83:a0:fd:66:24:f9:93:24:
                    1e:8a:37:cb:2b:4e:73:33:c6:ac:99:12:37:8a:61:
                    c3:8c:16:58:da:07:62:c8:3f:20:99:f6:f8:d6:14:
                    51:62:9f:7e:18:4a:bc:b2:91:21:6d:6c:46:f5:16:
                    15:6f:48:52:0b:a9:d4:bb:d3:17:c8:bb:9c:f8:46:
                    cd:8d:46:07:80:68:c9:5b:6a:8c:4e:30:72:c4:c3:
                    c3:12:bf:08:bb:02:8e:12:87:d9:9b:51:35:ae:a3:
                    7c:94:d2:62:0b:f9:e4:5a:f8:23:d8:08:c7:16:90:
                    f8:98:0f:a1:5f:92:dc:cd:4e:a4:11:1f:7a:62:e2:
                    a5:65:b9:46:b8:1f:63:b4:b0:12:83:87:fe:2a:42:
                    12:56:d7:d9:72:56:f7:b3:4e:ae:08:17:8b:17:20:
                    b2:1c:39:ab:08:c6:15:08:bb:e7:dc:44:db:f4:ba:
                    ba:87:17:52:36:4a:39:4e:45:22:4d:80:b3:a4:87:
                    3b:7f:c9:5b:05:ef:4c:7e:92:1c:df:c1:7d:c8:1d:
                    32:1b:24:28:7c:9f:3d:36:43:01:ec:6f:60:84:91:
                    8d:ac:a3:a6:19:2c:28:46:ff:08:ea:91:bf:c8:92:
                    f7:67:26:e2:53:5e:78:03:45:10:5f:e2:68:a7:16:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:75:6B:54:FA:04:B7:3C:3F:84:D9:4E:45:99:77:A9:8D:BC:D6
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.146.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:03:ad:b0:fd:17:c7:6a:f5:37:f1:0f:58:25:b9:1f:de:
         06:bf:57:c6:e8:22:32:30:a0:b8:3d:1a:db:5b:4e:c9:06:07:
         c4:22:0b:b9:a3:7d:7b:07:3e:e9:bb:25:af:0e:41:47:a5:30:
         74:e3:1f:1e:25:ef:4f:22:88:57:69:e6:43:8a:80:b3:2f:df:
         c6:cb:62:6d:84:e4:de:ed:ff:b8:89:33:59:26:17:9c:b2:db:
         44:5c:ff:3e:27:dc:29:17:05:15:58:5f:f3:30:50:66:fc:8e:
         f0:df:5b:68:38:be:e4:b6:34:51:2d:a0:0a:8b:17:0b:02:d4:
         ac:4c:6b:f6:f0:85:12:23:2b:a2:5b:72:6f:25:6a:1c:a4:aa:
         6d:8e:bd:3d:f0:f6:a9:47:48:b9:bc:b3:1a:6e:4c:bd:b1:e6:
         a1:e5:8d:4a:47:81:17:4d:c7:7b:e7:bd:65:85:d5:53:f5:52:
         0c:8c:a3:aa:e6:90:5e:ac:15:5d:0e:40:83:db:af:d9:48:2b:
         eb:98:dc:ef:d0:89:f6:48:80:da:55:9a:07:34:b2:5e:0a:e8:
         30:de:8d:70:e7:c7:38:e8:ac:2f:5f:29:3f:e7:e2:ca:76:7c:
         6c:7a:f3:06:7b:01:fb:1e:b9:29:d3:f3:08:d0:7f:c9:69:b7:
         6a:71:2f:8e
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUfhc+/Xs1krTAZ20kxwqYbk9Er6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjEwMjIwNDI4NThaFw0yMzEwMjEwNDMzNThaMDMxMTAvBgNV
BAMTKDE1MzU3NTZCNTRGQTA0QjczQzNGODREOTRFNDU5OTc3QTk4REJDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhRmyPf92DoP1mJPmTJB6KN8sr
TnMzxqyZEjeKYcOMFljaB2LIPyCZ9vjWFFFin34YSryykSFtbEb1FhVvSFILqdS7
0xfIu5z4Rs2NRgeAaMlbaoxOMHLEw8MSvwi7Ao4Sh9mbUTWuo3yU0mIL+eRa+CPY
CMcWkPiYD6FfktzNTqQRH3pi4qVluUa4H2O0sBKDh/4qQhJW19lyVvezTq4IF4sX
ILIcOasIxhUIu+fcRNv0urqHF1I2SjlORSJNgLOkhzt/yVsF70x+khzfwX3IHTIb
JCh8nz02QwHsb2CEkY2so6YZLChG/wjqkb/IkvdnJuJTXngDRRBf4minFkzfAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUFTV1a1T6BLc8P4TZTkWZd6mNvNYwHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NS8zMTM5MzQyZTMxMzQzNjJlMzEzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADCkgwwDQYJKoZIhvcNAQELBQADggEBAI3ZA62w
/RfHavU38Q9YJbkf3ga/V8boIjIwoLg9GttbTskGB8QiC7mjfXsHPum7Ja8OQUel
MHTjHx4l708iiFdp5kOKgLMv38bLYm2E5N7t/7iJM1kmF5yy20Rc/z4n3CkXBRVY
X/MwUGb8jvDfW2g4vuS2NFEtoAqLFwsC1KxMa/bwhRIjK6Jbcm8lahykqm2OvT3w
9qlHSLm8sxpuTL2x5qHljUpHgRdNx3vnvWWF1VP1UgyMo6rmkF6sFV0OQIPbr9lI
K+uY3O/QifZIgNpVmgc0sl4K6DDejXDnxzjorC9fKT/n4sp2fGx68wZ7AfseuSnT
8wjQf8lpt2pxL44=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net