Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e203631333137.roa
File:                     3139332e3230332e31352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          MA3DWvYl61wEeCKYvlaP4ub9x4YIh57TgeQSNEZuS/Y=
Subject key identifier:   A9:1F:AA:CE:4D:AC:2E:2B:51:84:E6:83:F4:35:F2:00:FF:1C:8D:4E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6B2A4144AB7D29F0886BB8681D0888A07A13E267
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:16 +0000
ROA not before:           Tue 28 Jun 2022 04:36:16 +0000
ROA not after:            Tue 27 Jun 2023 04:41:16 +0000
asID:                     61317
IP address blocks:        193.203.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2a:41:44:ab:7d:29:f0:88:6b:b8:68:1d:08:88:a0:7a:13:e2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:16 2022 GMT
            Not After : Jun 27 04:41:16 2023 GMT
        Subject: CN=A91FAACE4DAC2E2B5184E683F435F200FF1C8D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:57:04:aa:e3:f9:5c:ac:7e:9c:b6:fb:b2:
                    2e:db:90:b6:bc:cb:d9:be:df:6a:b4:59:21:df:3e:
                    d6:30:f7:fe:9d:23:dd:cf:9a:d9:54:af:44:79:d4:
                    49:b1:97:4b:66:3d:5c:1f:4d:50:d2:50:01:57:93:
                    88:6e:de:ca:26:39:cf:4f:79:ad:bc:97:cb:0a:b8:
                    9d:0d:d9:fd:68:3e:82:66:23:d7:82:28:07:25:f9:
                    db:45:87:46:bb:13:e8:31:2a:bf:80:52:b1:53:35:
                    d3:6f:be:80:71:3c:a5:1a:33:5d:6f:40:2e:56:f8:
                    37:59:41:d8:c8:11:c8:7e:8b:40:4c:e7:8c:2e:51:
                    65:34:c3:e3:1a:e0:b9:72:81:66:d8:cb:d2:85:8d:
                    77:bc:ee:66:dd:b8:73:3a:a2:05:b6:1d:41:20:84:
                    4f:18:4c:96:da:a5:d5:1f:4e:50:56:64:9d:17:3f:
                    ee:1e:6e:35:c4:f8:5d:bf:bd:30:95:43:fb:d1:47:
                    73:f2:71:ba:aa:a9:87:93:10:31:73:f4:10:df:ae:
                    78:1d:68:48:e4:42:7b:bf:d6:74:e3:7f:0c:5a:a9:
                    c7:43:6a:77:b2:3d:c5:8c:e9:53:15:59:c6:ce:82:
                    cf:c4:7b:0a:5b:7b:b0:5b:ef:ed:d9:2c:ff:f6:7c:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:AA:CE:4D:AC:2E:2B:51:84:E6:83:F4:35:F2:00:FF:1C:8D:4E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:d0:af:9e:9d:7f:83:10:3f:53:dc:81:91:3d:ff:aa:91:
         0b:69:67:9e:db:f0:a7:d5:4b:28:f2:26:de:7f:fe:b6:fa:27:
         c7:e5:fd:b2:a7:12:f2:d7:9b:15:88:5d:0e:0e:47:fc:f0:51:
         e7:d5:00:82:ee:04:bf:c8:28:b4:1d:8e:37:fe:61:12:8f:6f:
         23:ed:c4:b2:5e:74:37:ec:05:a0:48:00:d8:55:0e:c4:5d:10:
         02:21:2d:ba:42:fa:65:c8:de:c3:7c:01:7b:18:0d:2d:52:0c:
         74:95:fa:99:2a:6b:e5:59:16:34:e8:1b:c4:8e:68:ea:62:6b:
         a0:9d:a1:71:52:4c:c3:b3:6b:33:92:51:7b:1b:b9:93:55:ad:
         84:e4:24:a6:ea:7c:5e:de:7c:07:28:b5:24:f3:64:43:d5:db:
         11:c7:06:12:80:aa:96:87:77:78:c9:74:02:4c:ae:cb:7a:e7:
         c4:8c:4a:2b:e1:c1:09:56:2d:1a:9f:4c:28:71:65:f9:1d:7b:
         34:6c:47:a0:e1:4e:ab:68:93:4e:97:62:26:ef:a8:9d:77:79:
         76:da:00:9d:77:91:9c:7d:14:e5:b6:13:86:21:6a:a6:b9:f5:
         5e:6f:a4:e9:34:f3:45:3b:d5:e4:f1:b4:ba:cb:8c:35:c1:c1:
         e8:bf:35:4e
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUaypBRKt9KfCIa7hoHQiIoHoT4mcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjA2MjgwNDM2MTZaFw0yMzA2MjcwNDQxMTZaMDMxMTAvBgNV
BAMTKEE5MUZBQUNFNERBQzJFMkI1MTg0RTY4M0Y0MzVGMjAwRkYxQzhENEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCna1cEquP5XKx+nLb7si7bkLa8
y9m+32q0WSHfPtYw9/6dI93PmtlUr0R51Emxl0tmPVwfTVDSUAFXk4hu3somOc9P
ea28l8sKuJ0N2f1oPoJmI9eCKAcl+dtFh0a7E+gxKr+AUrFTNdNvvoBxPKUaM11v
QC5W+DdZQdjIEch+i0BM54wuUWU0w+Ma4LlygWbYy9KFjXe87mbduHM6ogW2HUEg
hE8YTJbapdUfTlBWZJ0XP+4ebjXE+F2/vTCVQ/vRR3PycbqqqYeTEDFz9BDfrngd
aEjkQnu/1nTjfwxaqcdDaneyPcWM6VMVWcbOgs/Eewpbe7Bb7+3ZLP/2fPuNAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUqR+qzk2sLitRhOaD9DXyAP8cjU4wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM5MzMyZTMyMzAzMzJlMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADByw8wDQYJKoZIhvcNAQELBQADggEBAF5M0K+e
nX+DED9T3IGRPf+qkQtpZ57b8KfVSyjyJt5//rb6J8fl/bKnEvLXmxWIXQ4OR/zw
UefVAILuBL/IKLQdjjf+YRKPbyPtxLJedDfsBaBIANhVDsRdEAIhLbpC+mXI3sN8
AXsYDS1SDHSV+pkqa+VZFjToG8SOaOpia6CdoXFSTMOzazOSUXsbuZNVrYTkJKbq
fF7efAcotSTzZEPV2xHHBhKAqpaHd3jJdAJMrst658SMSivhwQlWLRqfTChxZfkd
ezRsR6DhTqtok06XYibvqJ13eXbaAJ13kZx9FOW2E4Yhaqa59V5vpOk080U71eTx
tLrLjDXBwei/NU4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org