Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203530363733.roa
File:                     33312e3138372e36342e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier:          p8rC6nOq++WcLdJlbisoMXNGzIYd1tdhJMiGfe/+0QY=
Subject key identifier:   7E:48:D6:73:5C:02:5F:EB:89:AE:8F:5C:04:5D:67:63:52:87:5E:30
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4E2E8ED62077FFAC05FEB618E6EF3A1D916D6384
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203530363733.roa
Signing time:             Sat 22 Oct 2022 04:34:24 +0000
ROA not before:           Sat 22 Oct 2022 04:29:24 +0000
ROA not after:            Sat 21 Oct 2023 04:34:24 +0000
asID:                     50673
IP address blocks:        31.187.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2e:8e:d6:20:77:ff:ac:05:fe:b6:18:e6:ef:3a:1d:91:6d:63:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:24 2022 GMT
            Not After : Oct 21 04:34:24 2023 GMT
        Subject: CN=7E48D6735C025FEB89AE8F5C045D676352875E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:57:6d:87:9d:a5:32:2d:50:4c:8c:09:a5:
                    9a:fc:42:79:83:bd:43:09:b1:60:46:61:42:93:4f:
                    ff:1f:43:9e:51:d3:22:88:2b:8d:2e:91:53:f9:68:
                    46:e5:72:dc:9e:39:48:2b:73:25:e0:e3:da:2b:d3:
                    5e:be:7d:c2:ab:74:b7:fc:5b:2c:13:96:1d:e7:f8:
                    53:f4:6e:27:bc:2e:5f:af:28:69:a4:53:af:f2:63:
                    da:d8:48:e6:d0:85:0a:f0:59:e2:e0:29:24:b5:e0:
                    b2:38:c3:b9:cb:27:17:d9:a2:9c:78:d8:d5:3c:c0:
                    60:ab:70:e9:51:ae:a8:9f:f8:f7:78:6c:eb:9c:58:
                    f7:1a:3c:b9:64:13:81:ac:83:08:e0:4e:7f:03:11:
                    40:7c:c9:1e:ba:09:81:e6:88:cd:8d:62:85:fb:eb:
                    22:e9:4f:16:c7:c8:f0:c5:38:e1:e2:33:1b:96:78:
                    1e:b0:16:8c:b2:24:54:dc:7c:10:8c:d4:df:df:4c:
                    73:d4:69:80:51:61:99:23:a2:00:b7:8a:76:85:5a:
                    cb:f5:63:86:33:74:89:ee:81:24:05:81:6d:cc:72:
                    68:38:46:f7:dd:6f:67:f4:22:58:46:7d:e7:b5:11:
                    f6:95:e0:ad:98:46:14:5a:ae:b1:36:da:13:e3:36:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:48:D6:73:5C:02:5F:EB:89:AE:8F:5C:04:5D:67:63:52:87:5E:30
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203530363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a9:66:da:dc:b4:cd:f8:86:a1:52:c8:ea:64:d6:35:e1:ee:
         cc:4a:0a:9b:0e:fc:3f:f4:77:68:5d:65:ee:a8:72:b1:6c:f4:
         b9:21:2e:c2:1a:ba:f5:61:fb:d9:a4:1d:cc:ff:ad:41:27:68:
         29:49:7a:72:23:cc:98:91:03:2f:b2:6b:78:ce:ab:d5:df:85:
         ab:58:a2:d9:68:cb:2a:3d:14:96:36:27:92:0f:3f:7d:08:1e:
         85:e3:c7:99:fb:7b:ef:5f:9e:f9:d8:82:b8:0e:8e:d9:07:4e:
         da:3b:e5:fb:68:f8:4c:bb:39:11:e8:a5:c1:19:f0:65:d7:5e:
         0d:f0:a5:26:46:33:cd:ab:8d:5e:69:7a:dc:82:bf:10:d3:80:
         c7:55:68:7a:c5:eb:7d:ec:bb:ca:8c:61:d8:4b:2f:a6:56:1f:
         ba:b3:da:4e:54:f4:4c:ca:05:e3:0e:e5:fb:a4:38:a7:5e:a8:
         18:a9:88:df:e3:f1:cf:d5:09:53:db:99:cb:15:a0:92:41:d6:
         52:0c:63:c9:31:c1:6e:b9:3d:a8:4b:79:18:f1:50:a0:c7:11:
         3f:83:bc:0f:26:fe:6d:9f:4e:ea:6f:7b:2b:0f:ad:ab:eb:50:
         e1:87:08:62:82:ef:e1:85:aa:ed:e7:b8:c9:fb:33:85:12:18:
         b0:1b:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-fra.rpki-client.org