Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39312e3133322e302e302f32322d3234203d3e2030.roa
File:                     39312e3133322e302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          pBj70yMTvL4HvKr7n5pa+c1lVcXV+z8uUjPnCLsjIJc=
Subject key identifier:   7B:8E:EC:04:50:07:F5:CA:D0:85:A4:C8:60:50:7B:1A:F7:68:60:FA
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       05DDE1BD60CE42189F1C91AA30B7ED5A6769EC36
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3133322e302e302f32322d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:57:26 +0000
ROA not before:           Fri 03 Mar 2023 15:52:26 +0000
ROA not after:            Fri 01 Mar 2024 15:57:26 +0000
asID:                     0
IP address blocks:        91.132.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:dd:e1:bd:60:ce:42:18:9f:1c:91:aa:30:b7:ed:5a:67:69:ec:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:52:26 2023 GMT
            Not After : Mar  1 15:57:26 2024 GMT
        Subject: CN=7B8EEC045007F5CAD085A4C860507B1AF76860FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:0c:0e:e9:7f:b1:aa:02:19:79:b5:ea:ba:
                    1f:ae:c3:9d:fd:48:2d:25:f2:45:9e:fa:d1:ab:9a:
                    8e:a8:76:43:11:87:b3:02:e0:1f:45:a1:50:d2:26:
                    b7:44:b9:e2:5c:2e:27:cd:c5:1e:47:dc:67:21:7f:
                    9e:2b:a3:d1:da:db:94:80:43:6c:97:b1:1e:e4:d4:
                    ff:63:49:14:49:08:2d:2f:3a:67:bb:7e:6a:02:be:
                    13:f7:b6:26:4a:1e:7c:fc:10:27:61:76:98:3d:db:
                    e6:52:df:a6:54:60:c4:67:ef:2c:ef:b2:cc:db:70:
                    42:32:a8:e9:39:8d:7a:f0:4b:a4:be:a8:53:dc:d3:
                    0e:f6:9c:3b:a5:f0:8e:0e:e6:9b:3c:47:3f:92:b1:
                    9e:75:3e:6d:7d:eb:44:55:c8:62:49:e4:87:c2:42:
                    c9:80:0b:12:8d:b5:85:a2:f9:90:16:3a:65:3d:f3:
                    ec:5f:ec:75:fb:12:0d:bd:12:d6:92:6c:ad:8c:1f:
                    ba:18:05:6c:a0:b2:7a:19:b9:41:89:d9:1b:d0:8c:
                    6b:fc:b4:47:df:83:99:49:db:a9:be:5b:36:55:4f:
                    28:1b:e2:54:6c:c0:64:49:f4:70:dd:7e:b0:92:ab:
                    49:09:29:21:9f:11:17:84:50:c1:58:83:fb:4e:b2:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8E:EC:04:50:07:F5:CA:D0:85:A4:C8:60:50:7B:1A:F7:68:60:FA
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3133322e302e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.132.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:cc:98:6f:f5:aa:0d:66:ea:8b:38:e8:dd:f3:21:86:a6:0c:
         d8:81:59:d9:18:31:42:e4:98:17:03:5b:e9:b7:ac:58:0d:8b:
         3f:d3:7a:a1:ab:9a:ff:9a:96:cd:13:fa:20:6d:55:20:46:97:
         06:5a:de:77:27:0c:71:42:a4:62:58:8f:48:83:92:37:bc:e6:
         66:f5:f9:0f:2f:c1:4e:df:97:43:07:b1:9d:79:a8:4b:e9:d0:
         4e:08:e0:20:68:0d:57:7d:63:12:06:7a:5e:05:73:7a:34:6f:
         60:91:7c:57:a8:df:4d:4c:6f:ef:2c:cc:45:ff:50:01:da:9e:
         db:fd:a9:c4:73:f3:af:63:74:1e:77:ad:d5:45:db:0d:60:bd:
         19:2c:2c:34:8e:bc:c9:68:fe:f7:9b:c5:6b:18:0b:60:7f:a6:
         31:f6:09:09:d1:6f:cb:0b:30:95:0b:1c:91:dc:48:3c:68:49:
         17:27:83:79:a8:fe:05:65:33:e2:b0:38:30:c9:e2:42:e6:05:
         fc:a8:2c:d3:4a:6c:bf:d0:97:95:f4:c8:47:1b:2f:2b:85:5c:
         69:06:b1:4d:00:25:a5:ac:c6:16:61:a6:37:92:ee:b2:1d:ef:
         bf:3b:f2:57:0f:40:c6:5a:ca:2b:d7:44:74:b5:c0:82:c5:56:
         1c:be:e3:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org