Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3133302e302f32342d3234203d3e2030.roa
File:                     3139332e3138372e3133302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          Ki4zO/KGwv0HhBVchOb9ODQpqGCF0GAJqrDKqCafLl0=
Subject key identifier:   BE:8D:74:66:62:96:11:BE:24:7D:14:B7:C1:2E:BC:29:80:1D:4C:36
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       4428DB1E7445DB5A04775E62D8B546BA96CD8371
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3133302e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:51:57 +0000
ROA not before:           Fri 03 Mar 2023 15:46:57 +0000
ROA not after:            Fri 01 Mar 2024 15:51:57 +0000
asID:                     0
IP address blocks:        193.187.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:28:db:1e:74:45:db:5a:04:77:5e:62:d8:b5:46:ba:96:cd:83:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:46:57 2023 GMT
            Not After : Mar  1 15:51:57 2024 GMT
        Subject: CN=BE8D7466629611BE247D14B7C12EBC29801D4C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:83:e2:dc:52:9d:e7:a8:b8:59:18:40:fd:
                    58:fc:84:b4:9c:90:00:2a:72:a2:9a:94:2e:fe:fe:
                    20:ff:b2:ee:ba:ee:b1:d7:bd:a6:4c:05:e4:a4:2e:
                    ed:4d:c3:c1:03:a9:b9:d0:01:56:b6:f2:cb:20:11:
                    69:5e:6b:d8:e3:12:7a:2c:9f:3d:96:45:28:97:7b:
                    29:71:fc:22:c8:dc:22:cd:dc:07:35:2b:5e:2d:93:
                    01:06:cf:6e:00:9e:2a:ab:91:58:c1:ad:d4:7c:2e:
                    fb:02:75:31:b7:e3:6a:09:eb:83:cc:0b:bc:72:ff:
                    2d:47:dc:8f:81:4b:00:8b:36:8b:4e:b9:13:2c:e6:
                    52:03:77:41:72:33:0a:9b:15:18:54:ba:63:61:00:
                    cd:bc:8e:56:2a:ae:e3:53:1a:e0:df:5f:74:a4:1a:
                    ef:dc:0e:b1:4e:57:cf:84:f7:d6:af:08:79:20:3d:
                    cb:a6:7b:a2:e7:f9:9c:49:61:b5:5d:27:79:66:3f:
                    2a:b2:56:e1:65:70:90:28:53:bc:b4:0f:92:1a:47:
                    b7:c7:4b:41:8f:d9:29:62:08:34:d7:ee:94:e5:17:
                    26:48:5d:3a:96:92:c5:b3:35:e2:ba:ba:75:f5:d6:
                    24:f5:ba:31:02:19:e2:48:79:fa:ba:a0:6c:48:f0:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8D:74:66:62:96:11:BE:24:7D:14:B7:C1:2E:BC:29:80:1D:4C:36
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3133302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:cf:a1:f7:da:92:ce:98:fe:17:8b:14:2b:f8:77:0e:8d:36:
         8b:ad:f1:d3:23:10:9f:18:d1:af:11:c5:ca:36:01:3d:6c:69:
         34:63:f6:8a:09:fe:f7:b5:7e:0e:57:07:55:73:11:da:9b:cc:
         5e:11:89:93:48:a4:cf:42:33:14:72:c0:68:68:f6:c5:6c:22:
         ea:42:6a:bc:1a:ad:75:63:38:84:0e:02:89:d1:1c:c4:33:12:
         26:48:90:4c:5a:45:80:33:45:bc:e6:0f:0e:22:14:0b:e2:ce:
         46:5c:8b:19:47:93:c0:a3:f5:bc:db:5d:3b:4b:6f:a3:8b:13:
         ce:d0:04:8b:8f:0e:6e:3c:cb:50:61:e3:bc:dd:17:dc:88:4f:
         65:aa:88:4f:af:da:1b:2c:c3:56:93:59:10:d0:dc:bb:9c:9e:
         2f:5a:97:15:fc:d5:4f:ee:92:1e:c3:0b:7e:95:e3:6c:5b:23:
         84:64:70:0d:35:e9:9e:59:16:56:bc:2a:23:60:7f:8b:59:4e:
         4d:e6:e4:35:68:5e:72:31:60:b8:9f:24:c7:7a:ad:6f:99:9c:
         4b:2b:24:fb:24:4a:55:22:ba:26:f2:1f:d6:fb:05:69:7c:05:
         f8:8f:de:df:93:0d:8f:9e:01:6e:7a:8d:4b:15:84:aa:3f:99:
         d2:35:5d:67
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIURCjbHnRF21oEd15i2LVGupbNg3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAzMDMxNTQ2NTdaFw0yNDAzMDExNTUxNTdaMDMxMTAvBgNV
BAMTKEJFOEQ3NDY2NjI5NjExQkUyNDdEMTRCN0MxMkVCQzI5ODAxRDRDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydoPi3FKd56i4WRhA/Vj8hLSc
kAAqcqKalC7+/iD/su667rHXvaZMBeSkLu1Nw8EDqbnQAVa28ssgEWlea9jjEnos
nz2WRSiXeylx/CLI3CLN3Ac1K14tkwEGz24AniqrkVjBrdR8LvsCdTG342oJ64PM
C7xy/y1H3I+BSwCLNotOuRMs5lIDd0FyMwqbFRhUumNhAM28jlYqruNTGuDfX3Sk
Gu/cDrFOV8+E99avCHkgPcume6Ln+ZxJYbVdJ3lmPyqyVuFlcJAoU7y0D5IaR7fH
S0GP2SliCDTX7pTlFyZIXTqWksWzNeK6unX11iT1ujECGeJIefq6oGxI8IuNAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUvo10ZmKWEb4kfRS3wS68KYAdTDYwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4Zm
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM5MzMyZTMxMzgzNzJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADBu4IwDQYJKoZIhvcNAQELBQADggEBAKvPoffaks6Y/heL
FCv4dw6NNout8dMjEJ8Y0a8Rxco2AT1saTRj9ooJ/ve1fg5XB1VzEdqbzF4RiZNI
pM9CMxRywGho9sVsIupCarwarXVjOIQOAonRHMQzEiZIkExaRYAzRbzmDw4iFAvi
zkZcixlHk8Cj9bzbXTtLb6OLE87QBIuPDm48y1Bh47zdF9yIT2WqiE+v2hssw1aT
WRDQ3Lucni9alxX81U/ukh7DC36V42xbI4RkcA016Z5ZFla8KiNgf4tZTk3m5DVo
XnIxYLifJMd6rW+ZnEsrJPskSlUiuibyH9b7BWl8BfiP3t+TDY+eAW56jUsVhKo/
mdI1XWc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org