Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e203631333137.roa
File:                     39312e3139362e36392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          cRzUlruF8Vt5Th476/2IrUQae0OLp/kl8CmIHCzlask=
Subject key identifier:   5F:5A:51:51:31:EE:AE:B4:7C:B4:38:CC:6E:57:6A:2F:2A:B6:E1:9A
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       1367421E6B97D99D9253FC88F2999CD3B7F20657
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:59 +0000
ROA not before:           Sat 22 Oct 2022 04:28:59 +0000
ROA not after:            Sat 21 Oct 2023 04:33:59 +0000
asID:                     61317
IP address blocks:        91.196.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:67:42:1e:6b:97:d9:9d:92:53:fc:88:f2:99:9c:d3:b7:f2:06:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:28:59 2022 GMT
            Not After : Oct 21 04:33:59 2023 GMT
        Subject: CN=5F5A515131EEAEB47CB438CC6E576A2F2AB6E19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:7c:62:8e:83:66:6b:82:8d:15:78:2b:9f:
                    22:e5:01:ae:e1:c3:ce:99:17:65:d9:51:e5:bc:f7:
                    68:49:9b:09:37:57:72:c5:40:34:a0:e7:29:ef:1d:
                    f4:99:a1:9b:27:57:10:79:32:25:ed:91:df:d9:ad:
                    c0:68:1c:64:a7:3a:03:a1:27:9a:03:d1:61:1e:b3:
                    70:ef:28:ff:ed:6f:f2:2b:11:b4:27:fe:b4:20:db:
                    5c:29:ba:8e:c4:eb:b6:1f:8b:47:79:8d:99:49:81:
                    18:13:ab:41:89:6d:d4:35:ce:07:23:f0:09:46:59:
                    35:3a:f7:4e:f5:d9:68:93:31:c9:bb:32:0b:c8:55:
                    98:52:a4:c9:26:bb:b5:44:fc:93:55:7d:d4:e5:a4:
                    c5:57:a0:54:b3:a7:67:07:02:af:ff:1d:ec:49:7a:
                    ca:55:6a:4e:d6:ed:69:e7:4a:5f:69:66:23:cc:04:
                    4b:b0:86:c8:a8:cd:af:9d:0b:96:cc:8d:de:e8:c9:
                    84:eb:ff:f2:85:72:76:71:a8:df:ca:c2:44:e4:30:
                    f5:0e:b1:81:05:cc:d0:77:35:79:1c:99:86:65:03:
                    cb:a9:f9:60:17:fd:6c:36:5e:20:c5:8f:3f:e2:80:
                    0a:13:8a:85:d1:84:f9:fd:64:19:22:31:b5:6d:be:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:51:51:31:EE:AE:B4:7C:B4:38:CC:6E:57:6A:2F:2A:B6:E1:9A
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:86:b5:5f:a2:00:5e:7d:1e:b2:8e:1f:67:17:dd:e2:be:
         00:3d:ca:64:35:14:de:1f:8e:74:ed:ba:18:03:3b:61:9c:e7:
         80:55:46:77:b0:e6:10:69:38:c2:92:15:ed:40:95:d2:73:9a:
         84:ec:40:cc:ef:e7:dc:a0:91:88:3f:e9:3b:0b:5a:ae:ab:60:
         5c:31:3c:86:7c:2a:67:bd:34:87:88:e9:f9:5a:9e:7d:fa:f9:
         34:90:dc:f5:f5:6a:34:73:3e:14:d0:21:32:4d:96:b4:60:d6:
         3e:87:75:7d:c5:60:7f:0d:bd:31:bd:8e:f3:af:9b:44:f8:e0:
         00:4e:3a:64:fe:d6:82:4f:50:e3:f9:c6:66:d0:f1:f8:5c:7e:
         14:be:16:66:b1:fb:59:e1:be:ca:1e:c8:1d:f7:6f:a9:3e:bf:
         20:c7:2f:1b:41:3a:11:a3:13:53:04:15:e0:9d:fa:9d:47:cf:
         98:a7:6e:f9:93:fa:f0:9e:17:29:28:93:0b:7a:f1:df:a3:37:
         f1:62:69:98:78:53:d8:55:9d:e4:7b:02:b0:68:2a:42:78:78:
         49:09:19:9a:57:c4:f3:34:03:0e:59:67:6c:47:9c:bb:40:c4:
         ed:c9:b5:8d:c6:9f:14:56:82:ac:57:5e:ec:73:93:e1:e4:5a:
         b1:21:fa:00
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUE2dCHmuX2Z2SU/yI8pmc07fyBlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI4NTlaFw0yMzEwMjEwNDMzNTlaMDMxMTAvBgNV
BAMTKDVGNUE1MTUxMzFFRUFFQjQ3Q0I0MzhDQzZFNTc2QTJGMkFCNkUxOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69nxijoNma4KNFXgrnyLlAa7h
w86ZF2XZUeW892hJmwk3V3LFQDSg5ynvHfSZoZsnVxB5MiXtkd/ZrcBoHGSnOgOh
J5oD0WEes3DvKP/tb/IrEbQn/rQg21wpuo7E67Yfi0d5jZlJgRgTq0GJbdQ1zgcj
8AlGWTU690712WiTMcm7MgvIVZhSpMkmu7VE/JNVfdTlpMVXoFSzp2cHAq//HexJ
espVak7W7WnnSl9pZiPMBEuwhsioza+dC5bMjd7oyYTr//KFcnZxqN/KwkTkMPUO
sYEFzNB3NXkcmYZlA8up+WAX/Ww2XiDFjz/igAoTioXRhPn9ZBkiMbVtvkovAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUX1pRUTHurrR8tDjMbldqLyq24ZowHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zOTMxMmUzMTM5MzYyZTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAW8RFMA0GCSqGSIb3DQEBCwUAA4IBAQAf94a1X6IA
Xn0eso4fZxfd4r4APcpkNRTeH4507boYAzthnOeAVUZ3sOYQaTjCkhXtQJXSc5qE
7EDM7+fcoJGIP+k7C1quq2BcMTyGfCpnvTSHiOn5Wp59+vk0kNz19Wo0cz4U0CEy
TZa0YNY+h3V9xWB/Db0xvY7zr5tE+OAATjpk/taCT1Dj+cZm0PH4XH4UvhZmsftZ
4b7KHsgd92+pPr8gxy8bQToRoxNTBBXgnfqdR8+Yp275k/rwnhcpKJMLevHfozfx
YmmYeFPYVZ3kewKwaCpCeHhJCRmaV8TzNAMOWWdsR5y7QMTtybWNxp8UVoKsV17s
c5Ph5FqxIfoA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org