Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e37362e302f32342d3234203d3e20313336373837.roa
File:                     3135352e3133332e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          zKfiZBad3g135XNjysQNuY8XEqvDfUU+XrJ66lb77HI=
Subject key identifier:   63:9C:EE:27:FF:BD:5C:41:4B:3B:19:14:5D:5B:C4:12:BA:EE:06:F7
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6B7C95E057ABF91F3BD0FD201B2569648F68C077
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e37362e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:25 +0000
ROA not before:           Sat 22 Oct 2022 04:29:25 +0000
ROA not after:            Sat 21 Oct 2023 04:34:25 +0000
asID:                     136787
IP address blocks:        155.133.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7c:95:e0:57:ab:f9:1f:3b:d0:fd:20:1b:25:69:64:8f:68:c0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:25 2022 GMT
            Not After : Oct 21 04:34:25 2023 GMT
        Subject: CN=639CEE27FFBD5C414B3B19145D5BC412BAEE06F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:f5:c8:39:94:4b:a2:18:cb:0d:24:1f:21:
                    4c:37:a7:69:7e:33:b3:7f:34:72:91:76:f5:b1:e8:
                    c3:21:55:89:68:4d:81:8f:60:02:1a:72:3f:c4:df:
                    d3:9c:54:3d:16:9e:3e:0d:d2:3f:42:89:a7:76:ad:
                    4c:7f:97:f3:a2:ab:c5:64:ea:5b:16:c7:ce:bd:35:
                    24:46:9a:7e:ba:d2:94:69:92:eb:98:c8:c6:c6:7c:
                    d4:ee:82:e0:c9:dc:e3:e8:92:17:b4:ef:73:72:6f:
                    ee:b2:2e:06:85:5e:32:6b:a0:33:98:e9:01:7c:1e:
                    3c:ce:c4:da:4f:a5:14:37:08:c6:9a:5d:30:8a:fe:
                    05:52:69:f4:74:da:7f:87:cc:63:f0:31:6c:60:5d:
                    0e:55:7e:2c:2d:2f:5f:ed:03:0d:7f:95:b3:6c:58:
                    34:b3:ac:04:09:6d:c9:d1:97:27:c8:06:f9:dd:3d:
                    60:3b:24:e3:bb:3c:1e:aa:a0:7a:6a:5e:c8:de:83:
                    74:ef:fb:01:69:47:06:48:e6:10:dc:a3:66:a3:2f:
                    dd:78:2d:36:fc:63:e5:ae:5e:f4:ec:89:08:b3:7e:
                    4b:db:9d:8b:94:44:a5:76:2e:d7:af:65:94:0d:ae:
                    9e:6a:44:b1:89:74:a5:5d:20:0b:98:82:b0:23:e2:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9C:EE:27:FF:BD:5C:41:4B:3B:19:14:5D:5B:C4:12:BA:EE:06:F7
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e37362e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bf:24:bd:69:b6:33:fa:74:c2:68:40:2e:1c:55:52:89:18:
         1c:d9:07:47:5f:01:bd:cb:42:90:df:9e:f2:fe:8e:37:e9:3e:
         22:db:88:0a:31:f0:95:46:30:9e:38:27:28:82:32:ab:3c:ac:
         61:b6:92:bc:c2:ca:bb:aa:e7:f5:00:c5:46:24:e5:a9:dd:cf:
         18:d4:a7:cf:aa:5f:fb:b3:d0:46:3a:aa:9d:88:4a:4c:a7:1c:
         74:95:a0:71:d5:be:13:cc:41:50:cf:a8:7d:2e:6b:89:a8:83:
         e6:2f:29:61:78:c1:74:fb:02:85:49:60:99:e1:54:53:b2:b5:
         04:99:7d:72:e4:07:8f:9d:13:e2:c5:fa:7c:81:3a:9d:10:5a:
         4a:a7:41:d9:f8:d2:3a:3a:71:7d:2c:81:ee:f2:f4:6d:56:d6:
         bf:f7:98:e7:88:84:29:81:06:68:b6:1e:9a:f4:95:a5:e0:30:
         b1:b0:77:4d:ba:3e:95:ad:a0:21:6b:3c:6e:0e:5c:33:4a:d9:
         73:ff:64:29:9a:f0:52:ca:e3:52:4b:e4:62:1c:b5:ec:a0:07:
         c1:38:50:cc:5d:98:c1:25:9b:53:f0:03:cf:c4:2d:9f:b3:2d:
         8d:48:27:1d:80:c2:bc:34:69:28:62:7c:a0:6b:b3:1f:d5:1c:
         9f:39:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net