Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e20333938383539.roa
File:                     39312e3139362e36392e302f32342d3234203d3e20333938383539.roa (raw, json)
Hash identifier:          lfzs53b4yKyU+iIe8aRMlFqi9Tn4Tb4lBnwtHpORkbA=
Subject key identifier:   E8:57:38:19:FF:6D:C7:08:3F:73:A7:16:DA:DC:29:21:94:FE:CB:31
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       0A512E3AE03824C20938F657FABA7F0B80DC76DF
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e20333938383539.roa
Signing time:             Fri 27 Nov 2020 15:10:27 +0000
ROA not before:           Fri 27 Nov 2020 15:05:27 +0000
ROA not after:            Fri 26 Nov 2021 15:10:27 +0000
asID:                     398859
IP address blocks:        91.196.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:51:2e:3a:e0:38:24:c2:09:38:f6:57:fa:ba:7f:0b:80:dc:76:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Nov 27 15:05:27 2020 GMT
            Not After : Nov 26 15:10:27 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:b6:20:2b:06:d2:ee:b1:43:9a:37:b4:26:
                    cc:bd:d1:6f:23:1f:8f:4c:95:9b:37:b1:36:89:33:
                    c4:ec:81:88:81:00:31:bc:38:24:e5:22:2f:04:1f:
                    a4:76:30:13:b4:c0:e3:72:08:77:42:c2:54:e5:df:
                    b3:b5:36:5e:32:c0:36:4e:8a:64:23:b2:60:1e:b7:
                    7d:cc:ff:f0:47:d9:0c:1a:5d:f0:f1:ba:35:05:ab:
                    f0:91:a3:12:9b:a2:85:95:80:11:de:01:9c:c3:f4:
                    4c:0a:d9:c4:ab:8e:bd:d9:6d:e3:de:09:93:dd:f0:
                    61:c5:21:7d:16:b3:4b:f5:69:25:69:50:80:99:9d:
                    e5:e0:56:92:90:1a:cc:3f:bb:06:17:90:0e:4c:5e:
                    a6:1e:2c:c1:cc:87:fc:9e:0c:4a:e3:5b:38:a9:4b:
                    e8:5e:01:19:0b:4d:6c:7e:d6:70:f3:9b:ed:a6:3a:
                    58:28:45:4b:f2:20:0b:55:af:c5:c7:c1:cb:e3:ee:
                    2b:36:95:05:65:96:71:c7:58:53:a5:15:05:b5:6a:
                    df:75:52:42:60:15:ac:52:d0:8f:ac:55:bc:99:e8:
                    35:a1:1a:50:7e:04:f6:da:15:b0:07:27:dd:f7:c4:
                    0a:51:d3:05:3d:76:0b:54:2d:1e:27:6b:f8:9e:a9:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:57:38:19:FF:6D:C7:08:3F:73:A7:16:DA:DC:29:21:94:FE:CB:31
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e20333938383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:35:ce:b0:f0:83:f0:d4:05:e9:f7:a4:d8:f6:bb:d8:0d:82:
         da:ed:62:ec:0e:aa:94:d4:78:90:25:ae:fb:63:47:0b:bd:ce:
         26:0b:ca:77:3e:7c:91:28:38:a4:76:6b:73:77:8f:cc:0e:7b:
         d5:f1:29:db:8a:b5:1e:ec:15:30:70:d8:ff:fb:97:d9:bd:d0:
         ae:83:80:36:08:c8:1c:f2:f5:fc:c6:5d:8c:f8:91:0c:a0:6a:
         24:1c:e9:c7:56:94:89:36:50:51:89:0c:0d:a1:6c:ef:b5:c2:
         34:61:19:a9:66:44:21:d4:9d:b9:9e:1e:2d:45:8e:37:9b:9f:
         d7:2c:5e:2d:71:39:a9:37:c8:d5:ed:e7:bd:da:fa:7a:39:26:
         fe:28:71:6e:6a:b8:df:aa:38:a0:14:84:8a:a4:ed:bf:04:a9:
         63:c2:e9:e9:ef:47:e4:8b:de:3c:fc:51:23:f9:c1:97:5f:62:
         b8:7f:26:9a:a0:97:92:04:6f:3b:65:f5:8e:55:7d:1f:16:10:
         78:f5:5f:5e:fa:df:ac:25:45:56:f3:8d:77:8b:5f:28:1c:42:
         75:d0:c8:09:2c:67:3d:af:3f:26:03:17:7e:3f:2e:d2:46:51:
         8f:3b:fb:59:3a:0f:c3:e5:18:7a:d2:b1:bc:de:55:ba:db:13:
         67:d9:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net