Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa
File:                     3139342e33352e31322e302f32332d3234203d3e20323033333830.roa (raw, json)
Hash identifier:          hDn767cWkCSoR4i/OTBOH1q8hcvTl5WKHlu9a/mLROE=
Subject key identifier:   31:A2:6C:33:65:F2:36:86:17:43:1B:16:0C:48:76:B9:3C:C2:8F:26
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       772436C9D7F5A4DD14159DBD994F8D0E2C773F2E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa
Signing time:             Tue 07 Feb 2023 14:09:10 +0000
ROA not before:           Tue 07 Feb 2023 14:04:10 +0000
ROA not after:            Tue 06 Feb 2024 14:09:10 +0000
asID:                     203380
IP address blocks:        194.35.12.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:24:36:c9:d7:f5:a4:dd:14:15:9d:bd:99:4f:8d:0e:2c:77:3f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Feb  7 14:04:10 2023 GMT
            Not After : Feb  6 14:09:10 2024 GMT
        Subject: CN=31A26C3365F2368617431B160C4876B93CC28F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:00:30:5b:08:e1:76:e9:97:f2:7c:6b:17:
                    3b:ea:42:cb:aa:12:e4:77:d6:0f:7d:7f:f0:a5:0f:
                    fc:e6:41:97:8a:f9:53:c2:ef:08:60:81:fd:22:c2:
                    e2:ad:a7:7f:dc:7a:d5:47:58:0f:f8:ed:ea:f1:54:
                    dc:1f:9a:14:07:ee:af:eb:bb:b7:5f:19:66:8e:47:
                    89:ae:d1:ac:b5:86:af:e8:fb:15:24:49:9a:20:91:
                    35:67:21:07:fc:b7:0e:78:89:b4:88:d4:93:56:77:
                    db:83:90:0c:1b:22:58:2c:33:b3:3b:4f:c1:82:28:
                    30:b5:93:a0:71:97:bc:1f:49:df:21:be:0f:26:9f:
                    7c:38:db:55:0f:03:18:3b:1d:e9:47:68:74:ed:f0:
                    99:4e:ca:7e:9e:6b:82:19:84:5d:38:a9:d2:ad:87:
                    e7:b9:84:49:fc:16:7f:1f:c8:09:df:2e:f3:13:e8:
                    36:20:a8:d6:e2:3d:3f:96:2e:da:6b:03:b3:2b:86:
                    77:d8:2d:32:a9:38:ec:e0:7b:f2:24:ad:65:c9:6e:
                    10:89:c2:49:d4:be:c4:72:51:e6:4c:da:b1:2f:8e:
                    4a:a7:4e:c9:1c:7f:58:af:9b:ef:c8:cf:05:22:6f:
                    a5:87:b6:a5:92:1a:12:c4:3a:06:8c:5e:ed:b7:42:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:6C:33:65:F2:36:86:17:43:1B:16:0C:48:76:B9:3C:C2:8F:26
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:33:7e:7a:fa:4d:02:c4:e9:9f:d5:75:c7:b9:be:2f:91:
         80:9a:b5:e2:7e:b8:e2:d9:ca:3e:f0:69:47:ce:4c:ce:95:d7:
         5c:96:bd:2b:24:49:3e:f0:30:a2:a9:cb:d1:92:3b:81:12:fe:
         5c:eb:27:86:b4:d2:76:e0:0f:f0:87:ac:8d:bc:ad:8e:5f:eb:
         56:d6:08:09:d9:66:d6:63:83:f0:90:c4:f6:36:08:5c:72:c2:
         71:20:24:ef:a7:aa:95:80:95:24:63:01:ee:15:4e:ea:54:f0:
         8f:12:89:45:d7:25:23:8d:c3:f6:9c:88:fb:b6:c8:60:85:f0:
         bf:76:b5:53:29:f1:90:ae:d7:34:f9:66:9e:84:34:7c:d8:b9:
         a7:3d:2b:75:66:32:ce:51:90:40:ac:a2:3c:69:e7:93:c0:e2:
         f3:49:ab:f9:7b:e4:57:54:cd:c3:a7:be:2c:4d:f6:9e:05:9a:
         ee:41:f3:d4:b0:40:30:41:25:28:8f:16:fe:cc:e1:cf:3c:d0:
         2e:d6:f7:aa:31:82:18:e0:74:33:f3:b1:47:09:1f:27:73:6e:
         9c:3b:43:76:09:ce:28:85:d4:5a:a8:8c:35:a5:d8:6d:76:d4:
         14:a3:33:75:58:db:4b:eb:c1:1f:9e:ae:9f:df:43:07:e2:3c:
         f8:8f:b3:5c
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUdyQ2ydf1pN0UFZ29mU+NDix3Py4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAyMDcxNDA0MTBaFw0yNDAyMDYxNDA5MTBaMDMxMTAvBgNV
BAMTKDMxQTI2QzMzNjVGMjM2ODYxNzQzMUIxNjBDNDg3NkI5M0NDMjhGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VgAwWwjhdumX8nxrFzvqQsuq
EuR31g99f/ClD/zmQZeK+VPC7whggf0iwuKtp3/cetVHWA/47erxVNwfmhQH7q/r
u7dfGWaOR4mu0ay1hq/o+xUkSZogkTVnIQf8tw54ibSI1JNWd9uDkAwbIlgsM7M7
T8GCKDC1k6Bxl7wfSd8hvg8mn3w421UPAxg7HelHaHTt8JlOyn6ea4IZhF04qdKt
h+e5hEn8Fn8fyAnfLvMT6DYgqNbiPT+WLtprA7MrhnfYLTKpOOzge/IkrWXJbhCJ
wknUvsRyUeZM2rEvjkqnTskcf1ivm+/IzwUib6WHtqWSGhLEOgaMXu23QkTDAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUMaJsM2XyNoYXQxsWDEh2uTzCjyYwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM5MzQyZTMzMzUyZTMxMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMw
MzMzMzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHCIwwwDQYJKoZIhvcNAQELBQADggEBAKTKM356
+k0CxOmf1XXHub4vkYCateJ+uOLZyj7waUfOTM6V11yWvSskST7wMKKpy9GSO4ES
/lzrJ4a00nbgD/CHrI28rY5f61bWCAnZZtZjg/CQxPY2CFxywnEgJO+nqpWAlSRj
Ae4VTupU8I8SiUXXJSONw/aciPu2yGCF8L92tVMp8ZCu1zT5Zp6ENHzYuac9K3Vm
Ms5RkECsojxp55PA4vNJq/l75FdUzcOnvixN9p4Fmu5B89SwQDBBJSiPFv7M4c88
0C7W96oxghjgdDPzsUcJHydzbpw7Q3YJziiF1FqojDWl2G121BSjM3VY20vrwR+e
rp/fQwfiPPiPs1w=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org