Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32332d3234203d3e203631333137.roa
File:                     3139332e32392e36302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          G5Bw7s04LVYTp114MbCgsqQNpeEuIjDRDE99wWI1uVQ=
Subject key identifier:   AA:AC:14:1E:BC:AD:A1:11:B9:BF:83:E4:47:48:62:53:80:82:83:C5
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       3178ABCD82EF83479AC426E865B580393A135FCD
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:24 +0000
ROA not before:           Fri 27 Nov 2020 15:05:24 +0000
ROA not after:            Fri 26 Nov 2021 15:10:24 +0000
asID:                     61317
IP address blocks:        193.29.60.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:78:ab:cd:82:ef:83:47:9a:c4:26:e8:65:b5:80:39:3a:13:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:24 2020 GMT
            Not After : Nov 26 15:10:24 2021 GMT
        Subject: CN=3082010A0282010100CEB0B2C28B3E2F5CAFED02B306BB63429E30A3F37A67B97F86F0D03E57B3C03CAB4498F729A5BB48D89D4761FF1333C456213CE3151E74C69886CBCB892FC899B5E0B5D232B582DDC423C6F2354942282BC7C5C95EC5138CBDCB4CFE4AC2B029258AA6A0928859A5E93FFCB0BB2AEBF00243F7AA2966B46052470E2D110BF5FC23376F327F02700C20655A8677E6EA78AEF49C531DAEFA5EF6ECE921F0026F6BC0230B9F419C7B06AEE68044ACD40A75D0D7630884C97667FBD11438E29457F3C2C7011D52936D43E920A73D5AC6A2326DC1C2C942EFDFFDE1D6B6D9D9EE087C5F7ACE5DDE6311B9B93DEE8426836349990FF2CF8660D0059898BC6759BAB5330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:b2:c2:8b:3e:2f:5c:af:ed:02:b3:06:bb:
                    63:42:9e:30:a3:f3:7a:67:b9:7f:86:f0:d0:3e:57:
                    b3:c0:3c:ab:44:98:f7:29:a5:bb:48:d8:9d:47:61:
                    ff:13:33:c4:56:21:3c:e3:15:1e:74:c6:98:86:cb:
                    cb:89:2f:c8:99:b5:e0:b5:d2:32:b5:82:dd:c4:23:
                    c6:f2:35:49:42:28:2b:c7:c5:c9:5e:c5:13:8c:bd:
                    cb:4c:fe:4a:c2:b0:29:25:8a:a6:a0:92:88:59:a5:
                    e9:3f:fc:b0:bb:2a:eb:f0:02:43:f7:aa:29:66:b4:
                    60:52:47:0e:2d:11:0b:f5:fc:23:37:6f:32:7f:02:
                    70:0c:20:65:5a:86:77:e6:ea:78:ae:f4:9c:53:1d:
                    ae:fa:5e:f6:ec:e9:21:f0:02:6f:6b:c0:23:0b:9f:
                    41:9c:7b:06:ae:e6:80:44:ac:d4:0a:75:d0:d7:63:
                    08:84:c9:76:67:fb:d1:14:38:e2:94:57:f3:c2:c7:
                    01:1d:52:93:6d:43:e9:20:a7:3d:5a:c6:a2:32:6d:
                    c1:c2:c9:42:ef:df:fd:e1:d6:b6:d9:d9:ee:08:7c:
                    5f:7a:ce:5d:de:63:11:b9:b9:3d:ee:84:26:83:63:
                    49:99:0f:f2:cf:86:60:d0:05:98:98:bc:67:59:ba:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AC:14:1E:BC:AD:A1:11:B9:BF:83:E4:47:48:62:53:80:82:83:C5
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:5b:b9:4f:d9:75:62:ee:e2:fb:c8:c9:16:70:06:06:d3:
         56:a1:ee:d6:bf:db:60:bf:ca:05:71:0f:b4:b5:13:41:68:02:
         63:07:d0:4b:a6:93:e5:ff:03:97:a9:4f:e5:7d:77:d8:62:37:
         18:fc:a2:03:93:59:cd:92:ac:11:59:e4:84:98:f1:68:e9:48:
         51:e5:f7:e9:4e:b8:e3:ce:05:04:e9:da:72:75:05:2f:2c:e6:
         04:a6:f2:72:47:0d:05:fd:4b:69:75:f4:77:0c:c8:66:2c:42:
         d9:60:2c:4b:37:b7:8b:5d:69:ef:6e:53:24:56:f7:d8:98:4f:
         3c:13:bd:f3:1f:96:7c:25:59:d9:b2:7f:0c:44:bc:d8:47:24:
         4c:cc:5c:69:b7:ae:00:d0:78:49:28:4e:e5:2e:9d:b8:af:f5:
         ff:66:52:65:1f:84:ca:ca:9b:a0:71:c9:af:5e:20:75:d5:4c:
         d9:05:88:7e:07:97:bf:2d:6f:45:36:3d:7c:4c:ae:58:54:84:
         56:f4:72:c0:cf:8b:52:aa:22:c1:a9:04:5a:03:1b:04:8f:a0:
         c4:91:9f:67:e6:3a:77:de:00:34:5a:25:5d:2e:f4:f7:8b:a3:
         1b:29:f1:77:90:34:be:f5:f7:2e:c6:49:a1:f9:a5:fa:c0:f6:
         c6:36:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org