Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20313336373837.roa
File:                     3139342e3134372e35392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          2yKD5xgD6tygJULiPX06af2TxH9sTk8rNzXKV9mRk3g=
Subject key identifier:   84:56:4B:2E:8E:DE:ED:C6:D8:7A:6C:92:34:F6:83:26:6B:0F:34:03
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       453AD3436BAC606E988D811F48E34BF43F239149
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 07 Nov 2022 11:16:29 +0000
ROA not before:           Mon 07 Nov 2022 11:11:29 +0000
ROA not after:            Mon 06 Nov 2023 11:16:29 +0000
asID:                     136787
IP address blocks:        194.147.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:d3:43:6b:ac:60:6e:98:8d:81:1f:48:e3:4b:f4:3f:23:91:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov  7 11:11:29 2022 GMT
            Not After : Nov  6 11:16:29 2023 GMT
        Subject: CN=84564B2E8EDEEDC6D87A6C9234F683266B0F3403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:ee:76:47:a4:3d:f3:35:c6:c1:10:21:9b:
                    b0:a9:08:5b:a2:4c:60:a9:a9:91:e3:81:bb:70:c0:
                    89:91:b4:b7:9b:e7:f2:d4:ca:15:03:2e:83:7a:81:
                    a7:cc:d2:53:ea:ff:6c:63:1d:c1:31:3b:1c:f8:df:
                    c4:b6:68:7d:c8:fe:f7:93:ba:c7:2a:96:76:c6:d9:
                    88:fc:61:c4:3a:db:26:36:9d:49:90:7f:9a:66:9e:
                    dc:f0:f1:e4:c2:36:f0:60:0a:47:47:09:53:cc:ed:
                    e2:bf:28:11:47:e0:31:11:2d:48:a6:a4:28:9f:3c:
                    7f:82:4f:6a:05:f0:ef:cc:bf:c1:ec:f8:d2:7a:f9:
                    ba:7c:a1:43:74:44:23:11:b5:4d:ef:02:6a:09:32:
                    09:3a:cf:53:65:48:2e:67:86:64:31:4e:a9:17:89:
                    65:e9:78:09:31:2b:72:7c:99:83:e8:7a:3e:87:41:
                    67:18:4b:e3:26:f5:c3:d7:28:30:69:73:a8:f1:c5:
                    dc:ee:63:eb:74:7e:e7:34:e0:f2:4c:a8:e8:41:e8:
                    03:53:38:1d:62:d9:01:10:0f:01:a7:d5:4b:51:0b:
                    87:43:1e:95:c3:20:8a:22:84:13:e8:92:94:5d:0e:
                    0b:48:0c:be:42:78:be:78:ea:2b:57:7d:9e:6f:8b:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:4B:2E:8E:DE:ED:C6:D8:7A:6C:92:34:F6:83:26:6B:0F:34:03
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:87:37:d7:a2:1d:55:32:2a:12:60:9a:51:29:a7:57:60:f9:
         f2:80:86:32:ff:c1:63:20:ff:a5:51:b8:de:f4:f7:bf:d7:54:
         d6:b4:85:e4:3b:1b:f6:ea:77:d0:f0:00:5c:f3:f8:67:c1:6a:
         36:27:c9:d6:40:4d:71:c9:8d:dd:f6:2e:95:04:55:94:a3:24:
         32:5d:a6:1c:21:14:4a:a4:da:37:65:5a:d3:d4:42:ab:37:c6:
         de:1d:23:35:6b:0d:ee:a0:9e:9e:19:f5:fa:f8:93:fb:6d:65:
         8d:74:74:f6:5e:ab:91:1e:52:88:88:52:b8:53:16:c5:d3:d4:
         9f:17:66:b8:36:3d:e3:49:f3:1a:d4:09:8c:dd:98:8e:68:e3:
         2d:53:66:96:43:ce:fb:d3:44:7f:34:65:67:59:20:21:69:a8:
         f2:e9:97:ab:58:9f:70:dc:6f:e0:d1:55:4a:57:02:3d:31:76:
         a0:bf:5e:6a:fa:2d:20:c4:f5:9c:2b:a3:0f:1c:9b:f9:ad:8a:
         41:60:78:b7:59:fa:a4:24:e2:52:89:9a:be:9f:b2:6a:cb:05:
         ea:9a:63:fd:ba:46:e6:3f:f9:a1:92:c3:16:5e:9e:fe:d6:ac:
         fa:ce:a2:d5:f1:c0:5d:0b:b9:34:c0:cc:dc:63:05:f7:d4:90:
         8e:5f:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org