Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa
File:                     3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          0syTwYSlQ7GQtEeazaz4LhYtoXsDalmsSMenVicyNs4=
Subject key identifier:   DE:46:93:08:93:09:E7:11:35:3C:3C:38:A9:8B:C1:A9:5C:59:2C:47
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       4ACA86C45D8B9B6799C1179D4BCE5AC360BB4C1D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:41 +0000
ROA not before:           Sat 22 Oct 2022 04:28:41 +0000
ROA not after:            Sat 21 Oct 2023 04:33:41 +0000
asID:                     201341
IP address blocks:        193.32.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ca:86:c4:5d:8b:9b:67:99:c1:17:9d:4b:ce:5a:c3:60:bb:4c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:41 2022 GMT
            Not After : Oct 21 04:33:41 2023 GMT
        Subject: CN=DE4693089309E711353C3C38A98BC1A95C592C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:43:f3:f5:a8:28:00:40:d5:f3:10:c0:b3:
                    68:8a:a8:9d:5a:cc:cc:12:50:88:98:6b:a0:26:ad:
                    2a:65:d2:5b:a9:0b:aa:bc:31:c7:60:b1:d1:36:16:
                    c6:42:46:fe:6a:a6:e1:c2:09:68:32:f4:d4:0a:c4:
                    23:5d:94:f4:8e:71:36:22:00:8e:1b:30:11:12:05:
                    10:c3:30:d5:23:86:33:65:01:ea:c1:bb:f9:8a:31:
                    27:f0:74:9c:b1:db:73:b6:bd:df:22:7f:2e:f0:72:
                    1a:d2:33:f3:95:85:1e:f8:a0:5b:a0:41:8b:42:92:
                    ca:d3:10:98:b8:0b:88:e9:dc:64:1a:c5:37:eb:04:
                    2f:d5:e9:c7:8f:61:f5:dc:ba:78:94:e5:00:f3:3c:
                    9b:9e:4b:c4:99:47:74:6d:4d:bb:8a:9b:7e:e3:7f:
                    ba:13:c5:e5:d6:74:0b:d3:ed:9f:31:d9:c7:00:b2:
                    3a:af:b3:24:57:df:78:66:45:71:e5:32:7f:50:c4:
                    c2:b6:82:3c:c7:a0:77:ce:a2:9e:16:7f:f1:72:30:
                    c4:34:4e:2f:45:94:44:cb:5b:5d:04:c5:08:6d:6e:
                    96:84:32:29:59:be:2c:c9:7a:e6:79:36:21:cd:93:
                    1b:2f:20:bb:62:2e:5f:ed:98:a6:61:32:24:cf:b7:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:46:93:08:93:09:E7:11:35:3C:3C:38:A9:8B:C1:A9:5C:59:2C:47
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8a:9c:97:46:cf:b2:de:8f:76:32:e7:ee:1f:f9:f6:55:95:
         a0:ab:94:34:5c:77:e8:00:3c:36:83:58:db:a4:28:95:0e:7a:
         3e:59:6d:06:34:01:b8:af:29:e8:ac:e2:8d:c0:18:fc:5b:2b:
         5e:25:b8:1c:b0:f5:a1:00:e5:95:18:98:0e:44:b1:c5:99:00:
         cb:68:d3:d8:e8:4a:2f:da:34:f0:1a:5b:87:d6:28:9d:05:20:
         0f:96:ad:a3:8c:36:f6:3b:20:ea:48:1e:8e:48:61:56:64:95:
         a7:86:9b:3d:f6:19:ab:f5:c0:04:66:a8:33:53:99:9b:44:01:
         b8:ad:0f:be:95:93:1a:30:bb:73:79:c6:33:49:3c:56:75:42:
         3d:2d:27:88:e7:a4:0f:ad:c2:46:08:7b:c4:21:92:80:76:d3:
         63:ab:56:b5:d7:d6:ec:13:f0:b0:12:35:a0:e1:51:d0:0f:09:
         48:f4:bc:68:f0:ad:ab:eb:25:68:dc:b3:ee:05:f9:ff:68:26:
         73:bf:ae:e9:7f:d8:ff:be:5e:51:8a:f8:e3:e1:37:8e:67:06:
         d7:93:8c:95:0a:82:ee:08:ae:10:db:83:b4:42:7b:ab:c1:8e:
         f5:62:55:a1:f3:2e:7b:ae:81:a4:92:4f:7c:05:80:c1:37:10:
         f8:c3:12:1f
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUSsqGxF2Lm2eZwRedS85aw2C7TB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDFaFw0yMzEwMjEwNDMzNDFaMDMxMTAvBgNV
BAMTKERFNDY5MzA4OTMwOUU3MTEzNTNDM0MzOEE5OEJDMUE5NUM1OTJDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3EPz9agoAEDV8xDAs2iKqJ1a
zMwSUIiYa6AmrSpl0lupC6q8McdgsdE2FsZCRv5qpuHCCWgy9NQKxCNdlPSOcTYi
AI4bMBESBRDDMNUjhjNlAerBu/mKMSfwdJyx23O2vd8ify7wchrSM/OVhR74oFug
QYtCksrTEJi4C4jp3GQaxTfrBC/V6cePYfXcuniU5QDzPJueS8SZR3RtTbuKm37j
f7oTxeXWdAvT7Z8x2ccAsjqvsyRX33hmRXHlMn9QxMK2gjzHoHfOop4Wf/FyMMQ0
Ti9FlETLW10ExQhtbpaEMilZvizJeuZ5NiHNkxsvILtiLl/tmKZhMiTPt04PAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU3kaTCJMJ5xE1PDw4qYvBqVxZLEcwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTM5MzMyZTMzMzIyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEgrDANBgkqhkiG9w0BAQsFAAOCAQEAKIqc
l0bPst6PdjLn7h/59lWVoKuUNFx36AA8NoNY26QolQ56PlltBjQBuK8p6KzijcAY
/FsrXiW4HLD1oQDllRiYDkSxxZkAy2jT2OhKL9o08Bpbh9YonQUgD5ato4w29jsg
6kgejkhhVmSVp4abPfYZq/XABGaoM1OZm0QBuK0PvpWTGjC7c3nGM0k8VnVCPS0n
iOekD63CRgh7xCGSgHbTY6tWtdfW7BPwsBI1oOFR0A8JSPS8aPCtq+slaNyz7gX5
/2gmc7+u6X/Y/75eUYr44+E3jmcG15OMlQqC7giuENuDtEJ7q8GO9WJVofMue66B
pJJPfAWAwTcQ+MMSHw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org