Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa
File:                     3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          bb0kRv95chyC3NM7/uumZkBoCHXe4hybHcxhdVH6bxc=
Subject key identifier:   B0:AC:ED:87:8E:ED:15:2C:97:65:3A:1D:5C:DB:F1:A9:91:B9:AF:F7
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3464E7181D0A071CC63AC40FF0C04CE58A837FB1
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     147049
IP address blocks:        192.166.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:64:e7:18:1d:0a:07:1c:c6:3a:c4:0f:f0:c0:4c:e5:8a:83:7f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=B0ACED878EED152C97653A1D5CDBF1A991B9AFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:18:04:33:1c:cf:0f:c9:0f:d5:43:95:c9:
                    a5:07:51:bd:3b:a2:92:2d:d9:f0:0f:09:19:55:ee:
                    24:0c:cf:c9:f7:dd:7d:b7:97:aa:c6:e0:d8:9b:16:
                    b4:f9:5f:97:61:40:14:bc:0b:34:c0:b7:2b:09:0f:
                    42:b5:56:4f:e2:e3:00:c4:3e:00:d7:a1:4e:45:7b:
                    e9:53:b2:9a:7b:ac:ab:f7:1d:91:d2:1f:22:1b:a8:
                    87:ea:f6:52:92:d9:b8:e6:9b:df:7d:43:9e:f0:62:
                    18:10:67:cc:02:92:fd:a0:90:df:cd:72:72:5e:65:
                    87:70:42:b8:ef:1e:df:4c:56:29:c4:2b:15:a6:8d:
                    57:3d:a7:0f:17:a4:48:19:50:34:9a:c6:1a:2a:f6:
                    f0:6e:1e:aa:02:c7:e5:9b:7d:05:a3:47:1f:b9:8b:
                    21:cf:5a:a3:2d:43:08:24:bb:13:4a:da:58:78:75:
                    76:9e:b3:26:95:69:bc:9e:11:8a:e2:7f:83:ef:8e:
                    31:18:6c:4d:92:f7:05:c7:dd:18:96:8e:c3:5f:e9:
                    72:33:2d:0a:8a:11:b9:24:d1:c7:11:22:bb:95:37:
                    1f:8c:78:23:fd:f3:50:ab:f7:df:44:c1:87:4d:7f:
                    88:ce:3c:3e:07:93:05:5e:32:00:3b:7b:9a:ac:ef:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:ED:87:8E:ED:15:2C:97:65:3A:1D:5C:DB:F1:A9:91:B9:AF:F7
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:2d:37:f2:68:e3:e0:01:dd:8c:41:5c:ca:da:b8:cb:7e:7c:
         ec:1b:3f:bc:6f:d9:42:d9:46:f7:e0:2d:36:58:f0:76:c5:a4:
         4c:19:f8:58:85:c8:2d:7f:1b:7f:68:7f:b8:1f:38:d2:98:22:
         18:c2:19:3f:e0:8c:00:bb:7c:b9:d8:ee:c7:88:50:ff:33:b2:
         43:92:03:45:ac:fd:56:36:84:b8:25:f3:61:ce:db:fd:4e:65:
         62:5f:ec:2d:c0:5e:7a:08:27:d3:e6:cb:31:05:2f:39:62:1f:
         5b:b0:dc:ae:77:7a:93:53:5c:01:5f:b6:1b:d2:de:7f:e3:fb:
         d4:45:c2:32:18:45:97:69:c8:cd:c7:72:14:81:1c:03:1e:46:
         b1:05:6d:ed:cd:6c:a9:c8:04:5a:13:8d:9d:e5:e1:34:d2:15:
         83:cb:32:62:35:a5:4e:ee:cb:62:6a:a3:13:c1:93:6a:a6:58:
         bb:d9:67:08:0e:7f:7a:4d:97:e4:47:3c:92:bd:a6:25:e3:53:
         0d:25:2f:b1:93:9d:e5:9a:6b:b0:79:48:83:c2:02:bc:67:fc:
         eb:f4:c8:d7:a1:bd:2e:1e:a4:f9:eb:6b:df:ed:37:ce:95:9a:
         e2:9f:4a:e2:15:49:59:78:56:14:53:a2:e0:6f:e1:d2:9e:49:
         0a:16:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org