Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa
File:                     3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          CZUPvx2u9oib3mw/9C6eAAgf0sftRssJXONFL5XQK2M=
Subject key identifier:   A7:2E:3B:0A:8D:82:13:CC:78:8E:96:7A:46:25:32:E7:BC:96:ED:DA
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       4F504FFB0193181C9BE5BEB35449870117E86F79
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     201341
IP address blocks:        193.32.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:50:4f:fb:01:93:18:1c:9b:e5:be:b3:54:49:87:01:17:e8:6f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=A72E3B0A8D8213CC788E967A462532E7BC96EDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:95:59:ee:5b:ab:1b:8e:79:28:a5:e9:25:
                    d0:4e:57:45:19:89:4a:31:64:3c:b6:e4:42:d2:49:
                    5d:18:10:46:29:b1:f5:c8:c8:93:2b:0b:d9:23:71:
                    74:6c:f7:9f:69:05:c0:a6:4d:c8:6b:79:30:d9:e3:
                    2b:79:29:3e:19:39:46:73:56:47:b2:bb:25:b8:1c:
                    be:17:19:b4:9e:e6:c8:63:45:33:19:2a:5e:46:ed:
                    72:b5:0e:d2:dd:bf:c2:20:fc:b3:dc:17:30:3e:d9:
                    32:3b:81:80:3c:0c:20:cc:5f:0e:7d:c2:e4:af:be:
                    7e:85:3c:e1:bd:0b:d3:e1:a7:f3:1b:1b:fd:70:1a:
                    f9:55:e1:0a:50:ec:98:e5:10:7c:f3:ed:3f:2f:3b:
                    d4:22:d5:93:ff:a0:2c:d6:31:70:d6:e0:93:b6:80:
                    28:aa:99:e1:88:33:e3:7f:48:fe:08:00:37:4a:d1:
                    04:9f:fc:03:ce:5d:bb:bb:83:37:ed:fa:53:31:07:
                    4f:19:ec:00:cb:bf:0c:3e:ec:15:6b:7a:f1:25:76:
                    bf:5e:7a:8b:30:d4:c5:f3:24:69:46:d0:57:c6:03:
                    fd:06:37:65:50:d0:17:8f:97:b3:0a:c5:7a:9d:b8:
                    7f:ef:0b:17:1e:c8:12:c8:ac:8d:fd:7c:14:51:ab:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2E:3B:0A:8D:82:13:CC:78:8E:96:7A:46:25:32:E7:BC:96:ED:DA
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:17:5e:a9:73:6f:5f:ab:42:07:85:64:d0:55:3e:5d:c4:
         d6:25:a9:f2:09:2b:aa:e0:52:9d:6a:23:7f:f8:20:69:77:80:
         94:57:3c:7f:9b:68:a5:92:51:4e:a5:79:dc:e0:7c:25:88:b3:
         b0:78:a2:f6:bd:c0:88:da:b2:94:74:5d:d6:36:84:54:07:3b:
         e8:0c:21:1b:a5:2b:b8:8b:70:e0:e4:f1:eb:cf:08:90:8d:26:
         fc:06:db:aa:98:7a:67:ff:77:75:b5:5b:6d:c4:bd:e3:da:ee:
         11:a0:07:59:70:47:05:e0:d6:ea:14:91:c4:25:af:45:f1:89:
         e3:3a:01:17:b5:2c:3d:ee:b8:6f:f5:70:bd:82:cf:65:df:40:
         70:93:9d:98:0e:5c:7a:1e:01:fc:fe:80:08:c3:9c:53:c9:e6:
         36:24:ba:db:cf:91:64:d6:43:c8:1b:04:84:52:73:30:29:c4:
         b4:1e:3f:59:42:84:c2:4b:29:20:b2:ab:ec:b7:de:fc:c8:2f:
         91:8b:70:7e:ef:24:d8:19:36:c2:5a:dc:57:f3:93:a6:3f:c1:
         7a:14:84:09:ad:f1:ef:31:1d:02:34:a4:cf:f2:be:10:71:7f:
         ab:6b:6f:66:7d:3a:97:1d:37:88:89:cf:c5:5c:a3:21:1f:91:
         66:08:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org