Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa
File:                     3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          BNS7Ja3O3/jWv8EPrv6hq3CHtXWYd4JHI0JNhc7QVB4=
Subject key identifier:   F9:9C:BB:89:4B:35:14:86:E2:2A:93:64:5E:68:EE:1E:F1:75:43:CC
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       7CCE8EDE031ED1C65853210DF9F57E20C9CCA236
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     204170
IP address blocks:        194.60.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:8e:de:03:1e:d1:c6:58:53:21:0d:f9:f5:7e:20:c9:cc:a2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=F99CBB894B351486E22A93645E68EE1EF17543CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:f6:7e:84:d7:36:46:68:0d:29:ed:b7:f0:
                    73:9f:82:58:af:98:02:7f:fb:00:77:73:fe:e0:44:
                    d9:32:32:c1:28:26:9d:9d:60:4e:c8:de:b0:6d:ad:
                    70:bb:5c:5c:e0:4e:01:6b:08:84:c7:fb:59:80:b1:
                    f0:c1:64:84:e9:fd:78:2f:c2:16:6b:23:d0:a9:07:
                    e5:bc:b2:19:04:06:f4:01:60:29:e3:cb:59:9c:3f:
                    7d:98:eb:dd:21:63:ff:25:71:1a:fa:79:01:5e:a1:
                    b9:d7:8b:79:42:92:30:64:88:75:92:3b:cf:63:16:
                    a8:96:10:6f:b5:ca:43:fc:44:94:ac:79:bd:d4:5e:
                    9e:35:45:ba:be:3d:ff:57:a2:56:9f:1e:66:a8:a7:
                    f6:27:7b:02:84:d0:8c:c0:7c:71:4f:e5:1e:0d:c9:
                    78:49:61:54:5e:72:8b:b2:61:b8:cc:77:8f:2c:05:
                    23:31:26:d8:33:ee:18:10:42:d2:3e:e3:04:7b:27:
                    80:22:e4:a1:9a:a6:9f:a7:c5:f9:ec:64:cd:95:b1:
                    1f:44:bb:38:e1:54:40:69:d6:7c:5a:5c:27:31:0b:
                    9f:32:b4:09:2c:64:84:06:ec:fa:8f:93:28:87:e9:
                    ab:38:c7:93:30:a0:5f:75:aa:d5:a1:cc:5c:29:e3:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9C:BB:89:4B:35:14:86:E2:2A:93:64:5E:68:EE:1E:F1:75:43:CC
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2c:82:95:85:8c:e5:0a:5c:be:5f:86:42:02:97:41:a4:39:
         2d:e3:59:eb:38:89:7c:61:56:eb:09:0b:8d:89:bc:cf:cb:cf:
         26:c1:d2:f2:9a:b9:39:72:57:a9:cc:f5:e0:a7:14:75:f6:ab:
         c5:b6:fc:39:66:87:99:d4:a6:98:36:84:18:93:bb:f0:21:45:
         42:21:8c:a1:5e:5b:fd:fa:9a:6b:aa:46:9a:07:29:53:d0:a3:
         dc:94:38:70:7f:82:ae:04:39:51:65:ee:c8:52:c7:b8:a5:ef:
         21:f8:05:ef:d0:06:09:06:09:6f:3c:68:ff:70:fe:a6:3c:42:
         1d:2c:ba:85:b3:99:63:f5:5f:da:af:22:e7:b1:24:d7:a0:ac:
         d3:b3:e0:15:3d:a6:39:d9:4d:8e:56:ff:70:11:d4:fe:3e:0f:
         75:af:bb:69:11:f0:1a:e1:6f:b5:73:57:ad:76:94:be:c7:49:
         31:c7:ea:95:74:02:6d:41:82:76:88:43:69:50:94:8c:7a:c0:
         eb:41:99:a6:ff:ad:4f:5b:0e:e2:1e:d3:4f:6c:06:f4:5a:66:
         0f:8f:ab:64:53:63:4e:57:de:36:65:af:ce:9f:46:4e:ac:b7:
         24:5e:02:27:2b:15:4e:69:6b:02:77:ae:49:b3:33:f4:db:e6:
         0c:0c:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org