Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3137382e3231322e33332e302f32342d3234203d3e2030.roa
File:                     3137382e3231322e33332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          uScBFAbDQ4vGNy9hE2r08X9V1+iZeEO9BGuLHEOQ45M=
Subject key identifier:   94:8F:7E:51:25:6D:24:EB:6F:FE:EE:3C:BF:F5:3F:3A:C2:A7:0D:D8
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       7597537DA0FDC8D785D2EC4BDB03F670A8899E80
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3137382e3231322e33332e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:05:33 +0000
ROA not before:           Fri 03 Mar 2023 16:00:33 +0000
ROA not after:            Fri 01 Mar 2024 16:05:33 +0000
asID:                     0
IP address blocks:        178.212.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:97:53:7d:a0:fd:c8:d7:85:d2:ec:4b:db:03:f6:70:a8:89:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:00:33 2023 GMT
            Not After : Mar  1 16:05:33 2024 GMT
        Subject: CN=948F7E51256D24EB6FFEEE3CBFF53F3AC2A70DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:20:a4:b6:06:4c:e7:60:48:bd:68:ec:7c:
                    a7:3a:52:8d:d4:9b:00:7e:20:81:5f:a8:75:09:08:
                    b6:9a:28:a8:12:97:12:d3:b7:43:f6:fb:fe:f0:55:
                    6d:b4:06:67:2a:cb:bc:8f:a4:2d:07:91:f1:86:2a:
                    ed:16:78:e5:18:a4:36:0d:d3:07:8b:34:ce:4d:8b:
                    24:a5:7c:10:0f:f5:3f:c2:e2:98:eb:5d:38:48:f5:
                    b2:21:33:a6:15:5e:92:17:30:a5:70:6f:f2:99:5c:
                    78:ee:8a:9a:7e:5b:76:cc:c8:58:ac:b3:19:36:05:
                    d2:90:6b:a5:42:43:86:53:87:1a:59:95:70:ae:42:
                    03:6d:03:9d:98:92:90:dc:e1:82:c5:75:77:98:4a:
                    c1:c2:d8:00:77:5c:a7:ee:5d:17:cc:f0:a3:21:a9:
                    50:cc:2e:c6:58:7a:d0:ac:5b:d4:a1:70:b4:0e:c4:
                    6c:94:3f:00:c0:0d:ee:ed:46:a8:de:fa:ce:2e:bf:
                    56:04:94:f1:71:9a:30:51:a4:e8:63:27:cc:64:7f:
                    b7:c1:6e:bd:21:e4:ff:0a:57:34:a1:c5:10:d7:68:
                    25:70:d3:c7:78:8c:a8:8f:50:9c:cd:ad:3d:7b:53:
                    37:0b:82:60:43:d5:af:9d:f8:09:c8:e3:e6:07:d4:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:7E:51:25:6D:24:EB:6F:FE:EE:3C:BF:F5:3F:3A:C2:A7:0D:D8
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3137382e3231322e33332e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:b2:a3:c5:ee:2b:f2:0c:a6:1f:57:60:99:1f:85:f5:3e:
         fa:ef:d8:6e:70:0c:06:84:07:ea:4d:3f:93:62:eb:60:e6:47:
         a0:88:f2:8d:ad:49:35:89:db:53:f4:61:14:ec:5e:0d:68:67:
         42:38:2d:2a:ac:c5:29:19:15:15:94:28:43:8a:d2:2d:8d:29:
         ac:c5:6e:6a:13:7a:29:db:61:40:cf:50:4b:5b:b2:87:d4:f3:
         0a:b2:02:57:c3:40:0a:3b:eb:ce:1d:ab:4b:81:50:76:2f:cf:
         9d:e8:38:65:ae:b9:a0:38:63:4e:dd:3e:5c:60:f3:02:46:45:
         64:5f:8a:6b:02:9d:2e:c8:b0:1b:37:9b:f6:a0:55:92:8f:db:
         0f:0b:8d:12:55:d6:22:14:f7:35:2f:de:8f:a5:3d:74:f9:48:
         cf:3e:1c:b3:08:8e:70:c9:46:11:9f:57:a1:d6:bb:93:c5:98:
         17:d5:9b:52:01:18:99:a5:a0:1a:8c:e7:1e:84:6f:9a:92:89:
         b8:53:6e:59:d5:6c:97:65:55:22:31:cf:4d:c2:e8:ee:a0:51:
         c7:ad:47:5c:6d:d1:c9:d6:9d:aa:57:1d:f2:07:27:1a:0d:c0:
         a7:fc:97:aa:de:15:71:23:92:9a:e6:ad:10:32:0c:e0:e5:f5:
         cd:6f:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org