Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3137362e3232372e3234332e302f32342d3234203d3e20313437303439.roa
File:                     3137362e3232372e3234332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          4JNUHBk2+rM31WWFky7/IgK+ojyxRTsSwn3P7XDRSIw=
Subject key identifier:   71:12:FB:F6:32:35:9D:B0:7D:57:91:B5:D3:C1:F2:50:56:79:25:D4
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       01D5D9F5B39A9DE94ACDA046DDCAAA8EB023D687
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3137362e3232372e3234332e302f32342d3234203d3e20313437303439.roa
Signing time:             Wed 14 Dec 2022 07:34:58 +0000
ROA not before:           Wed 14 Dec 2022 07:29:58 +0000
ROA not after:            Wed 13 Dec 2023 07:34:58 +0000
asID:                     147049
IP address blocks:        176.227.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d5:d9:f5:b3:9a:9d:e9:4a:cd:a0:46:dd:ca:aa:8e:b0:23:d6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 14 07:29:58 2022 GMT
            Not After : Dec 13 07:34:58 2023 GMT
        Subject: CN=7112FBF632359DB07D5791B5D3C1F250567925D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:03:99:45:e3:96:f7:b1:a3:a8:2f:ac:3a:df:
                    9c:07:9d:22:11:80:80:c4:01:26:1a:13:4e:64:41:
                    49:d5:1f:2f:dd:43:49:ab:4f:9a:ec:8b:70:88:c0:
                    f0:28:04:cf:e4:1e:a2:24:71:50:5d:5f:ed:dc:0e:
                    66:ad:81:2d:e3:5c:03:9b:eb:3f:4c:95:4f:c7:dd:
                    82:d6:a7:2c:41:85:9b:30:91:02:c7:84:0d:29:85:
                    f8:b4:b1:85:0c:66:09:90:23:35:56:c4:c7:c5:60:
                    b4:43:08:e5:ba:83:c3:92:07:38:3d:26:a3:f1:41:
                    59:72:51:e1:3d:c9:a8:36:e0:e3:a8:71:8c:0d:f8:
                    ae:df:80:16:5b:86:e9:74:a9:cb:e4:3f:02:27:8f:
                    23:3f:85:73:8d:09:69:0c:1c:ce:22:e2:65:c6:50:
                    2f:35:86:34:ee:23:d3:68:9a:95:5b:90:63:ad:34:
                    03:d4:95:47:96:7e:35:64:71:86:f6:b8:06:64:db:
                    4c:fe:93:2c:cd:44:90:24:5f:03:56:35:45:41:3b:
                    5e:12:75:c0:06:07:26:6e:4a:04:b3:87:26:ee:fe:
                    8e:ba:09:8b:6c:22:62:5e:73:1b:bb:61:d8:2e:d7:
                    ba:b7:98:04:fc:e8:85:93:33:3e:2b:4a:d4:40:0f:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:FB:F6:32:35:9D:B0:7D:57:91:B5:D3:C1:F2:50:56:79:25:D4
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3137362e3232372e3234332e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.227.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:67:69:20:89:d7:cb:ce:00:c3:e2:a8:1d:3e:2d:c1:04:11:
         5f:7d:59:92:64:af:3f:a9:d4:0c:d6:f0:30:df:45:b2:42:08:
         58:dc:4a:c3:09:15:20:bf:94:af:b1:93:be:01:fd:3e:3f:41:
         2a:b2:7f:07:33:d6:3f:cf:b7:1e:89:61:4e:42:5a:a4:35:6b:
         85:72:4e:fa:39:ef:ec:d2:f4:3e:0d:ed:2e:a7:53:6a:d1:11:
         60:38:b7:39:a9:bf:e5:63:54:e1:a5:34:8d:8a:6f:ab:a3:7d:
         ab:10:e3:08:ec:93:78:9d:0d:d9:e4:f2:ea:93:f7:61:e6:00:
         08:4b:39:9e:ea:96:ef:e4:f0:f6:37:0a:7d:66:94:d3:b8:83:
         37:05:00:6a:a2:0d:44:82:20:14:36:3a:dc:d7:78:53:e5:e7:
         76:3c:53:08:80:ea:59:a0:5c:2b:20:06:ff:52:b8:a5:df:eb:
         37:9b:68:80:37:0d:51:c1:90:f8:0b:70:85:52:1c:5f:1d:c4:
         28:02:5a:20:80:00:40:cb:9c:91:57:e6:dc:0f:de:02:2f:6a:
         38:49:23:a0:92:b3:93:ba:89:5b:87:1f:fa:fe:14:cc:b2:4b:
         d1:e9:78:c3:b7:7e:96:cf:64:47:f3:8e:1c:3a:79:01:91:a4:
         40:7e:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org