Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e203236363336.roa
File:                     3139332e35382e3133322e302f32322d3232203d3e203236363336.roa (raw, json)
Hash identifier:          qYfeZ8y7v8IChVKsVDTwAD5IEj7RXEM5wvq+vX7Lm+I=
Subject key identifier:   CE:3F:23:B4:1D:A8:4E:E5:7D:40:D1:92:47:9B:FF:AA:DE:50:C3:9D
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       0E01A75C481EF6A8D36EA9FBC57E7EAD0FB4A047
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e203236363336.roa
Signing time:             Tue 28 Jun 2022 04:41:03 +0000
ROA not before:           Tue 28 Jun 2022 04:36:03 +0000
ROA not after:            Tue 27 Jun 2023 04:41:03 +0000
asID:                     26636
IP address blocks:        193.58.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:01:a7:5c:48:1e:f6:a8:d3:6e:a9:fb:c5:7e:7e:ad:0f:b4:a0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:03 2022 GMT
            Not After : Jun 27 04:41:03 2023 GMT
        Subject: CN=CE3F23B41DA84EE57D40D192479BFFAADE50C39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:a1:70:38:81:6d:1f:e9:ea:a6:40:1b:3c:
                    8f:16:29:d9:a4:c9:55:e4:57:5b:87:2d:1b:7c:3e:
                    08:de:15:c9:c3:66:ac:f5:07:da:3a:e2:df:ae:2a:
                    7c:81:45:f2:03:31:46:48:0f:01:5a:4c:98:cb:dd:
                    ac:44:c2:95:dd:e1:00:1d:84:1c:a3:39:2d:35:41:
                    04:29:71:aa:d0:9b:97:b4:42:48:28:e1:4a:e6:94:
                    2e:89:1f:20:a9:04:1d:ff:02:74:d6:d9:73:1b:58:
                    b2:23:1f:61:c4:e7:c5:6c:88:8c:45:e5:93:34:3a:
                    59:62:33:48:9c:d9:96:dd:a8:b7:45:db:5e:21:0f:
                    40:2b:ff:18:8f:e5:1e:4c:18:66:93:a0:de:49:d0:
                    c1:92:8a:bd:b3:22:c6:30:7d:53:73:20:4f:da:ed:
                    17:cc:59:9c:b2:83:8a:5b:93:b5:74:93:de:ed:0d:
                    bf:72:ff:64:11:e4:cc:7f:ef:04:d1:dd:5b:64:7f:
                    46:2c:37:6b:86:e6:bf:aa:61:16:3e:55:3c:7a:91:
                    f0:f2:83:2a:29:3f:c6:73:b4:cb:db:55:08:c1:88:
                    ef:c3:58:aa:a2:c4:8f:8b:0a:90:1b:29:bd:a8:73:
                    c1:b6:60:9a:16:cf:36:ae:20:7e:4f:a7:4b:93:c5:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3F:23:B4:1D:A8:4E:E5:7D:40:D1:92:47:9B:FF:AA:DE:50:C3:9D
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e203236363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:63:59:7e:c3:94:43:ef:43:73:ca:d6:98:11:91:f9:a5:92:
         33:79:07:b8:4f:f5:93:9b:43:7d:f9:5c:0f:d9:b7:3f:60:db:
         16:ea:8d:23:3e:e9:06:13:d4:fb:82:c2:98:7b:68:7e:74:00:
         7b:f7:11:78:c3:53:bd:40:3a:5b:f9:fb:b8:88:dc:d3:0a:29:
         58:49:ac:44:ac:5a:11:82:2e:aa:72:54:9f:60:23:78:c4:b4:
         04:41:83:9d:a4:1a:06:89:a9:09:5c:4b:68:1f:40:5d:1b:42:
         d5:5f:c8:2d:aa:6a:16:ab:a6:a9:d5:ee:cf:2e:63:2b:91:34:
         4b:3a:71:b1:6c:b9:b8:26:df:89:fa:6d:69:78:f6:87:58:4d:
         3d:f3:51:74:99:77:7e:7b:33:a2:e7:ba:6e:1a:19:87:98:24:
         d2:6b:a8:63:43:c5:25:de:01:89:08:7e:ea:ae:46:32:00:91:
         99:09:30:ad:dd:ff:df:3a:03:6e:25:52:37:bb:27:6b:c6:a0:
         97:3b:12:3f:96:fa:12:5e:18:fe:97:69:91:1b:b9:d1:9b:e2:
         6f:e5:1e:b1:11:75:e2:2c:ac:7f:ad:59:c5:20:12:b2:40:91:
         fe:7c:1a:4d:c0:ef:c8:e9:f2:26:82:ae:9e:40:dd:c1:e8:d8:
         5c:a0:94:8b
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUDgGnXEge9qjTbqn7xX5+rQ+0oEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjA2MjgwNDM2MDNaFw0yMzA2MjcwNDQxMDNaMDMxMTAvBgNV
BAMTKENFM0YyM0I0MURBODRFRTU3RDQwRDE5MjQ3OUJGRkFBREU1MEMzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGKFwOIFtH+nqpkAbPI8WKdmk
yVXkV1uHLRt8PgjeFcnDZqz1B9o64t+uKnyBRfIDMUZIDwFaTJjL3axEwpXd4QAd
hByjOS01QQQpcarQm5e0Qkgo4UrmlC6JHyCpBB3/AnTW2XMbWLIjH2HE58VsiIxF
5ZM0OlliM0ic2ZbdqLdF214hD0Ar/xiP5R5MGGaToN5J0MGSir2zIsYwfVNzIE/a
7RfMWZyyg4pbk7V0k97tDb9y/2QR5Mx/7wTR3Vtkf0YsN2uG5r+qYRY+VTx6kfDy
gyopP8ZztMvbVQjBiO/DWKqixI+LCpAbKb2oc8G2YJoWzzauIH5Pp0uTxYuvAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUzj8jtB2oTuV9QNGSR5v/qt5Qw50wHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTM5MzMyZTM1MzgyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALBOoQwDQYJKoZIhvcNAQELBQADggEBAKVjWX7D
lEPvQ3PK1pgRkfmlkjN5B7hP9ZObQ335XA/Ztz9g2xbqjSM+6QYT1PuCwph7aH50
AHv3EXjDU71AOlv5+7iI3NMKKVhJrESsWhGCLqpyVJ9gI3jEtARBg52kGgaJqQlc
S2gfQF0bQtVfyC2qaharpqnV7s8uYyuRNEs6cbFsubgm34n6bWl49odYTT3zUXSZ
d357M6Lnum4aGYeYJNJrqGNDxSXeAYkIfuquRjIAkZkJMK3d/986A24lUje7J2vG
oJc7Ej+W+hJeGP6XaZEbudGb4m/lHrERdeIsrH+tWcUgErJAkf58Gk3A78jp8iaC
rp5A3cHo2FyglIs=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org