Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e20313437303439.roa
File:                     3139342e3135362e3133362e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          Uc2hZnwOhCHLSfC2bHCxSCHfzm65+kBkB1RUoh0dQ8o=
Subject key identifier:   8B:F2:00:E9:A8:71:7B:A1:F3:87:61:B0:06:E4:F8:93:48:8A:2D:8B
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       3A0982E467F715A06E3FC918E2168786218EF449
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:56 +0000
ROA not before:           Sat 22 Oct 2022 04:28:56 +0000
ROA not after:            Sat 21 Oct 2023 04:33:56 +0000
asID:                     147049
IP address blocks:        194.156.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:09:82:e4:67:f7:15:a0:6e:3f:c9:18:e2:16:87:86:21:8e:f4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:56 2022 GMT
            Not After : Oct 21 04:33:56 2023 GMT
        Subject: CN=8BF200E9A8717BA1F38761B006E4F893488A2D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:5f:d2:be:5a:6f:81:41:93:84:dc:99:e1:
                    6b:16:41:81:e6:fa:72:07:2b:81:7b:90:61:74:1d:
                    dd:25:d9:77:42:a1:77:2a:67:b4:da:84:a7:fa:88:
                    28:a5:c8:d4:02:bd:a0:2d:1a:34:cc:d6:ad:8e:e8:
                    3a:3f:ba:95:e3:a7:d3:d4:8d:a9:0d:4a:f2:49:21:
                    39:37:65:dd:69:b5:38:5a:82:5e:46:1d:d7:80:26:
                    ea:05:7b:45:b7:41:85:f0:1e:de:43:6b:7a:55:1f:
                    92:96:85:90:bb:9b:e1:80:75:13:62:e4:af:28:88:
                    f2:32:65:df:61:cb:27:d5:06:dc:31:88:c0:9e:4c:
                    1d:b3:b1:42:f5:ac:f5:f7:22:23:54:9d:13:ec:8b:
                    70:f1:fc:bf:65:01:6a:f3:e1:26:bf:61:f6:c3:65:
                    6f:0a:82:c2:7d:01:4b:02:92:75:2d:92:c9:67:bf:
                    07:8b:88:de:31:82:eb:b8:3d:0a:77:07:c0:2c:df:
                    23:b5:99:5e:47:c7:01:3d:78:13:cd:10:3e:6d:66:
                    23:35:bc:65:a5:f5:07:82:f4:c7:e2:da:80:4a:d3:
                    d4:c9:86:dd:11:ef:a0:c0:00:e4:dc:cf:b5:00:71:
                    8d:f9:b0:19:0b:eb:12:66:2e:fb:cb:d0:43:4c:f4:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F2:00:E9:A8:71:7B:A1:F3:87:61:B0:06:E4:F8:93:48:8A:2D:8B
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:19:33:56:24:de:fa:b6:9e:81:e4:de:91:89:3a:94:46:1e:
         20:55:25:b7:dc:bd:f8:e7:76:9c:e1:07:82:b9:e2:e5:36:d3:
         6b:55:53:2f:b3:aa:f1:4e:32:ac:d6:59:71:9d:51:7b:c6:7b:
         98:42:cf:a2:a7:0a:1e:33:54:35:7e:fd:86:0c:85:38:cd:9a:
         ed:6d:6f:1a:d5:9e:ae:6d:a7:f0:1c:da:b7:b3:12:5a:d3:73:
         b0:51:81:93:be:84:7c:a1:af:2b:a5:4d:36:84:b1:40:e8:c6:
         73:f2:f1:19:8f:bb:5e:7f:ed:10:a1:c6:04:c8:74:7b:f6:73:
         d7:21:ce:11:67:d0:a4:fd:6e:7f:5c:0d:02:a1:1d:22:bb:23:
         5f:7e:4a:5d:8f:04:19:3a:e5:34:25:ab:d2:2b:2c:e6:f3:6a:
         29:46:69:89:cf:9b:62:a9:f4:37:c2:7c:0a:a0:33:02:14:04:
         34:ba:fe:dd:d2:d6:b6:87:81:a6:3e:bd:91:27:a4:66:00:46:
         d5:f4:e5:12:68:de:9c:e7:8c:17:bb:ff:fb:ae:08:34:4a:b4:
         dd:70:25:a4:5f:fe:81:8d:e8:72:d6:12:13:19:32:f6:41:c6:
         04:c9:33:e7:82:eb:7c:d9:b1:93:07:d8:12:25:bc:c5:20:97:
         f7:17:d5:8b
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUOgmC5Gf3FaBuP8kY4haHhiGO9EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjEwMjIwNDI4NTZaFw0yMzEwMjEwNDMzNTZaMDMxMTAvBgNV
BAMTKDhCRjIwMEU5QTg3MTdCQTFGMzg3NjFCMDA2RTRGODkzNDg4QTJEOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQl/SvlpvgUGThNyZ4WsWQYHm
+nIHK4F7kGF0Hd0l2XdCoXcqZ7TahKf6iCilyNQCvaAtGjTM1q2O6Do/upXjp9PU
jakNSvJJITk3Zd1ptThagl5GHdeAJuoFe0W3QYXwHt5Da3pVH5KWhZC7m+GAdRNi
5K8oiPIyZd9hyyfVBtwxiMCeTB2zsUL1rPX3IiNUnRPsi3Dx/L9lAWrz4Sa/YfbD
ZW8KgsJ9AUsCknUtkslnvweLiN4xguu4PQp3B8As3yO1mV5HxwE9eBPNED5tZiM1
vGWl9QeC9Mfi2oBK09TJht0R76DAAOTcz7UAcY35sBkL6xJmLvvL0ENM9JspAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUi/IA6ahxe6Hzh2GwBuT4k0iKLYswHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzUvMzEzOTM0MmUzMTM1MzYyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMxMzQzNzMwMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKciDANBgkqhkiG9w0BAQsFAAOCAQEA
QhkzViTe+raegeTekYk6lEYeIFUlt9y9+Od2nOEHgrni5TbTa1VTL7Oq8U4yrNZZ
cZ1Re8Z7mELPoqcKHjNUNX79hgyFOM2a7W1vGtWerm2n8Bzat7MSWtNzsFGBk76E
fKGvK6VNNoSxQOjGc/LxGY+7Xn/tEKHGBMh0e/Zz1yHOEWfQpP1uf1wNAqEdIrsj
X35KXY8EGTrlNCWr0iss5vNqKUZpic+bYqn0N8J8CqAzAhQENLr+3dLWtoeBpj69
kSekZgBG1fTlEmjenOeMF7v/+64INEq03XAlpF/+gY3octYSExky9kHGBMkz54Lr
fNmxkwfYEiW8xSCX9xfViw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net