Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3134302e3139362e302f32322d3232203d3e2031323339.roa
File:                     3139342e3134302e3139362e302f32322d3232203d3e2031323339.roa (raw, json)
Hash identifier:          wSdSIjBphaQ+OPDmN4h1J4pAJYx8JxSgwQtrFFM8gR0=
Subject key identifier:   EC:90:A3:6C:C1:BD:C7:C8:D6:DE:01:9A:F0:6D:22:26:60:26:39:00
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6C55ACADD646C664BE97AB4D98890BAA0152D118
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3134302e3139362e302f32322d3232203d3e2031323339.roa
Signing time:             Tue 28 Jun 2022 04:40:46 +0000
ROA not before:           Tue 28 Jun 2022 04:35:46 +0000
ROA not after:            Tue 27 Jun 2023 04:40:46 +0000
asID:                     1239
IP address blocks:        194.140.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:55:ac:ad:d6:46:c6:64:be:97:ab:4d:98:89:0b:aa:01:52:d1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:46 2022 GMT
            Not After : Jun 27 04:40:46 2023 GMT
        Subject: CN=EC90A36CC1BDC7C8D6DE019AF06D222660263900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:f3:3b:f8:52:17:03:b1:49:d4:34:ad:e1:
                    17:95:78:50:21:4b:34:9e:53:fb:cc:57:21:1f:43:
                    1d:18:51:50:53:90:be:67:ea:82:ee:c8:f0:cf:e2:
                    74:bd:a7:a6:47:09:c2:e7:94:ba:cb:6f:3c:17:59:
                    f9:d4:fc:3b:45:64:ff:19:f2:5b:4d:fd:fe:a3:e3:
                    24:57:2e:10:99:45:e2:5d:b8:ab:31:e4:1a:ea:c5:
                    3b:da:a6:0d:ef:00:e5:0d:d8:63:97:a9:43:57:5c:
                    30:a3:e4:e6:f5:6d:6e:05:51:ac:7b:03:69:7d:45:
                    06:07:2b:cb:eb:86:c8:f1:dc:8f:98:b7:82:ae:4f:
                    8e:ca:5d:f8:00:1c:57:fb:83:4d:64:e7:7a:25:2a:
                    28:6a:91:60:57:c7:83:93:29:fd:0d:95:f6:e3:db:
                    6d:ae:da:ed:9a:2f:cf:46:30:27:d2:98:ea:04:82:
                    98:32:fe:37:26:c4:20:6d:b9:99:98:e6:06:91:db:
                    ae:fd:93:63:0f:7e:46:4d:8e:b4:25:b4:ff:09:7d:
                    69:e7:24:96:9f:93:92:03:3a:b3:83:04:9b:7f:61:
                    2d:f9:38:75:4d:8e:00:c2:24:14:a5:5b:3e:07:99:
                    61:31:fb:16:11:af:e2:f6:77:a8:5e:3f:12:8e:2c:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:A3:6C:C1:BD:C7:C8:D6:DE:01:9A:F0:6D:22:26:60:26:39:00
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3134302e3139362e302f32322d3232203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.140.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:96:6a:6b:31:76:0a:8e:5d:79:cf:78:0b:2d:b2:bd:06:13:
         6e:2f:e4:b2:57:8a:07:a9:52:b0:1b:94:34:7b:68:11:49:3c:
         13:25:2b:33:57:4a:4b:20:1c:77:f3:ef:5e:f0:ad:be:dd:a6:
         6b:13:ae:c7:64:56:bf:da:56:82:88:b6:17:f9:4a:4e:3a:76:
         e9:15:64:0d:0e:5c:e0:df:3d:81:d2:57:69:7f:8b:4a:2d:76:
         5a:27:15:91:1a:0f:53:2c:cf:ba:16:02:8f:b4:70:2b:be:01:
         89:f0:88:51:7b:11:4c:fe:62:2b:16:c6:f9:af:3d:f8:51:1a:
         59:12:9c:28:7a:df:53:47:06:5d:c9:ed:59:8b:d5:ca:4b:44:
         1a:8e:cb:e9:cb:c4:ea:be:88:38:3f:cd:9d:2b:34:26:4c:01:
         12:e7:6b:d2:0e:50:a2:36:20:d1:1a:97:a1:1d:be:50:a7:04:
         03:46:f8:75:43:28:42:01:d2:b1:4f:4d:2f:78:d9:3b:4f:01:
         ae:c8:57:35:cc:f3:04:b4:04:d3:89:49:ca:f2:0c:06:e9:64:
         3b:94:98:47:1c:67:1a:e0:85:8b:a8:44:36:20:a1:59:97:66:
         a5:58:a4:e9:fb:5b:14:78:d9:e4:bc:41:8e:de:8a:c8:3c:08:
         6e:3e:3e:ed
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUbFWsrdZGxmS+l6tNmIkLqgFS0RgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDZaFw0yMzA2MjcwNDQwNDZaMDMxMTAvBgNV
BAMTKEVDOTBBMzZDQzFCREM3QzhENkRFMDE5QUYwNkQyMjI2NjAyNjM5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXPM7+FIXA7FJ1DSt4ReVeFAh
SzSeU/vMVyEfQx0YUVBTkL5n6oLuyPDP4nS9p6ZHCcLnlLrLbzwXWfnU/DtFZP8Z
8ltN/f6j4yRXLhCZReJduKsx5BrqxTvapg3vAOUN2GOXqUNXXDCj5Ob1bW4FUax7
A2l9RQYHK8vrhsjx3I+Yt4KuT47KXfgAHFf7g01k53olKihqkWBXx4OTKf0Nlfbj
222u2u2aL89GMCfSmOoEgpgy/jcmxCBtuZmY5gaR2679k2MPfkZNjrQltP8JfWnn
JJafk5IDOrODBJt/YS35OHVNjgDCJBSlWz4HmWEx+xYRr+L2d6hePxKOLBiPAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU7JCjbMG9x8jW3gGa8G0iJmAmOQAwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzQyZTMxMzQzMDJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIw
MzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALCjMQwDQYJKoZIhvcNAQELBQADggEBAECWamsx
dgqOXXnPeAstsr0GE24v5LJXigepUrAblDR7aBFJPBMlKzNXSksgHHfz717wrb7d
pmsTrsdkVr/aVoKIthf5Sk46dukVZA0OXODfPYHSV2l/i0otdlonFZEaD1Msz7oW
Ao+0cCu+AYnwiFF7EUz+YisWxvmvPfhRGlkSnCh631NHBl3J7VmL1cpLRBqOy+nL
xOq+iDg/zZ0rNCZMARLna9IOUKI2INEal6EdvlCnBANG+HVDKEIB0rFPTS942TtP
Aa7IVzXM8wS0BNOJScryDAbpZDuUmEccZxrghYuoRDYgoVmXZqVYpOn7WxR42eS8
QY7eisg8CG4+Pu0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org