Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e20333938343634.roa
File:                     3139332e3230332e31352e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          vP9IiGjjbnFL39dbQFjfYyuDMRjpvOaGSctSAa/Bcts=
Subject key identifier:   38:1B:EA:42:0F:27:14:B9:25:19:B6:C6:A8:0B:C0:B6:7D:B1:CF:DF
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       64D3D06B421023DE5AB3AB4379F79A9603F4186C
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:41:06 +0000
ROA not before:           Tue 28 Jun 2022 04:36:06 +0000
ROA not after:            Tue 27 Jun 2023 04:41:06 +0000
asID:                     398464
IP address blocks:        193.203.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d3:d0:6b:42:10:23:de:5a:b3:ab:43:79:f7:9a:96:03:f4:18:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:06 2022 GMT
            Not After : Jun 27 04:41:06 2023 GMT
        Subject: CN=381BEA420F2714B92519B6C6A80BC0B67DB1CFDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:10:2e:a0:36:13:1a:ae:85:e7:dc:5b:3c:
                    5a:65:3f:16:68:5d:e5:69:fb:53:71:06:25:77:44:
                    b0:40:1b:61:8d:c2:7a:7c:6f:52:0d:e1:cb:ec:63:
                    75:ef:df:a2:bb:7e:7f:51:55:17:2b:81:43:a2:aa:
                    de:6f:f7:66:7b:54:c6:0f:af:9a:dd:fc:63:2b:9b:
                    7b:4a:31:ab:88:a8:62:a4:14:da:36:4b:c6:d5:3f:
                    3b:a9:92:90:0a:56:62:20:1e:88:22:de:f8:24:6e:
                    4f:6e:e8:69:fe:09:f2:e2:90:90:18:da:41:7f:d4:
                    d1:4d:07:db:5a:60:3c:28:24:54:bb:93:57:13:5f:
                    4b:87:6c:55:a6:6f:87:4f:00:fd:b0:0d:80:84:c5:
                    b2:64:c9:97:14:8a:bd:ca:da:80:f8:8b:37:bf:49:
                    12:43:6a:bf:13:a6:c8:ad:d7:f2:d0:d2:60:33:90:
                    e0:ce:55:0b:ea:8e:e0:5a:03:ec:a6:e9:ea:83:2c:
                    35:8d:34:85:74:d1:99:d0:ab:f9:13:39:15:84:fb:
                    44:72:87:d6:98:21:fa:19:3e:84:ec:11:07:90:1c:
                    be:55:93:5c:16:42:71:d3:3d:1b:20:e3:47:f5:2c:
                    fe:5e:97:0e:4f:f5:38:12:52:c9:53:65:80:0d:d8:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1B:EA:42:0F:27:14:B9:25:19:B6:C6:A8:0B:C0:B6:7D:B1:CF:DF
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:32:ef:e2:01:f3:b2:cb:aa:11:c6:ea:8a:27:d4:83:84:58:
         be:78:84:c9:3c:1c:dd:13:c9:53:51:2d:84:5c:ed:c9:79:fb:
         df:a0:88:7c:f9:55:9f:27:49:e6:02:6f:51:93:4b:37:00:c8:
         9a:64:12:ec:0f:5c:5a:e5:a0:4c:36:cf:98:bc:f4:5e:65:8d:
         95:ed:8c:dd:4c:cd:d0:64:78:63:6a:46:44:19:13:2d:62:b5:
         96:44:b2:1a:fa:1a:8d:5d:0a:14:45:bf:25:19:0f:c9:48:fe:
         09:ab:16:7c:d9:1c:95:cb:6a:7d:32:43:38:25:61:9e:1b:de:
         54:0f:d7:00:d3:6a:4f:75:dd:79:0d:b4:fe:b5:7f:84:76:00:
         f3:c6:79:99:5f:e4:80:b8:74:40:b5:07:a6:23:4f:46:e1:09:
         df:ae:87:3d:fa:42:19:ee:79:72:c8:b4:6a:d5:61:5d:7f:08:
         a9:22:f8:9e:93:3a:1d:e3:6b:2d:9b:35:cc:cf:d8:e6:4d:b2:
         b8:9e:bd:76:88:01:55:9e:f0:2e:44:02:d5:26:0e:09:67:d5:
         1c:00:61:75:8a:73:b6:23:e2:4d:c3:84:93:df:31:5c:18:ba:
         38:3e:4b:25:e8:db:63:fa:36:bd:be:db:c5:93:30:c9:ff:c3:
         ff:30:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org