Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35372e302f32342d3234203d3e203230343733.roa
File:                     3139342e3134372e35372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          bZ2XxbkhSGGPLFrrdTTKBLJxGxwb/8QQYms7PZK3lAM=
Subject key identifier:   81:F7:75:F2:83:6B:98:0D:FF:13:98:F4:08:D2:74:25:B6:EC:89:EB
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       387A560BFFC288FA27CF4D5EC75D6C8FC0B91376
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35372e302f32342d3234203d3e203230343733.roa
Signing time:             Sat 22 Oct 2022 04:33:25 +0000
ROA not before:           Sat 22 Oct 2022 04:28:25 +0000
ROA not after:            Sat 21 Oct 2023 04:33:25 +0000
asID:                     20473
IP address blocks:        194.147.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7a:56:0b:ff:c2:88:fa:27:cf:4d:5e:c7:5d:6c:8f:c0:b9:13:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:25 2022 GMT
            Not After : Oct 21 04:33:25 2023 GMT
        Subject: CN=81F775F2836B980DFF1398F408D27425B6EC89EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:68:53:2a:f5:f0:79:fa:ff:d7:22:ed:cb:88:
                    b8:66:ee:7e:ea:2b:fa:69:a4:88:89:49:e3:7c:e9:
                    3f:99:ed:7a:94:ef:a8:71:d1:12:fd:ec:cd:30:f4:
                    79:ab:a5:64:13:de:4b:91:f8:7d:83:ce:d0:29:28:
                    57:92:92:75:47:15:7b:ef:10:b8:6f:57:91:e3:63:
                    f5:fe:bf:a5:5b:f4:aa:41:9c:01:0a:90:cb:c4:3b:
                    2e:b8:8f:09:92:ac:78:93:9e:85:9c:9f:e0:e9:7b:
                    47:2d:23:69:e6:a2:fd:94:a4:22:29:45:4d:b8:82:
                    9b:2a:93:16:2c:49:35:72:5e:de:c0:1c:60:eb:2f:
                    73:8b:56:15:96:d6:23:06:60:55:99:7d:55:b5:65:
                    e4:07:e1:60:6e:87:92:a0:4b:32:20:d7:9a:76:02:
                    4a:47:2a:c7:34:64:e8:3c:60:9a:0c:85:5b:35:50:
                    ee:89:ea:ea:c1:7c:03:b7:c0:a3:f4:4d:70:f5:ec:
                    b1:7c:3e:89:63:92:8e:6d:71:48:8c:6b:a2:b3:64:
                    b0:7c:d2:e9:b4:0b:c4:b1:66:89:e0:33:b2:fa:9c:
                    8b:c8:11:81:cb:ee:e0:76:3b:0a:20:5e:ba:15:9d:
                    72:15:9e:48:10:53:c3:76:5b:de:3a:26:e8:13:df:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:75:F2:83:6B:98:0D:FF:13:98:F4:08:D2:74:25:B6:EC:89:EB
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35372e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:67:55:55:bf:27:93:c3:f6:24:74:a7:ff:ca:80:75:2d:8f:
         58:5f:09:19:c4:83:2a:00:6a:c9:fd:0d:5d:eb:f6:73:77:c8:
         be:8e:7b:e0:00:1b:12:5f:a1:ea:da:1a:0b:fc:20:a8:86:d1:
         f6:40:3c:2f:f5:64:9d:81:21:76:7a:94:29:bc:d1:49:58:e0:
         f3:82:fe:f8:2a:c0:4d:c1:f3:40:8f:60:41:b8:6a:df:e1:2d:
         dc:b2:2c:24:48:51:a6:b5:f6:dc:39:86:1c:8f:bb:2c:69:5f:
         d3:95:1c:07:63:1c:73:b6:bc:fe:62:aa:5d:f9:64:08:52:e6:
         2d:28:fd:22:24:63:70:ba:cf:f4:ab:0a:07:44:10:4e:75:73:
         ee:b2:f2:52:47:f6:ba:76:48:b2:dc:22:0d:7d:83:05:eb:2c:
         39:da:70:fd:f2:61:5b:60:6d:3f:80:99:08:09:d8:16:5d:11:
         9c:af:25:de:ab:aa:ba:b5:e2:e4:ce:a9:da:e1:80:73:dd:dd:
         7b:3c:4e:b6:90:10:58:6b:56:67:28:d9:c8:2d:ad:82:86:43:
         19:39:c4:6a:d1:ab:bd:25:4e:96:cc:e4:a6:90:70:0a:75:d9:
         f4:20:8d:43:23:3f:62:77:32:0a:85:5b:fd:6f:8b:62:c1:8c:
         d8:ae:13:b4
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUOHpWC//CiPonz01ex11sj8C5E3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjVaFw0yMzEwMjEwNDMzMjVaMDMxMTAvBgNV
BAMTKDgxRjc3NUYyODM2Qjk4MERGRjEzOThGNDA4RDI3NDI1QjZFQzg5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoaFMq9fB5+v/XIu3LiLhm7n7q
K/pppIiJSeN86T+Z7XqU76hx0RL97M0w9HmrpWQT3kuR+H2DztApKFeSknVHFXvv
ELhvV5HjY/X+v6Vb9KpBnAEKkMvEOy64jwmSrHiTnoWcn+Dpe0ctI2nmov2UpCIp
RU24gpsqkxYsSTVyXt7AHGDrL3OLVhWW1iMGYFWZfVW1ZeQH4WBuh5KgSzIg15p2
AkpHKsc0ZOg8YJoMhVs1UO6J6urBfAO3wKP0TXD17LF8Poljko5tcUiMa6KzZLB8
0um0C8SxZongM7L6nIvIEYHL7uB2OwogXroVnXIVnkgQU8N2W946JugT3+v/AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUgfd18oNrmA3/E5j0CNJ0JbbsieswHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM5MzQyZTMxMzQzNzJlMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzAzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADCkzkwDQYJKoZIhvcNAQELBQADggEBAGBnVVW/
J5PD9iR0p//KgHUtj1hfCRnEgyoAasn9DV3r9nN3yL6Oe+AAGxJfoeraGgv8IKiG
0fZAPC/1ZJ2BIXZ6lCm80UlY4POC/vgqwE3B80CPYEG4at/hLdyyLCRIUaa19tw5
hhyPuyxpX9OVHAdjHHO2vP5iql35ZAhS5i0o/SIkY3C6z/SrCgdEEE51c+6y8lJH
9rp2SLLcIg19gwXrLDnacP3yYVtgbT+AmQgJ2BZdEZyvJd6rqrq14uTOqdrhgHPd
3Xs8TraQEFhrVmco2cgtrYKGQxk5xGrRq70lTpbM5KaQcAp12fQgjUMjP2J3MgqF
W/1vi2LBjNiuE7Q=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org