Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
File:                     3139322e3134352e33362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          N+p4oOqg0MmSFU3sz+l6jlFZkx1yl3iNYVh8H7wekcI=
Subject key identifier:   4A:C1:56:82:D4:69:19:DE:01:60:FE:EB:73:56:F6:02:11:2A:00:71
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       6DD06AC222E366CE324073EEB93FEE40FFF76A6D
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:13:27 +0000
ROA not before:           Fri 03 Mar 2023 16:08:27 +0000
ROA not after:            Fri 01 Mar 2024 16:13:27 +0000
asID:                     0
IP address blocks:        192.145.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d0:6a:c2:22:e3:66:ce:32:40:73:ee:b9:3f:ee:40:ff:f7:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:08:27 2023 GMT
            Not After : Mar  1 16:13:27 2024 GMT
        Subject: CN=4AC15682D46919DE0160FEEB7356F602112A0071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:f3:3e:1a:73:b1:74:98:1c:ae:d7:80:55:
                    ee:7c:a1:02:77:d7:39:f8:32:1d:73:4c:fa:ec:90:
                    3d:79:1c:48:a5:f3:bc:55:6a:c5:8f:16:4b:b2:3a:
                    d7:f6:a8:d8:a8:90:4f:fc:af:59:b3:2e:c8:6e:87:
                    b7:90:9a:67:84:39:26:c9:ca:e6:41:b0:e4:25:87:
                    b6:3f:5a:ac:0e:4b:13:f4:a7:96:88:52:f1:44:5a:
                    65:f5:0d:64:be:3c:6c:6a:6b:a5:bc:45:5f:a2:e9:
                    61:f9:ab:5a:41:3f:39:0b:b5:66:1f:95:59:73:1f:
                    c0:b7:67:37:41:9a:ab:96:bb:8c:6b:6e:90:6e:26:
                    af:fc:19:7f:87:c1:dd:33:f5:f1:ee:5f:65:fe:50:
                    9b:83:fe:de:52:85:e3:e2:0a:1b:e4:04:e7:b7:d8:
                    9b:cb:ec:31:8e:2e:94:d8:f7:bc:fe:90:7c:c8:a4:
                    ab:1e:09:3d:c6:7e:0a:4c:6a:6c:e5:f4:6c:5b:ee:
                    84:54:9a:bf:7f:f3:80:94:5e:0f:92:f5:0b:c9:ee:
                    59:6d:dc:e6:1e:32:7d:e8:ee:a7:8b:2f:58:3a:2a:
                    3f:99:3d:77:66:3f:91:1c:14:87:0c:00:d6:11:fc:
                    0d:40:9c:10:0c:58:7b:8a:76:05:23:73:b7:12:e9:
                    4d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:56:82:D4:69:19:DE:01:60:FE:EB:73:56:F6:02:11:2A:00:71
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:5b:75:6c:cf:55:96:f3:4b:9a:da:bd:94:bf:d1:d9:00:e1:
         d5:4b:bb:4b:b9:56:c8:69:e7:e8:5c:11:b0:fe:0f:8e:9e:87:
         3c:fe:ee:18:e7:b7:08:be:2a:2c:18:d9:f3:aa:52:4c:de:6d:
         5e:f9:93:8a:1c:e6:d6:8d:d4:74:cd:77:6c:ba:70:c5:b7:3b:
         54:66:bb:dc:cf:bb:e0:8e:2f:01:5b:c9:2a:c2:9f:72:ee:79:
         ed:3d:1f:a1:b4:d6:8f:53:0a:93:59:4a:dc:86:fd:2d:53:71:
         02:17:a9:a2:51:a4:9f:dd:58:d3:e3:35:3a:de:a3:0b:da:74:
         70:dd:cf:34:90:95:ed:cd:bf:83:42:8c:52:d4:61:dd:7d:04:
         aa:d3:4c:9c:b8:4d:48:ce:96:94:54:4b:ea:fe:a8:b3:59:f9:
         86:d5:f0:76:ef:31:f3:fe:49:28:ce:93:1a:00:39:f3:f5:db:
         c5:f4:63:01:4f:ce:ba:fc:b7:da:85:37:fb:fe:a3:7d:42:05:
         f0:26:0f:3c:e1:a4:20:bd:f9:15:14:df:29:7f:60:79:56:41:
         d7:eb:ff:33:9b:db:30:cd:28:94:30:41:4c:2d:31:b6:4d:41:
         50:3f:70:9b:ab:f3:44:9e:18:4f:85:88:48:5b:61:8b:3a:0e:
         b7:3c:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org