Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e20333935383030.roa
File:                     39332e3137372e39362e302f32322d3234203d3e20333935383030.roa (raw, json)
Hash identifier:          69GdfIPyga9nnppbBmhk73Bk5n9PPJFe8grDbJ4hgPg=
Subject key identifier:   83:EC:EF:D1:96:61:6F:A1:96:64:25:EE:88:E2:ED:DE:38:E1:B6:7C
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       45627860E6F386A2A037321EE2E881DD6263CD9A
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e20333935383030.roa
Signing time:             Tue 28 Jun 2022 04:40:16 +0000
ROA not before:           Tue 28 Jun 2022 04:35:16 +0000
ROA not after:            Tue 27 Jun 2023 04:40:16 +0000
asID:                     395800
IP address blocks:        93.177.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:62:78:60:e6:f3:86:a2:a0:37:32:1e:e2:e8:81:dd:62:63:cd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jun 28 04:35:16 2022 GMT
            Not After : Jun 27 04:40:16 2023 GMT
        Subject: CN=83ECEFD196616FA1966425EE88E2EDDE38E1B67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:f9:42:6f:69:0b:54:8a:cf:19:60:d1:98:
                    59:3a:8d:09:a1:c7:75:c5:27:18:11:f6:a6:fb:d1:
                    e4:47:60:20:77:8f:33:da:00:f4:e9:9f:c2:47:6b:
                    a3:a8:1c:9c:0f:b8:84:b0:25:ec:28:c9:15:13:17:
                    06:17:1b:43:61:c9:77:c8:02:a6:11:ce:72:0d:22:
                    26:7f:ed:5e:39:53:c1:cd:75:cf:77:f8:cb:69:43:
                    52:bb:c9:88:0a:d2:2c:13:64:e3:cd:de:47:59:13:
                    64:76:a1:bc:2f:b0:89:1e:e0:26:8e:db:95:0c:0b:
                    13:81:77:13:a4:e5:7b:da:10:99:96:07:05:92:b8:
                    fa:d2:d9:46:e5:76:56:e3:72:cc:39:0e:18:ad:bc:
                    8d:a2:01:d4:16:b6:c9:d0:99:23:b6:7c:5d:20:3e:
                    7e:7a:f5:09:d0:2c:9b:97:bc:6e:d2:34:42:2f:3b:
                    59:ba:6c:f8:ed:e7:65:65:2b:cc:5d:c9:49:2f:9c:
                    23:3b:fb:fb:fb:2f:e6:d7:c2:30:e1:7b:57:9b:0f:
                    3f:58:b1:ea:bf:79:74:6e:8a:bd:77:3f:ed:14:44:
                    ca:80:05:ec:c0:39:46:ba:69:6b:59:80:fc:64:dd:
                    2b:a9:79:e1:18:8c:6c:c5:d7:42:a4:4c:7f:3c:18:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:EF:D1:96:61:6F:A1:96:64:25:EE:88:E2:ED:DE:38:E1:B6:7C
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e20333935383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:30:c9:55:a4:c6:f8:af:f2:c7:ac:55:7a:6d:3a:4e:ae:
         d2:9d:f0:7e:85:3b:d8:7e:82:1a:d9:00:a0:22:ea:82:e5:fd:
         fe:4c:b9:14:4b:b6:df:1c:fc:35:74:26:c9:6c:cf:21:5d:60:
         0e:da:7e:f0:92:db:b1:c1:68:7d:53:3b:1b:ef:67:2e:cb:fb:
         32:55:0c:7b:73:bb:2a:40:10:77:b0:52:cf:23:35:9c:8c:83:
         89:b6:b0:f8:7c:32:d4:f0:65:2e:96:18:cc:af:4e:32:06:7b:
         75:db:d6:99:0c:53:c0:a2:6a:a0:7a:e9:43:e8:42:e7:ba:92:
         24:d9:72:00:1d:c2:2a:18:97:dc:7a:51:5c:76:2e:83:0f:1a:
         6c:81:dc:25:01:9d:8d:c9:5b:d9:12:de:31:b4:b1:49:f7:97:
         ad:f8:cc:11:35:0c:44:6b:c0:61:42:7b:db:ef:74:d9:4f:17:
         0c:ba:d1:88:7a:c1:04:75:5f:7c:95:f7:3c:23:88:dc:74:32:
         ac:e3:af:53:cc:63:39:c5:46:c6:0a:c7:a1:28:62:3a:14:59:
         0b:00:2b:73:26:d2:11:70:b0:8b:af:d4:8f:e7:1f:fc:32:70:
         af:b4:c8:1b:e1:6c:26:4a:8d:19:eb:8a:a1:8f:0a:da:e0:8e:
         76:6f:a8:86
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIURWJ4YObzhqKgNzIe4uiB3WJjzZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjA2MjgwNDM1MTZaFw0yMzA2MjcwNDQwMTZaMDMxMTAvBgNV
BAMTKDgzRUNFRkQxOTY2MTZGQTE5NjY0MjVFRTg4RTJFRERFMzhFMUI2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW1PlCb2kLVIrPGWDRmFk6jQmh
x3XFJxgR9qb70eRHYCB3jzPaAPTpn8JHa6OoHJwPuISwJewoyRUTFwYXG0NhyXfI
AqYRznINIiZ/7V45U8HNdc93+MtpQ1K7yYgK0iwTZOPN3kdZE2R2obwvsIke4CaO
25UMCxOBdxOk5XvaEJmWBwWSuPrS2Ubldlbjcsw5DhitvI2iAdQWtsnQmSO2fF0g
Pn569QnQLJuXvG7SNEIvO1m6bPjt52VlK8xdyUkvnCM7+/v7L+bXwjDhe1ebDz9Y
seq/eXRuir13P+0URMqABezAOUa6aWtZgPxk3SupeeEYjGzF10KkTH88GDg5AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUg+zv0ZZhb6GWZCXuiOLt3jjhtnwwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zOTMzMmUzMTM3MzcyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM5
MzUzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJdsWAwDQYJKoZIhvcNAQELBQADggEBAHWqMMlV
pMb4r/LHrFV6bTpOrtKd8H6FO9h+ghrZAKAi6oLl/f5MuRRLtt8c/DV0JslszyFd
YA7afvCS27HBaH1TOxvvZy7L+zJVDHtzuypAEHewUs8jNZyMg4m2sPh8MtTwZS6W
GMyvTjIGe3Xb1pkMU8CiaqB66UPoQue6kiTZcgAdwioYl9x6UVx2LoMPGmyB3CUB
nY3JW9kS3jG0sUn3l634zBE1DERrwGFCe9vvdNlPFwy60Yh6wQR1X3yV9zwjiNx0
Mqzjr1PMYznFRsYKx6EoYjoUWQsAK3Mm0hFwsIuv1I/nH/wycK+0yBvhbCZKjRnr
iqGPCtrgjnZvqIY=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net