Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3231322e39302e3132322e302f32332d3234203d3e2030.roa
File:                     3231322e39302e3132322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          MoYPwCkwARXm2ryNandHtpjI9D7QP1J4x5892ifBO0o=
Subject key identifier:   19:A0:B3:86:4F:C3:06:0D:EF:78:13:33:18:57:4E:6F:28:3D:57:4A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       73CCABAE7A0C4A9404E6D3C2FB003B43112F1768
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3231322e39302e3132322e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:18:08 +0000
ROA not before:           Fri 03 Mar 2023 16:13:08 +0000
ROA not after:            Fri 01 Mar 2024 16:18:08 +0000
asID:                     0
IP address blocks:        212.90.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cc:ab:ae:7a:0c:4a:94:04:e6:d3:c2:fb:00:3b:43:11:2f:17:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Mar  3 16:13:08 2023 GMT
            Not After : Mar  1 16:18:08 2024 GMT
        Subject: CN=19A0B3864FC3060DEF78133318574E6F283D574A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:1b:a3:51:99:80:56:50:78:e1:e0:da:35:
                    95:51:bd:c1:89:3a:60:14:7b:a5:f2:fd:94:11:2e:
                    22:3e:cb:6d:06:ee:4a:d7:a1:b5:2f:e4:67:3a:51:
                    ee:a0:29:43:ce:82:7d:54:d3:e1:57:53:dd:3a:07:
                    7d:77:b0:4b:bc:32:18:2a:78:eb:2d:8e:c9:44:49:
                    42:73:9c:54:33:83:0e:f1:40:bb:a5:20:48:6c:1f:
                    29:f3:73:f0:d9:ba:77:5f:e7:31:61:25:15:a2:1e:
                    57:dc:84:48:15:16:0f:ad:e9:ae:c5:39:36:aa:c0:
                    4b:96:79:b0:29:8b:17:d6:0e:17:7a:fb:5b:18:e6:
                    f3:19:0e:74:cf:a9:2c:70:fe:11:96:a3:33:f6:e4:
                    66:ff:a2:6e:a2:cd:98:c5:8e:15:00:77:ff:d0:77:
                    86:c6:56:79:3d:07:80:69:9a:d5:ba:14:58:28:7b:
                    6b:d3:ac:8b:7e:b1:92:1b:1e:a4:97:e9:eb:40:2c:
                    32:ed:24:bb:a3:ca:fa:ce:6b:31:eb:f0:e0:24:77:
                    cf:ed:94:44:87:35:56:51:c4:1f:e2:d6:42:d9:af:
                    cc:7d:2b:99:a3:18:38:d0:76:4b:10:2c:c4:b1:4c:
                    95:44:ac:8a:e0:69:fa:75:ca:72:9c:fc:ce:93:c8:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:B3:86:4F:C3:06:0D:EF:78:13:33:18:57:4E:6F:28:3D:57:4A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3231322e39302e3132322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.90.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:15:0a:ab:dc:d7:73:2e:d0:ab:13:d6:47:ee:c5:ad:6f:e4:
         87:1e:55:b8:5f:5a:05:bd:a4:9c:2a:83:bb:ce:b6:fc:29:f9:
         75:ff:cb:f8:de:a4:61:1d:37:11:0f:68:f1:48:81:d1:b0:7c:
         2e:7f:9a:c8:90:c8:65:93:ba:02:78:31:71:c0:d2:8f:44:a7:
         58:40:ea:c9:ca:1f:c8:98:53:ef:75:cf:ed:55:2d:ea:20:83:
         b6:7a:7e:d2:22:a1:9c:9c:aa:d3:50:4c:58:0b:50:d7:12:cc:
         57:19:f3:7e:14:a8:9b:bd:e4:e1:d3:26:0b:8d:bc:24:c1:a3:
         37:2f:48:cd:82:c3:bb:a9:ac:8f:64:a7:a7:ac:f7:cc:40:2d:
         be:96:f9:33:77:59:65:21:7a:60:da:33:4d:a4:50:58:8d:2b:
         ee:71:fb:d7:e4:ff:fd:e7:d3:76:af:8c:c7:9f:67:d6:36:23:
         4a:27:97:7b:9d:ac:a9:41:27:1c:cc:3a:fd:9a:c1:0c:bc:94:
         0c:37:89:9b:a7:57:9d:4c:91:4b:ec:d3:61:42:6f:9e:82:87:
         e6:fd:a6:b7:75:47:d9:c1:27:f7:51:e4:55:f6:0f:1c:f7:2e:
         62:5c:f5:c2:2a:7d:b4:98:cb:e9:77:12:bf:43:76:8b:c6:eb:
         62:ce:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org