Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
File:                     39322e3131382e36302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          LnOUd2fu0XttNJk6DWBSNY7HqILwbTyhL58qzSQ4Sng=
Subject key identifier:   3A:0B:BA:C5:B6:2D:1A:60:11:1D:02:69:DA:C5:23:8F:9B:C3:DE:C8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       136C9E1CC24BB181545085D035113C0184D63B32
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:58:01 +0000
ROA not before:           Fri 03 Mar 2023 15:53:01 +0000
ROA not after:            Fri 01 Mar 2024 15:58:01 +0000
asID:                     0
IP address blocks:        92.118.60.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6c:9e:1c:c2:4b:b1:81:54:50:85:d0:35:11:3c:01:84:d6:3b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:53:01 2023 GMT
            Not After : Mar  1 15:58:01 2024 GMT
        Subject: CN=3A0BBAC5B62D1A60111D0269DAC5238F9BC3DEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:9d:19:1d:e5:3b:7c:b9:b1:77:ee:fe:f6:
                    83:6c:ca:6f:08:5f:53:60:cc:b8:c7:75:d3:ca:34:
                    d7:80:dd:02:8f:db:12:ed:6d:f5:7a:e7:3d:55:d5:
                    ea:d3:a1:b0:ae:05:07:7f:84:07:0d:be:6b:6f:63:
                    ca:cd:4b:4e:63:3a:73:e9:26:ff:bd:a6:10:31:d6:
                    01:bb:ff:de:c0:ca:a0:5a:8b:ba:80:ef:a5:51:7d:
                    f0:5e:90:d2:8f:24:39:39:5b:bd:4f:db:4b:b0:83:
                    d2:8f:6e:58:ab:c7:e1:47:c3:80:d8:0c:79:8d:46:
                    18:14:f8:61:0e:3f:91:2b:8d:60:1c:a7:d9:b5:d8:
                    51:ee:a1:23:15:8b:e4:08:b6:b6:93:5d:15:e2:fd:
                    b4:e1:43:a7:72:01:d0:73:6d:c3:92:0d:b8:43:d6:
                    dd:ba:22:87:b5:71:32:1a:f6:b4:92:f3:a7:4c:99:
                    c9:8d:1c:3c:dc:44:71:5f:cf:27:99:2d:cc:4c:5c:
                    2d:aa:cb:1b:3f:96:00:70:fb:ac:b3:82:6c:8f:c4:
                    ff:89:d1:77:84:3f:22:ca:bb:62:b3:f8:1f:5a:21:
                    e0:e8:b2:3e:98:68:4e:84:e3:a7:e2:59:ad:c9:6e:
                    c4:08:0d:8b:f9:c9:79:c7:3c:60:89:3e:65:49:85:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0B:BA:C5:B6:2D:1A:60:11:1D:02:69:DA:C5:23:8F:9B:C3:DE:C8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36302e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:a4:3a:3b:b8:76:48:7e:71:40:bf:43:f8:38:73:c4:75:
         2a:e0:55:aa:8c:14:c6:dd:73:7f:ae:68:7e:ec:33:af:b7:72:
         9c:e2:25:00:3b:9c:24:84:c1:de:e1:c4:6e:f3:7c:18:28:f1:
         32:6b:e0:32:87:05:ce:a7:06:89:6e:ec:f7:e7:68:5d:f6:b0:
         41:30:d6:60:2e:c8:3e:ea:fe:8e:cd:23:62:2e:78:55:17:34:
         33:70:62:bd:7e:07:13:8b:db:0e:ce:d8:16:7e:90:59:fd:7b:
         c8:b9:af:c5:8d:4b:78:b6:1d:06:cf:3b:4e:2a:a0:af:00:09:
         03:67:9c:33:e0:c3:73:ea:d7:04:61:69:06:40:cd:60:3d:d9:
         93:9b:17:5c:c5:43:15:c1:fe:b7:3d:b4:95:d3:d7:14:77:c0:
         5b:20:7e:6c:bd:e0:a0:b4:74:35:4b:eb:63:9f:e7:a0:b1:60:
         6e:5c:6f:07:76:78:33:0f:0c:85:1d:73:b5:fa:39:87:57:fe:
         0e:20:3b:fb:c7:50:19:18:c8:d8:0a:be:c6:3a:a6:0b:39:bf:
         c1:e1:71:72:d5:9e:45:7b:57:c3:03:de:dc:70:9f:86:44:d0:
         40:23:d0:cf:6f:70:b2:b2:89:e7:54:3e:95:4b:19:a2:d8:66:
         72:dd:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org