Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232342e302f32332d3234203d3e2030.roa
File:                     3139342e3135362e3232342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          2aNgHH7K84a1jY4LhvO9Eu5EwFblkuXnaLB9XY4AWe0=
Subject key identifier:   08:4A:8C:6C:9F:4D:5E:BB:EA:D9:D9:7C:07:F5:A1:6B:10:DC:AA:28
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       340815FB5F80381471F4AA4E9FC0989C86C3F961
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232342e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:56:15 +0000
ROA not before:           Fri 03 Mar 2023 15:51:15 +0000
ROA not after:            Fri 01 Mar 2024 15:56:15 +0000
asID:                     0
IP address blocks:        194.156.224.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:08:15:fb:5f:80:38:14:71:f4:aa:4e:9f:c0:98:9c:86:c3:f9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:51:15 2023 GMT
            Not After : Mar  1 15:56:15 2024 GMT
        Subject: CN=084A8C6C9F4D5EBBEAD9D97C07F5A16B10DCAA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:d5:91:8e:62:f2:3c:2c:38:df:e7:ef:b2:
                    b7:b1:23:72:68:47:58:d1:48:1f:9c:0e:09:ae:41:
                    c5:86:92:bc:75:68:8e:37:7a:4b:39:0c:b4:2d:bb:
                    e9:1c:c5:00:ea:af:f5:66:7d:a7:9d:24:e7:b0:d6:
                    ca:62:2b:ff:25:1d:0e:00:c5:e1:a2:20:eb:b3:db:
                    2f:78:ef:b9:ae:a2:60:2f:58:e1:57:99:df:d9:41:
                    d5:2b:de:05:ad:e9:fc:c1:f1:08:6a:24:ce:b3:dc:
                    55:e6:85:c7:26:41:84:b5:6f:c9:5c:1e:f1:9b:12:
                    49:2e:a0:8d:9b:4c:03:3c:aa:fc:fd:79:e9:c8:c1:
                    04:4f:ac:fd:d7:0f:e5:9e:be:ae:27:b8:22:4a:99:
                    48:d2:02:ab:37:2f:62:7e:54:ad:20:12:fc:6d:e3:
                    4f:65:66:c6:ba:85:14:df:74:84:a7:3a:e2:c6:82:
                    48:41:50:95:8b:22:a8:72:1c:07:5d:9f:40:28:88:
                    e9:cc:1d:94:e1:28:c2:12:e9:f4:8c:f0:e3:58:ae:
                    70:60:d6:9c:2e:b8:9a:9b:04:e6:49:b7:ab:02:d2:
                    19:3e:0f:9d:30:10:11:e7:1b:8b:5f:3d:a7:ac:2b:
                    59:21:a0:33:9d:b4:44:ae:9d:39:ee:46:39:e3:f1:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4A:8C:6C:9F:4D:5E:BB:EA:D9:D9:7C:07:F5:A1:6B:10:DC:AA:28
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232342e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:79:9a:1b:9b:6a:22:b2:61:3b:47:9e:47:2b:3f:2e:9d:4a:
         eb:d1:7a:c5:04:62:30:c1:64:a0:8d:09:24:39:1e:57:6c:e0:
         ec:05:b1:6d:73:ab:e2:32:d0:87:54:8f:11:6b:5a:b2:ad:bc:
         f1:1b:41:62:2a:44:b2:54:98:2d:13:b7:5a:47:cb:f1:1d:51:
         6e:ab:f3:81:a9:65:bb:f4:e5:44:37:f7:b3:1c:d2:1e:ff:aa:
         9f:11:ac:1c:32:66:85:d4:f9:92:73:bb:26:fe:47:de:e7:4f:
         45:54:b9:ae:33:be:05:ff:25:0d:62:6f:91:6f:b3:b3:6e:fb:
         dd:f5:6c:87:09:d9:a4:a3:f8:4b:b1:91:7f:10:27:36:1a:1f:
         98:eb:09:de:f2:43:15:83:d5:6b:1e:31:ce:4d:84:98:e7:cd:
         bc:61:1c:db:be:82:f2:20:13:c2:d9:ff:b8:f6:79:20:78:8b:
         66:a3:f8:81:fb:00:28:be:12:2b:a4:5d:ca:dc:f6:c6:3f:a5:
         59:32:bb:bb:97:51:e2:b1:09:93:9d:4b:d7:16:35:55:67:44:
         36:b1:a2:71:1e:28:ff:e9:f5:a9:06:47:f6:3b:f7:2f:2e:04:
         1d:d6:15:6c:e7:ae:a5:33:48:18:5b:9b:80:b3:9e:9a:f1:4b:
         da:9d:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org