Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa
File:                     3139332e34362e3139362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          Gl6yZGI8lDnSBbU0P5E2gHIVvxOluNSRGuvGtXgImcU=
Subject key identifier:   35:F4:A6:5B:AA:B5:42:4B:BC:EF:4F:16:EC:16:87:EE:AE:98:5E:62
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       76BE6665FBC26C03485509D3E194139C324682C0
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:28 +0000
ROA not before:           Sat 22 Oct 2022 04:28:28 +0000
ROA not after:            Sat 21 Oct 2023 04:33:28 +0000
asID:                     47583
IP address blocks:        193.46.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:be:66:65:fb:c2:6c:03:48:55:09:d3:e1:94:13:9c:32:46:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:28 2022 GMT
            Not After : Oct 21 04:33:28 2023 GMT
        Subject: CN=35F4A65BAAB5424BBCEF4F16EC1687EEAE985E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:98:3a:9e:04:43:e7:15:89:13:12:7d:18:
                    cd:e2:af:6f:a9:ce:64:81:fa:91:1e:f1:a1:f2:c2:
                    8a:38:94:42:3c:c3:f1:4d:d5:c4:6b:0b:91:eb:19:
                    09:64:58:1e:e2:7e:7e:e0:f2:96:f0:9b:78:6d:c6:
                    1b:50:e0:8e:2c:82:09:94:22:6d:f4:ce:5b:dc:c1:
                    45:fe:51:71:e5:eb:ea:5c:44:18:d4:8c:94:90:47:
                    c8:71:d7:60:4d:c5:f3:3b:f3:ae:e4:0a:25:7c:84:
                    c1:87:88:e5:fa:40:6f:26:74:c8:03:93:5d:81:12:
                    c6:43:b4:e7:23:6b:91:00:6f:3c:bc:c5:75:f6:a8:
                    a4:d6:93:c5:d6:19:b5:28:48:b2:05:b9:aa:4e:ca:
                    0c:9e:55:5f:8f:8b:e6:01:f2:f0:e2:eb:46:fc:4c:
                    a6:ef:b0:4a:54:b6:f7:9e:95:7c:f6:b5:76:81:8d:
                    75:38:49:6c:3e:80:06:34:0b:c5:8f:5b:04:3a:31:
                    bf:7e:e8:14:64:19:84:63:ea:84:a3:d6:f1:2b:2b:
                    78:a3:d2:7c:2f:67:d3:3a:9f:d2:65:81:fb:e4:bb:
                    98:25:32:56:92:39:69:20:b5:cc:c6:c3:ed:c8:61:
                    bc:f7:23:bb:07:7c:f2:37:4f:13:44:e3:98:4f:08:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:A6:5B:AA:B5:42:4B:BC:EF:4F:16:EC:16:87:EE:AE:98:5E:62
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:0f:44:ce:dc:ec:ae:3a:2b:fb:4c:1e:ee:63:a3:75:ee:e3:
         87:9d:d9:37:5c:d8:93:99:93:d5:74:a2:3a:3d:3b:98:f0:fc:
         cf:f0:5e:a3:3d:dc:0b:5c:02:04:50:03:68:03:33:be:29:43:
         6c:ad:68:c8:4a:c9:15:7f:c1:67:c4:5c:43:41:05:6a:0c:2d:
         2f:2a:aa:0a:f8:29:ff:c6:bc:04:6e:38:b2:82:b3:3f:81:20:
         93:41:7a:72:de:cf:05:29:58:c9:33:3c:0c:1b:c2:a1:38:2c:
         ba:cd:1d:09:2d:2f:0a:7b:8f:22:77:0e:93:7f:e2:d5:12:7f:
         20:51:14:46:5e:67:4d:93:a5:1c:37:b9:49:de:14:b6:d5:27:
         d3:c6:be:86:b4:75:06:d1:3e:00:c3:5d:1b:32:46:61:28:be:
         5c:4d:e5:a6:db:89:71:31:0a:26:91:af:46:73:b9:84:e5:39:
         2d:76:c2:c4:a6:35:e5:5d:55:2a:e0:ca:d5:05:ee:7c:ac:96:
         bd:54:0d:ef:72:19:a4:71:db:93:67:76:cd:b4:55:8c:b0:bc:
         26:f4:fb:32:14:8c:27:1e:06:bd:7f:6e:30:fc:2a:7c:68:38:
         37:77:07:1f:59:9e:85:a3:1b:38:8c:cb:02:d1:ff:71:bb:0d:
         33:d6:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org