Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e3138302e3137382e302f32332d3234203d3e2030.roa
File:                     3139342e3138302e3137382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          dkUY7JkhPNlYs0dyy6n9bI3MPIQSZkO5Nrhuxb33FF0=
Subject key identifier:   64:B1:3B:BE:59:B3:4F:B8:58:CB:F6:7E:93:63:A3:34:8F:20:D8:2C
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       7E6350D9B4A9EFD61DE903F66CA693FED000ED73
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e3138302e3137382e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:07:39 +0000
ROA not before:           Fri 03 Mar 2023 16:02:39 +0000
ROA not after:            Fri 01 Mar 2024 16:07:39 +0000
asID:                     0
IP address blocks:        194.180.178.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:63:50:d9:b4:a9:ef:d6:1d:e9:03:f6:6c:a6:93:fe:d0:00:ed:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:02:39 2023 GMT
            Not After : Mar  1 16:07:39 2024 GMT
        Subject: CN=64B13BBE59B34FB858CBF67E9363A3348F20D82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:ca:b0:57:af:a8:a0:27:70:e0:83:d7:ca:
                    e7:5d:a9:91:f5:fa:2a:53:f1:d4:97:b2:67:c9:08:
                    0c:19:1a:31:86:c0:7f:64:86:06:46:fc:64:7a:5c:
                    93:05:0d:47:ed:05:22:1d:f0:b8:b5:55:fe:63:43:
                    18:51:7e:c4:eb:c7:6c:df:4a:2f:ec:a8:65:30:a3:
                    28:f0:90:8e:1b:3a:c8:a0:63:82:2e:dd:e3:58:c4:
                    4d:9b:9c:a1:b5:0d:de:3b:f6:fc:de:10:8f:7d:79:
                    a3:de:f4:c6:1d:3a:40:17:79:04:3e:4c:d7:fe:b9:
                    19:25:6a:9a:45:d1:8f:72:d4:ac:44:b8:02:ba:48:
                    d6:f5:c6:55:ac:ec:2b:a5:6f:81:41:37:a1:bf:a4:
                    de:d2:2c:96:09:38:af:99:cb:c8:33:70:cb:be:a0:
                    7e:cf:65:8a:97:9a:4c:4d:84:91:8e:61:13:fa:ab:
                    27:c9:7e:ff:34:40:5f:e2:95:ef:92:27:b3:0e:c4:
                    c4:93:73:80:75:cd:06:02:70:93:97:11:2e:5d:73:
                    8b:b4:4c:e3:0b:4e:34:75:b6:81:a5:cc:b7:bd:70:
                    ca:f7:ed:e1:44:08:c9:1d:fd:97:3b:a1:13:db:f5:
                    54:89:53:3c:57:2f:f2:0c:0a:ff:0f:ec:04:a9:ac:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B1:3B:BE:59:B3:4F:B8:58:CB:F6:7E:93:63:A3:34:8F:20:D8:2C
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e3138302e3137382e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:43:e5:91:5d:fc:43:d6:10:4e:7a:53:f2:00:7f:71:5a:80:
         19:4d:f1:dc:01:d5:cf:76:d1:97:05:6a:7b:13:66:58:5a:b6:
         ae:e3:26:bc:3b:47:55:42:26:e6:fc:c5:16:79:54:36:15:70:
         e0:cf:c9:8a:92:a5:66:92:da:01:26:ba:e3:30:1c:cb:c4:63:
         c3:3a:6b:a4:6a:ea:2b:8c:c5:db:93:1a:4d:a5:9f:0f:2e:84:
         24:23:cb:f0:ce:cb:aa:44:88:6a:e4:bc:af:c0:42:42:49:f0:
         b6:b6:0e:91:81:cc:ba:1c:35:ec:dd:1f:6b:b5:ee:c4:cb:11:
         19:76:73:22:95:1c:c6:a2:bf:ed:03:86:b6:62:77:19:b5:ba:
         09:5f:29:14:37:64:a3:c9:ff:17:7f:a9:ca:53:92:53:22:19:
         bd:d9:28:3e:e4:21:82:be:8b:fd:d6:ce:6e:2a:fa:c1:a2:40:
         38:84:80:d8:c1:09:7a:45:b3:6b:ff:79:2d:62:24:c4:ba:64:
         81:c1:f5:ff:39:cd:a8:7e:7d:98:e9:6a:65:c6:bd:42:21:cb:
         16:38:42:1c:e9:07:6e:b8:a7:33:f6:8c:7b:80:69:88:3f:3b:
         4c:89:01:0a:93:0a:fe:85:4a:d5:b9:41:d4:40:28:5b:5d:5d:
         58:e9:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org