Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa
File:                     3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          iuNF88LDAFpT51tW0//liEWcSK2ATicFaXBjty61NBY=
Subject key identifier:   D1:4D:ED:76:90:A3:4C:1D:E7:AD:14:E2:F6:8A:27:C6:75:7C:D5:08
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       7FA36B8B9E617F34C6035EF742BFB91218935478
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     201341
IP address blocks:        193.32.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a3:6b:8b:9e:61:7f:34:c6:03:5e:f7:42:bf:b9:12:18:93:54:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=D14DED7690A34C1DE7AD14E2F68A27C6757CD508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:34:6d:39:08:3f:8d:c0:11:7a:c5:75:1c:
                    24:b4:3a:1e:c5:ab:03:df:0e:d8:0b:8d:b5:5d:1d:
                    13:cc:6b:2b:2b:82:b9:cf:28:89:00:7a:83:54:0d:
                    ec:f3:be:0d:a4:1f:12:5d:11:28:36:41:7c:f5:1e:
                    e1:f9:ca:c4:6a:26:aa:89:41:23:3d:21:09:2b:2a:
                    54:ac:79:28:0c:63:d9:71:55:cf:cd:3c:b9:e1:a0:
                    76:44:13:25:0c:d9:ec:55:21:38:b9:be:7d:4e:5a:
                    d9:2d:5b:30:13:4b:e0:b4:7e:a8:a3:3e:fa:00:0e:
                    03:24:1c:ec:61:0f:24:c2:50:7e:98:6b:93:8c:67:
                    b3:1e:9a:16:05:8e:c7:d9:34:3d:6d:55:7c:3f:f9:
                    9e:7e:5a:50:eb:fb:f9:82:8e:69:9a:d2:06:ce:cd:
                    9f:d1:07:fb:72:38:58:a6:bf:66:5f:b5:39:ec:f2:
                    24:10:aa:84:4a:86:93:9a:5b:a5:d4:b6:33:d3:6e:
                    6f:c8:0f:44:07:13:f6:49:6d:3c:d6:e5:96:43:dd:
                    b4:b3:ec:9d:37:53:6b:42:38:87:71:51:a9:24:f4:
                    9f:04:6d:82:37:32:b9:2b:28:71:bb:07:e4:b7:74:
                    86:e0:a4:36:da:62:c4:a0:36:1d:f5:68:ff:5f:be:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4D:ED:76:90:A3:4C:1D:E7:AD:14:E2:F6:8A:27:C6:75:7C:D5:08
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:07:61:80:13:0a:6d:4d:f8:f2:c2:ec:87:8e:94:5f:29:33:
         f0:a5:a1:61:bb:1e:50:e9:e6:2f:8f:db:e9:bb:cf:79:13:b4:
         64:3b:83:cf:a1:4a:9c:1e:25:44:cd:11:f8:f3:c5:ae:97:37:
         29:00:fd:2c:13:33:dc:62:dd:2d:58:7e:0a:c5:4f:88:16:5b:
         7e:80:f1:20:8f:d0:4e:7d:ff:5e:aa:ba:2d:1f:c8:2a:f5:c9:
         69:67:b8:5d:00:38:2e:5b:5a:c1:d7:0e:2b:6b:99:f3:ec:b0:
         bb:0a:96:8e:9f:d4:1c:1f:eb:19:45:3b:3a:e8:e7:8b:a8:82:
         e7:ba:80:fd:27:20:97:b8:4b:b3:ed:57:36:6b:a5:43:72:12:
         64:43:41:da:ea:16:06:c0:fd:71:73:cd:53:81:13:97:17:6b:
         90:25:44:8f:a2:28:3e:fd:25:5f:37:16:17:d9:c2:a0:f7:e1:
         53:d4:28:be:84:79:40:83:44:52:e5:c3:37:eb:32:2e:92:3a:
         80:2c:98:2c:cd:30:a1:97:55:a0:c3:66:d4:3e:bb:94:fc:b6:
         f1:fa:00:06:b4:20:9d:86:7b:31:70:2c:69:f0:7d:e3:ce:c4:
         9e:ed:75:f3:77:a2:c6:93:18:9d:39:d9:3d:7c:87:e0:04:59:
         e0:5c:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org