Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa
File:                     39312e3230352e3130362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          kYP2ZIprpDzAfpJCT8Ufr8q1kJ+sDa48drCjB6Sa06U=
Subject key identifier:   52:C3:1E:F1:A9:40:94:61:6C:5F:96:EB:B5:B9:BC:CC:F0:93:39:F4
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       626F7E0E6371B44B9D57967D46F8872EEEA0A5EA
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:03:11 +0000
ROA not before:           Fri 03 Mar 2023 15:58:11 +0000
ROA not after:            Fri 01 Mar 2024 16:03:11 +0000
asID:                     0
IP address blocks:        91.205.106.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6f:7e:0e:63:71:b4:4b:9d:57:96:7d:46:f8:87:2e:ee:a0:a5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Mar  3 15:58:11 2023 GMT
            Not After : Mar  1 16:03:11 2024 GMT
        Subject: CN=52C31EF1A94094616C5F96EBB5B9BCCCF09339F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:18:b6:49:05:67:7e:f2:49:b9:43:c6:f2:
                    8a:e7:cb:db:5f:2b:60:4f:09:5a:02:92:6f:e9:6a:
                    af:55:30:3c:21:db:e1:23:ba:3e:11:61:a6:6e:60:
                    13:90:f4:a4:8d:a7:ec:12:8a:9f:53:e3:99:df:29:
                    a2:3c:86:55:3f:64:89:aa:0c:e3:fa:16:57:9d:83:
                    27:b4:bc:f7:a7:19:d8:6f:e0:43:61:d6:a9:8d:e8:
                    d9:44:db:9a:02:33:88:25:b5:57:f1:16:7c:6c:7b:
                    a1:93:a1:f2:cf:dc:7e:a2:ab:0a:c4:38:80:87:a4:
                    15:bf:0e:21:7b:d8:0a:f3:d4:60:db:ee:3a:c7:9f:
                    68:7f:a8:3d:c5:9d:dd:36:9d:70:85:bd:b5:df:da:
                    4b:9e:81:27:f4:a2:3c:bd:10:75:26:fb:88:66:f0:
                    7c:a7:5b:93:78:f4:20:81:91:cb:e4:18:80:1c:c7:
                    af:f0:ae:78:8c:54:b9:c7:96:92:a0:d4:e3:31:30:
                    87:60:74:49:6f:db:6b:eb:80:6f:9b:54:89:a3:2c:
                    25:2b:6f:75:41:53:65:b6:e5:4e:47:23:79:38:8b:
                    6a:4f:85:4d:fc:ba:73:65:b9:52:8a:03:83:fe:c1:
                    a7:06:7e:d7:c6:e6:7f:8d:58:3f:c8:94:f5:30:f8:
                    59:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C3:1E:F1:A9:40:94:61:6C:5F:96:EB:B5:B9:BC:CC:F0:93:39:F4
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:ea:2c:68:25:ad:fd:06:e6:94:b3:13:e0:b8:40:d9:11:5d:
         0b:2d:17:2f:5f:22:8b:c5:6c:64:ff:1f:68:bc:ab:6e:e7:6e:
         72:41:bf:47:73:af:c8:7a:52:4b:69:d8:d2:3f:d1:ab:e2:09:
         ee:c8:76:aa:7d:74:85:a1:3a:51:db:0f:30:26:ca:1e:08:be:
         95:b3:48:e4:f2:5c:1a:7f:67:be:7d:92:96:ef:09:c9:0c:51:
         28:2d:fb:ef:67:22:cb:78:79:33:50:5b:40:f1:39:69:da:b1:
         6e:71:4c:99:cd:1a:7b:a0:a3:af:dc:46:05:9c:e6:fe:8e:f8:
         70:3f:09:b2:0d:c3:1c:df:05:56:85:c1:43:16:67:98:26:ec:
         c3:1a:e2:36:61:b8:fb:05:f3:ab:8a:49:8a:3f:d0:b5:24:bf:
         dc:8d:fa:cc:b6:5d:0a:ef:5c:a7:54:59:71:fc:67:c1:5e:fb:
         2d:30:a0:6d:f0:0f:83:c1:c0:29:26:65:96:81:d3:80:c1:f5:
         43:9f:1e:20:33:c1:a2:60:9f:38:45:bd:50:d5:08:f6:25:ff:
         6d:c4:9d:e5:b0:1f:61:41:c3:e0:cd:96:c3:f5:65:28:e8:2a:
         4a:0b:e9:0b:58:d0:23:aa:db:7b:ca:60:ca:39:bd:31:b7:a4:
         35:ae:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net