Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e203631333137.roa
File:                     3139322e3136362e3234342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          HfCa6QK490LHqH3tsdXoRsab+FJ1GhcfUALCZN2YuPc=
Subject key identifier:   D7:8D:13:8E:7E:EC:F0:F6:94:47:3C:7F:50:02:81:26:C6:5A:DD:60
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6DFE2DA562BC77D6E7270E98F3776877C4E6B214
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:20 +0000
ROA not before:           Fri 27 Nov 2020 15:05:20 +0000
ROA not after:            Fri 26 Nov 2021 15:10:20 +0000
asID:                     61317
IP address blocks:        192.166.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fe:2d:a5:62:bc:77:d6:e7:27:0e:98:f3:77:68:77:c4:e6:b2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:20 2020 GMT
            Not After : Nov 26 15:10:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:0d:e0:b2:06:0d:01:ae:f8:3a:4f:91:f0:
                    36:88:c3:b0:bd:35:01:25:5f:d0:53:38:f9:79:43:
                    d5:42:db:5b:b3:6c:8d:29:ba:b8:0f:92:75:5f:c9:
                    5a:ae:26:e1:cf:de:cb:59:89:c0:32:7f:d8:8f:c2:
                    4f:45:d8:94:f0:4c:9e:17:6c:52:a1:b2:45:e6:6f:
                    3e:e0:38:a1:2b:47:0a:af:25:db:e7:a6:30:6c:11:
                    76:18:ff:04:71:86:be:87:c6:aa:62:74:08:8e:47:
                    f4:4e:38:70:c5:7d:e1:3f:14:4f:dd:d9:1c:01:e8:
                    bd:af:a6:9e:d3:81:03:e3:26:ad:61:ed:dc:39:8e:
                    23:ec:33:3e:fd:cc:b6:f3:68:9e:59:fe:a3:d3:04:
                    c9:ec:9b:4c:93:9e:f9:b3:5e:52:11:fd:5e:fb:d5:
                    ae:73:19:31:13:27:36:30:c6:f5:47:60:1c:0a:39:
                    12:ed:24:6d:63:a9:89:9e:e1:8c:63:0e:39:9b:fa:
                    f7:de:05:a5:19:30:ea:30:01:2f:de:3d:f3:62:c9:
                    72:f4:24:d1:a1:64:da:7c:cb:40:7d:42:11:09:1d:
                    36:d0:90:b3:aa:55:08:0b:63:b7:c8:cf:30:6f:95:
                    83:53:d8:09:9e:48:6d:47:86:35:11:49:73:93:6d:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8D:13:8E:7E:EC:F0:F6:94:47:3C:7F:50:02:81:26:C6:5A:DD:60
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:f8:0a:d1:1f:20:da:01:f7:da:4d:09:fd:89:10:96:df:
         12:2e:fd:b9:d5:fb:8d:b9:fd:c5:27:79:8f:49:3c:21:76:3f:
         c7:d7:5e:73:c1:6c:89:06:44:b4:96:90:56:d1:12:cd:ee:d9:
         8a:a0:25:98:b3:aa:09:52:28:f6:08:b3:2e:e6:2a:64:f0:9d:
         e7:c9:0c:53:40:e0:76:54:f6:43:fd:29:0f:40:b5:4c:8f:24:
         cb:02:d5:f1:f5:c6:4d:a0:b9:cf:b9:f7:86:2b:f4:1b:97:64:
         73:74:77:8c:1e:c6:5f:7d:a9:a1:3d:27:5d:53:53:87:57:c6:
         5b:28:55:89:a7:34:69:73:0c:68:7f:87:70:c9:df:69:70:70:
         6c:56:17:13:4c:0f:8d:6b:c6:a1:4d:ab:39:51:86:52:d6:e1:
         30:ba:76:3e:66:c3:63:fa:14:e4:de:47:e1:25:05:80:c8:70:
         25:5d:26:0a:ae:4d:1d:38:1a:5d:e7:67:b0:10:ad:6d:41:7a:
         e2:89:da:98:07:aa:ca:ee:dc:71:48:a8:84:de:fe:7d:8f:d0:
         34:15:8a:6b:6a:0b:b2:27:1d:13:b8:94:7c:f8:af:4a:68:e4:
         c7:d9:ee:e7:5d:77:a7:7f:64:00:96:4c:89:04:53:6a:12:da:
         f2:b9:0d:8b
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUbf4tpWK8d9bnJw6Y83dod8TmshQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMDExMjcxNTA1MjBaFw0yMTExMjYxNTEwMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI4NTBERTBCMjA2MEQwMUFF
RjgzQTRGOTFGMDM2ODhDM0IwQkQzNTAxMjU1RkQwNTMzOEY5Nzk0M0Q1NDJEQjVC
QjM2QzhEMjlCQUI4MEY5Mjc1NUZDOTVBQUUyNkUxQ0ZERUNCNTk4OUMwMzI3RkQ4
OEZDMjRGNDVEODk0RjA0QzlFMTc2QzUyQTFCMjQ1RTY2RjNFRTAzOEExMkI0NzBB
QUYyNURCRTdBNjMwNkMxMTc2MThGRjA0NzE4NkJFODdDNkFBNjI3NDA4OEU0N0Y0
NEUzODcwQzU3REUxM0YxNDRGREREOTFDMDFFOEJEQUZBNjlFRDM4MTAzRTMyNkFE
NjFFRERDMzk4RTIzRUMzMzNFRkRDQ0I2RjM2ODlFNTlGRUEzRDMwNEM5RUM5QjRD
OTM5RUY5QjM1RTUyMTFGRDVFRkJENUFFNzMxOTMxMTMyNzM2MzBDNkY1NDc2MDFD
MEEzOTEyRUQyNDZENjNBOTg5OUVFMThDNjMwRTM5OUJGQUY3REUwNUE1MTkzMEVB
MzAwMTJGREUzREYzNjJDOTcyRjQyNEQxQTE2NERBN0NDQjQwN0Q0MjExMDkxRDM2
RDA5MEIzQUE1NTA4MEI2M0I3QzhDRjMwNkY5NTgzNTNEODA5OUU0ODZENDc4NjM1
MTE0OTczOTM2RDc5NDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq4UN4LIGDQGu+DpPkfA2iMOwvTUBJV/QUzj5eUPVQttbs2yNKbq4
D5J1X8laribhz97LWYnAMn/Yj8JPRdiU8EyeF2xSobJF5m8+4DihK0cKryXb56Yw
bBF2GP8EcYa+h8aqYnQIjkf0TjhwxX3hPxRP3dkcAei9r6ae04ED4yatYe3cOY4j
7DM+/cy282ieWf6j0wTJ7JtMk575s15SEf1e+9WucxkxEyc2MMb1R2AcCjkS7SRt
Y6mJnuGMYw45m/r33gWlGTDqMAEv3j3zYsly9CTRoWTafMtAfUIRCR020JCzqlUI
C2O3yM8wb5WDU9gJnkhtR4Y1EUlzk215RQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FNeNE45+7PD2lEc8f1ACgSbGWt1gMB8GA1UdIwQYMBaAFAeorytf6DH/WJ6ziuPA
Jc6HHyPnMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yLzA3QThB
RjJCNUZFODMxRkY1ODlFQjM4QUUzQzAyNUNFODcxRjIzRTcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9CNml2SzFfb01mOVluck9LNDhBbHpvY2ZJLWMuY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzIvMzEzOTMyMmUzMTM2MzYyZTMy
MzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADApvQwDQYJKoZIhvcNAQELBQADggEBAHf6+ArRHyDaAffaTQn9iRCW3xIu/bnV
+425/cUneY9JPCF2P8fXXnPBbIkGRLSWkFbREs3u2YqgJZizqglSKPYIsy7mKmTw
nefJDFNA4HZU9kP9KQ9AtUyPJMsC1fH1xk2guc+594Yr9BuXZHN0d4wexl99qaE9
J11TU4dXxlsoVYmnNGlzDGh/h3DJ32lwcGxWFxNMD41rxqFNqzlRhlLW4TC6dj5m
w2P6FOTeR+ElBYDIcCVdJgquTR04Gl3nZ7AQrW1BeuKJ2pgHqsru3HFIqITe/n2P
0DQVimtqC7InHRO4lHz4r0po5MfZ7uddd6d/ZACWTIkEU2oS2vK5DYs=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org