Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e203631333137.roa
File:                     3139332e34322e302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          AfcSVQmT88T5UNVm/UgTKDRtzj99dmEC8F3uYByIF18=
Subject key identifier:   2E:33:14:7B:3C:E0:F2:CC:EE:0E:D3:F0:84:AA:94:7E:64:96:63:6B
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       6AB9197509E54FB74AD6E8278A6E312D68C9A459
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 03 Dec 2020 15:57:07 +0000
ROA not before:           Thu 03 Dec 2020 15:52:07 +0000
ROA not after:            Thu 02 Dec 2021 15:57:07 +0000
asID:                     61317
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b9:19:75:09:e5:4f:b7:4a:d6:e8:27:8a:6e:31:2d:68:c9:a4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:07 2020 GMT
            Not After : Dec  2 15:57:07 2021 GMT
        Subject: CN=3082010A0282010100ED8119A9D826D1D7F42A3E24E4CCD7E445BD2514F1C88C42C7E1F808A5232E6A0AB15C85D83AA6B3D55C262CBE61AF1143B14F6E022B75E476DBA5E23B0827FF9FD084ACE387930152971D9DC9614909991BB6C7DC330EE2B9F7A0398272E71039F7081B5C485F51253450DA2F7826AC1EC9E17FC8CE931A835A245A7E15F833FDCB6CF806D2661DE5238988204FA1CEEA206C354B7D5AF7955B8DDDDC351CBDFDD97CC201DDA738110F176540647932D160FBDC7D68D7D8C378A6350C29D88559877015DFF2535EA8DC5DA1B279DBB32B11610F0CD3DA6DA6581EF3728508450A455A185676EE6EA8D27A88D06036E980F9D7C4025A6162F54F59CB799D61830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:19:a9:d8:26:d1:d7:f4:2a:3e:24:e4:cc:
                    d7:e4:45:bd:25:14:f1:c8:8c:42:c7:e1:f8:08:a5:
                    23:2e:6a:0a:b1:5c:85:d8:3a:a6:b3:d5:5c:26:2c:
                    be:61:af:11:43:b1:4f:6e:02:2b:75:e4:76:db:a5:
                    e2:3b:08:27:ff:9f:d0:84:ac:e3:87:93:01:52:97:
                    1d:9d:c9:61:49:09:99:1b:b6:c7:dc:33:0e:e2:b9:
                    f7:a0:39:82:72:e7:10:39:f7:08:1b:5c:48:5f:51:
                    25:34:50:da:2f:78:26:ac:1e:c9:e1:7f:c8:ce:93:
                    1a:83:5a:24:5a:7e:15:f8:33:fd:cb:6c:f8:06:d2:
                    66:1d:e5:23:89:88:20:4f:a1:ce:ea:20:6c:35:4b:
                    7d:5a:f7:95:5b:8d:dd:dc:35:1c:bd:fd:d9:7c:c2:
                    01:dd:a7:38:11:0f:17:65:40:64:79:32:d1:60:fb:
                    dc:7d:68:d7:d8:c3:78:a6:35:0c:29:d8:85:59:87:
                    70:15:df:f2:53:5e:a8:dc:5d:a1:b2:79:db:b3:2b:
                    11:61:0f:0c:d3:da:6d:a6:58:1e:f3:72:85:08:45:
                    0a:45:5a:18:56:76:ee:6e:a8:d2:7a:88:d0:60:36:
                    e9:80:f9:d7:c4:02:5a:61:62:f5:4f:59:cb:79:9d:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:33:14:7B:3C:E0:F2:CC:EE:0E:D3:F0:84:AA:94:7E:64:96:63:6B
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:b0:4a:b6:1c:a2:b4:04:f0:23:42:fc:cf:ce:f1:1a:d8:
         45:83:9f:c9:e7:8f:33:fb:3a:88:25:52:08:fb:d5:a5:4b:3b:
         08:23:32:86:b7:4c:ed:7f:54:a2:8b:e7:c4:33:4d:93:a3:b6:
         58:84:5c:b4:2a:41:20:a0:34:f7:fb:41:d9:ca:0f:e4:e5:45:
         eb:85:61:e8:72:0d:57:14:5e:ec:63:66:3f:96:d4:af:36:1e:
         37:48:ea:3a:5c:99:c8:a5:4c:df:ea:e3:0a:59:bb:90:ec:9d:
         be:6b:93:4b:2a:0b:ec:78:4b:23:da:5d:14:e3:23:a5:d0:95:
         46:be:89:c1:bd:36:f9:e0:e1:20:87:a2:a8:ed:40:47:83:28:
         20:dc:e0:d6:51:00:6d:f5:70:64:99:42:c7:5e:1e:53:82:07:
         9a:cb:06:ea:a0:12:f5:99:25:a2:f0:44:0a:2b:31:6e:34:b6:
         55:10:d0:cc:2b:0c:ba:a8:f8:2e:f0:d1:b7:53:73:02:a8:af:
         12:4a:95:10:31:ec:b0:85:7a:12:42:ba:29:1e:b1:25:4e:6a:
         93:74:c7:8c:2d:c0:65:14:a7:4b:b4:36:15:19:73:ee:0f:79:
         5e:b6:73:72:c6:40:3b:62:36:25:0d:3f:0d:44:57:f5:be:c0:
         f0:40:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org