Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31322e302f32332d3234203d3e2030.roa
File:                     3139332e3230332e31322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          ZzWDW5+MZSfunm9ROCccajButVQ9fPGfpysDtakPGdE=
Subject key identifier:   EE:6A:1D:05:B5:60:9D:D4:0E:98:22:0D:9F:0C:21:50:CE:D2:BB:D2
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       53DFC11B90DB0E0C6078B12314E7F7C8C8F7B0D6
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31322e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:47:44 +0000
ROA not before:           Fri 03 Mar 2023 15:42:44 +0000
ROA not after:            Fri 01 Mar 2024 15:47:44 +0000
asID:                     0
IP address blocks:        193.203.12.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:df:c1:1b:90:db:0e:0c:60:78:b1:23:14:e7:f7:c8:c8:f7:b0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:42:44 2023 GMT
            Not After : Mar  1 15:47:44 2024 GMT
        Subject: CN=EE6A1D05B5609DD40E98220D9F0C2150CED2BBD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:17:dd:41:2d:a9:4b:4c:d4:12:c1:d4:e1:
                    8a:a9:6f:ec:9c:1a:78:3c:ea:45:7a:27:eb:8d:c6:
                    01:ec:1a:0c:e2:64:de:c6:b2:34:af:57:bc:ab:29:
                    d0:2f:40:31:0a:fb:f7:68:aa:51:e6:10:aa:e0:48:
                    80:3c:e6:b9:9a:7d:91:79:4e:44:5f:11:36:a9:95:
                    e9:89:66:c8:37:1d:ee:d6:c2:7f:10:7d:da:e3:df:
                    5f:ca:99:9a:54:09:c2:6f:49:46:22:6f:ba:b3:f6:
                    d1:9c:43:09:4c:af:8b:3a:ba:05:64:97:f1:f0:da:
                    5b:de:60:84:ed:d4:33:bf:e7:d1:69:44:3f:8c:fa:
                    46:f4:a5:9c:91:d3:b9:61:1b:1d:4d:d3:24:a9:ff:
                    1e:e8:80:ed:13:75:9e:c7:35:d2:24:88:66:ab:cc:
                    70:74:59:af:7b:fc:29:ca:5e:52:86:bd:5f:d5:17:
                    e9:e3:27:50:da:25:1e:0c:34:b8:8c:10:e3:dd:9b:
                    5d:bc:2f:96:39:b4:1c:15:e6:db:4a:63:42:4d:29:
                    d6:d5:4d:9e:b3:da:ee:3e:b3:89:e0:0f:9f:7c:3c:
                    38:0b:80:a4:a2:39:d6:e4:01:d0:da:8f:28:b8:d4:
                    d6:0a:a7:1b:cc:7c:41:b2:0e:3c:6d:61:f4:65:80:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6A:1D:05:B5:60:9D:D4:0E:98:22:0D:9F:0C:21:50:CE:D2:BB:D2
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:14:8e:50:b3:1d:51:8e:19:28:1e:9a:2c:4c:54:91:ad:01:
         13:cc:89:92:37:ab:8c:11:ad:15:e9:85:ef:08:10:0e:f7:62:
         76:e2:42:0b:2e:f9:fa:66:67:26:3c:5d:c5:71:3c:4d:3a:86:
         bf:b3:26:15:ee:0d:1c:b0:f0:5d:4f:5c:e9:da:3b:5d:e1:21:
         84:a4:43:60:f8:7e:2d:47:e0:a7:65:eb:29:d0:fe:91:1b:81:
         c8:c2:41:cc:fc:f4:e6:0e:9f:88:34:98:c7:d3:41:59:1a:83:
         aa:9e:aa:11:76:0b:92:31:58:20:94:bd:35:26:94:a0:56:af:
         7f:ce:27:f6:72:7a:a9:ba:b2:fa:dc:51:32:c3:00:0a:ea:80:
         f0:8c:9e:71:df:c5:5c:45:45:e2:33:b4:b6:da:6e:08:4f:bb:
         9f:67:03:1d:a0:4f:d6:cd:d8:70:92:4e:b9:6f:6f:86:65:94:
         c3:3e:a1:c4:b7:13:3c:e3:1b:bf:d7:cb:82:da:b1:98:ea:b9:
         36:86:02:1c:da:c2:6a:36:d3:0a:e3:1e:76:b0:19:23:c3:74:
         01:1c:59:cd:f8:1a:c4:12:50:f5:d5:a1:9c:bc:50:26:c2:a5:
         d7:33:72:a6:94:73:48:e7:e6:87:80:c0:cd:a8:ea:72:86:e2:
         e2:3e:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org