Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa
File:                     3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier:          rmrROZKJIr9VbCEUROG74/KuU5heOnLsUSebZxMwL7E=
Subject key identifier:   AE:83:85:32:ED:80:23:C8:7F:7F:72:16:F2:67:3C:7A:2F:E2:EB:AC
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6E66AFB536BBC909D0DDA75A7844DA9D55133799
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa
Signing time:             Sat 22 Oct 2022 04:33:34 +0000
ROA not before:           Sat 22 Oct 2022 04:28:34 +0000
ROA not after:            Sat 21 Oct 2023 04:33:34 +0000
asID:                     131199
IP address blocks:        192.166.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:66:af:b5:36:bb:c9:09:d0:dd:a7:5a:78:44:da:9d:55:13:37:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:34 2022 GMT
            Not After : Oct 21 04:33:34 2023 GMT
        Subject: CN=AE838532ED8023C87F7F7216F2673C7A2FE2EBAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:d7:cf:a9:4e:00:0a:d1:fa:b6:b6:30:53:
                    fd:a0:4e:58:c9:9f:58:3d:c1:5e:8e:a1:c1:e6:a7:
                    af:72:ab:2b:aa:61:a9:c0:ac:8c:34:6d:0e:91:cf:
                    70:23:78:b2:23:8d:90:c0:01:94:c5:13:44:18:a4:
                    03:ec:0b:86:45:d6:c4:d2:6b:5a:f7:3d:42:fc:3b:
                    00:31:fe:1b:40:b8:29:4f:5f:12:45:d2:3e:80:e3:
                    60:73:43:bf:4e:a9:d4:c0:ba:88:51:f0:e4:5d:28:
                    49:25:ae:73:4d:19:f3:77:28:23:2e:86:9f:ff:5d:
                    dd:0b:bf:fb:7b:d3:98:71:bd:53:49:49:84:19:bd:
                    35:dd:50:b3:20:a8:ac:26:71:0f:80:9e:87:c1:48:
                    28:1f:b7:11:8b:05:af:6c:1d:0a:59:9b:e2:f6:3b:
                    07:88:f9:31:74:c2:d0:83:fa:3a:6b:30:ff:4d:f0:
                    0c:00:da:c8:e0:a6:21:7e:35:b9:8c:64:db:c6:28:
                    ce:78:6a:cf:a9:0c:13:0b:d3:cf:10:19:44:5a:06:
                    66:1f:1f:de:18:a1:4e:31:96:27:f2:ae:31:78:db:
                    80:4a:e3:8d:f0:4b:fe:d4:20:b8:a3:e1:2b:46:52:
                    2a:38:e8:61:bc:f1:c7:97:0b:77:f7:54:aa:03:27:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:83:85:32:ED:80:23:C8:7F:7F:72:16:F2:67:3C:7A:2F:E2:EB:AC
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:a8:b3:26:1c:3e:d3:e0:30:1c:68:fa:ba:03:5d:ad:9d:
         85:b2:65:8a:e1:69:50:02:2c:fe:19:1c:43:20:81:8f:a5:6b:
         57:7e:ce:0c:9f:4d:51:48:d5:a6:55:76:d4:28:10:4a:7a:40:
         72:13:7e:93:cc:cc:2c:60:00:0d:7d:7c:45:a7:3b:10:e6:97:
         61:92:a5:12:7b:6f:92:b7:99:5a:c4:69:2e:98:9d:38:a0:8a:
         c5:5c:ff:ff:b9:87:8d:aa:c5:8c:d7:ae:f0:e6:2f:8c:f8:52:
         52:31:d6:07:58:9a:16:ce:a8:08:bf:41:56:f9:9a:00:b3:30:
         b4:9f:43:b9:07:ad:d9:88:55:7f:2b:69:bf:58:65:f4:84:fd:
         c2:d5:87:3e:40:f4:83:3f:75:60:ca:8c:31:4c:4a:f5:7f:0b:
         f7:cd:66:cf:7e:42:57:ac:84:20:1c:53:10:07:31:a3:bc:ed:
         c8:09:e3:cd:41:1b:bd:59:09:79:56:c5:b5:f9:8b:c6:31:c7:
         36:ce:aa:0f:58:fc:0b:e5:5b:31:16:3b:3b:58:7b:db:73:28:
         e0:6f:e1:c6:01:3c:09:50:69:e4:7b:74:2f:f4:69:9b:4b:69:
         d6:10:ac:76:ba:08:0c:62:f7:5c:4b:91:6b:5f:f0:65:c1:29:
         5f:6e:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org