Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e203232373733.roa
File:                     3139332e35382e3133322e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier:          lx1oHrbQ8Q1Bmy//wW6+7cOLRUm7zmP2ghGtGKPUDas=
Subject key identifier:   76:A1:77:08:2B:60:46:F5:3E:39:B0:E7:5E:FC:1C:F1:BD:90:74:39
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       6599BBACEB9CDBDFDBC782DC5EEA93981F995CC0
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:41:05 +0000
ROA not before:           Tue 28 Jun 2022 04:36:05 +0000
ROA not after:            Tue 27 Jun 2023 04:41:05 +0000
asID:                     22773
IP address blocks:        193.58.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:99:bb:ac:eb:9c:db:df:db:c7:82:dc:5e:ea:93:98:1f:99:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:05 2022 GMT
            Not After : Jun 27 04:41:05 2023 GMT
        Subject: CN=76A177082B6046F53E39B0E75EFC1CF1BD907439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:05:be:b0:7e:1f:67:2e:01:52:3a:60:e9:
                    dc:86:e0:4b:fd:6d:29:68:31:cc:d9:5f:88:66:33:
                    23:de:14:bd:84:36:18:53:e7:b3:20:02:40:92:10:
                    3a:e5:32:98:65:48:40:a6:64:bb:79:46:f4:c5:db:
                    e9:09:a9:7f:44:5d:8b:50:72:9d:e7:03:33:d3:c2:
                    5f:34:27:ad:50:8a:cd:35:8d:86:87:4c:56:24:8c:
                    90:ab:fa:ac:69:26:00:f5:79:3b:f4:a7:e3:25:f1:
                    68:c6:bf:5f:ed:fb:f4:1c:77:04:39:00:74:40:95:
                    db:10:9c:8f:05:be:a2:25:12:8d:2e:fa:d5:85:c4:
                    1f:da:f7:2e:f0:69:d6:1b:29:7e:a4:b6:f6:cf:20:
                    0c:0e:c7:26:89:72:27:42:cd:50:62:12:c7:df:10:
                    6a:81:09:8c:a3:b8:24:e3:8a:63:62:67:a7:f6:e9:
                    e5:f1:0d:c2:6b:a3:a4:9b:94:ec:02:e3:12:59:37:
                    65:2a:3c:e5:4f:ea:3c:4e:34:b1:f9:61:12:08:2e:
                    2b:b0:46:c5:3d:10:a8:f0:37:db:33:ea:48:1e:14:
                    6e:b3:86:8d:e9:d2:a3:50:d7:36:3f:33:d1:d3:d3:
                    72:22:c1:89:a0:ec:63:53:2c:ca:14:c7:0f:9a:18:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A1:77:08:2B:60:46:F5:3E:39:B0:E7:5E:FC:1C:F1:BD:90:74:39
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:13:4b:56:70:ab:d9:db:b4:7b:c1:b9:8e:90:d3:4c:0c:0d:
         03:54:05:fb:72:60:f7:f7:d8:dc:f5:77:a6:10:a1:03:00:38:
         7b:a2:a6:70:f2:e8:04:fd:07:86:ae:3c:09:fa:35:7e:b2:4f:
         b6:86:c3:e2:3b:c7:f6:77:a1:62:a6:ab:b9:0a:d9:92:6e:de:
         df:f1:e4:bd:11:41:3c:5c:e7:4b:8e:c6:8b:ab:55:17:fa:01:
         28:f8:ff:1e:20:39:29:f6:92:6f:94:5a:08:93:20:17:4f:0b:
         38:88:2d:3c:83:a4:f9:5c:96:e8:6d:a2:fd:c8:72:01:e7:ff:
         2f:42:9f:61:ab:c8:8d:7d:10:23:16:4e:b4:13:c6:e9:20:34:
         36:b8:6d:f7:fb:d2:cd:80:14:2d:d6:3b:f9:4b:a0:e9:f2:a5:
         5e:21:24:0f:41:a5:11:d3:b0:82:fe:4f:9b:aa:e4:12:87:d6:
         43:84:9f:4e:dc:6d:f9:67:55:fd:ac:9d:85:71:a0:bc:4f:dc:
         14:a6:75:5b:fd:c5:cf:5b:c9:8f:62:77:e9:e0:13:ed:4c:9d:
         62:e5:dd:c2:05:ce:f1:4b:76:7c:64:3a:eb:b8:14:97:53:09:
         03:f0:f3:0b:a9:3b:ca:e5:e4:9d:42:64:69:af:29:0d:21:48:
         34:85:27:cb
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUZZm7rOuc29/bx4LcXuqTmB+ZXMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjA2MjgwNDM2MDVaFw0yMzA2MjcwNDQxMDVaMDMxMTAvBgNV
BAMTKDc2QTE3NzA4MkI2MDQ2RjUzRTM5QjBFNzVFRkMxQ0YxQkQ5MDc0MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrwW+sH4fZy4BUjpg6dyG4Ev9
bSloMczZX4hmMyPeFL2ENhhT57MgAkCSEDrlMphlSECmZLt5RvTF2+kJqX9EXYtQ
cp3nAzPTwl80J61Qis01jYaHTFYkjJCr+qxpJgD1eTv0p+Ml8WjGv1/t+/QcdwQ5
AHRAldsQnI8FvqIlEo0u+tWFxB/a9y7wadYbKX6ktvbPIAwOxyaJcidCzVBiEsff
EGqBCYyjuCTjimNiZ6f26eXxDcJro6SblOwC4xJZN2UqPOVP6jxONLH5YRIILiuw
RsU9EKjwN9sz6kgeFG6zho3p0qNQ1zY/M9HT03IiwYmg7GNTLMoUxw+aGIfnAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUdqF3CCtgRvU+ObDnXvwc8b2QdDkwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTM5MzMyZTM1MzgyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALBOoQwDQYJKoZIhvcNAQELBQADggEBAGkTS1Zw
q9nbtHvBuY6Q00wMDQNUBftyYPf32Nz1d6YQoQMAOHuipnDy6AT9B4auPAn6NX6y
T7aGw+I7x/Z3oWKmq7kK2ZJu3t/x5L0RQTxc50uOxourVRf6ASj4/x4gOSn2km+U
WgiTIBdPCziILTyDpPlcluhtov3IcgHn/y9Cn2GryI19ECMWTrQTxukgNDa4bff7
0s2AFC3WO/lLoOnypV4hJA9BpRHTsIL+T5uq5BKH1kOEn07cbflnVf2snYVxoLxP
3BSmdVv9xc9byY9id+ngE+1MnWLl3cIFzvFLdnxkOuu4FJdTCQPw8wupO8rl5J1C
ZGmvKQ0hSDSFJ8s=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net