Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa
File:                     3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          RkppOlhTUKWlmAQwr0LZGMFCxG6mYZJsFJZM3/6RrGg=
Subject key identifier:   9F:78:38:5C:E9:A4:4A:A4:64:13:BC:44:4B:51:FA:6F:E4:EC:AB:D0
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       593BDDFEAA761C5E551B4A0DF8CF148B75C6F9A3
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:46:42 +0000
ROA not before:           Wed 28 Dec 2022 09:41:42 +0000
ROA not after:            Wed 27 Dec 2023 09:46:42 +0000
asID:                     136787
IP address blocks:        193.187.131.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3b:dd:fe:aa:76:1c:5e:55:1b:4a:0d:f8:cf:14:8b:75:c6:f9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 28 09:41:42 2022 GMT
            Not After : Dec 27 09:46:42 2023 GMT
        Subject: CN=9F78385CE9A44AA46413BC444B51FA6FE4ECABD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2f:54:51:b8:ce:8b:b4:d4:7d:fd:3e:cd:75:
                    1d:9a:7b:84:3d:27:ab:51:10:3c:b8:87:5f:bb:36:
                    4f:8c:8f:3b:54:a8:1f:be:9c:de:ad:cf:a2:23:6b:
                    60:99:1e:00:9b:0f:9d:92:c6:25:de:90:9a:ef:8b:
                    82:55:ae:00:7e:cd:1e:48:96:24:12:0d:72:a2:fa:
                    59:6f:c0:aa:cb:49:5e:b0:9d:92:32:44:ef:1e:e7:
                    46:5a:ec:3c:ac:fd:d5:d2:4b:1b:9a:53:16:8f:85:
                    50:de:5c:7b:cd:f5:8b:00:21:61:f2:4f:80:30:9d:
                    a5:b3:ce:64:f2:a8:ab:4f:15:bf:24:4e:fc:60:dc:
                    66:76:7a:d6:08:2b:40:e7:22:98:19:d8:45:2e:0f:
                    4d:cd:29:9e:f4:7c:20:8d:8a:15:f9:38:ec:09:47:
                    63:03:ea:35:a3:07:be:07:10:df:4e:e4:91:41:7b:
                    7a:f7:2c:d6:1c:7b:1a:5f:f7:90:3a:b2:53:d2:a5:
                    3b:d6:5f:49:be:0d:ac:9e:39:36:19:8e:fa:f4:3a:
                    c8:36:43:47:95:66:9d:a7:fa:87:01:b7:91:51:5f:
                    bb:0b:fa:ee:6c:b5:cc:9d:dc:a3:b7:4f:30:ad:c3:
                    64:96:b2:da:03:c7:bc:9d:32:8d:5f:9f:96:d5:46:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:78:38:5C:E9:A4:4A:A4:64:13:BC:44:4B:51:FA:6F:E4:EC:AB:D0
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:e9:93:55:06:00:90:e8:86:6b:bb:d9:c0:f6:23:a6:e8:
         4c:98:cf:ba:4b:cc:be:67:96:cb:d7:a8:15:38:ae:31:10:19:
         5a:19:71:72:00:f8:22:35:00:46:3f:00:3b:6e:d5:37:ad:f6:
         31:94:43:6a:15:1d:1a:02:4c:e6:ed:78:72:3a:7a:31:d9:ea:
         c7:b7:3f:d0:f3:ca:1c:f4:bf:61:34:00:ac:4e:dd:ec:dc:c0:
         80:dc:3e:8f:c6:11:d1:62:d0:65:69:8f:8e:f9:60:64:c5:a2:
         96:2c:5e:17:f3:e2:30:12:71:db:64:06:0c:d6:ef:bf:79:fd:
         60:ee:94:e0:7d:5d:33:66:1d:37:fe:33:6f:dd:86:d7:70:c4:
         00:33:dc:38:db:63:80:95:66:f0:86:fd:bd:76:c7:27:eb:3d:
         91:d6:f6:32:68:d9:ca:79:24:dc:23:34:97:a0:c3:a6:09:24:
         53:08:f2:70:68:97:f6:a4:97:c8:97:2b:76:2f:8a:2a:ef:6e:
         4b:82:16:59:c8:28:d3:46:2e:af:7a:1a:48:5d:26:7a:4d:7a:
         a0:4a:ab:9e:29:d7:c1:7c:08:86:88:68:d5:9b:4a:57:a2:79:
         d4:ec:14:ab:f5:f7:91:b4:d1:1c:92:ef:52:48:dc:81:37:48:
         85:7f:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org