Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa
File:                     3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          rtaXLQ6+TrOKYRMw8ZTd5AEciYwQoUz2QJU7zjk9Lhw=
Subject key identifier:   06:C4:1E:D8:B1:EA:8F:A9:89:FC:E4:61:64:46:69:82:1B:CE:BD:0C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       11AE5A1308995764EF5CB88BDEAD8376D11B8A83
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 17 Mar 2023 09:21:37 +0000
ROA not before:           Fri 17 Mar 2023 09:16:37 +0000
ROA not after:            Fri 15 Mar 2024 09:21:37 +0000
asID:                     136787
IP address blocks:        155.133.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ae:5a:13:08:99:57:64:ef:5c:b8:8b:de:ad:83:76:d1:1b:8a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 17 09:16:37 2023 GMT
            Not After : Mar 15 09:21:37 2024 GMT
        Subject: CN=06C41ED8B1EA8FA989FCE461644669821BCEBD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:27:63:cd:11:a3:e2:35:ad:4a:8f:94:eb:
                    e6:03:58:4e:f6:16:47:1f:a4:bb:13:5f:3b:bc:0e:
                    19:1a:2a:d9:88:e2:73:1b:9f:a7:85:59:82:16:c5:
                    f4:55:ad:19:9f:f7:00:a0:74:b9:ea:98:b6:ab:53:
                    9f:13:a6:77:f3:9d:4a:26:66:c7:5d:05:c2:ed:6a:
                    0f:3b:e7:82:37:e8:08:f8:fe:93:78:dc:aa:d2:9d:
                    b8:5b:b4:df:c5:64:1a:77:4b:49:0c:6c:ee:a4:e8:
                    d6:84:d3:6e:72:60:e3:ea:c7:81:ae:42:d8:48:e7:
                    91:6d:7b:91:5d:a9:36:9b:00:94:e2:26:51:db:c0:
                    96:f1:75:6a:ac:79:6d:b2:45:00:8d:a1:4e:cc:6d:
                    0f:32:a6:f3:21:16:1a:b0:56:42:a9:8f:66:f9:5d:
                    3f:12:25:68:1d:25:b6:f0:b4:4e:74:64:ab:83:ca:
                    8e:eb:ce:e0:3c:de:04:69:ff:6c:a9:44:41:5b:17:
                    34:d9:a7:d8:86:03:a4:f0:b4:67:9e:5c:9b:0c:7e:
                    7e:9d:14:fd:94:e4:93:52:25:ff:9d:66:b3:b2:c8:
                    1a:21:8f:2f:b6:98:54:e4:eb:bc:20:28:e6:c1:8b:
                    5e:d3:93:e3:62:4f:d0:94:d6:12:d8:7c:6f:40:72:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:1E:D8:B1:EA:8F:A9:89:FC:E4:61:64:46:69:82:1B:CE:BD:0C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6d:22:03:ea:b8:e8:9e:4a:ff:c3:09:8e:ac:e5:da:60:6d:
         de:0d:5b:36:e4:72:af:c5:60:e3:c4:7f:09:49:17:4c:5a:74:
         27:65:62:4c:7d:99:e0:43:c5:23:19:ed:6d:22:92:38:f6:82:
         68:9b:54:f5:b5:f9:0e:39:96:cf:75:95:3b:ac:7d:e7:9b:d7:
         44:5f:b6:f3:46:4a:9e:e0:72:03:96:44:a8:7f:4c:f0:85:21:
         63:23:7e:79:5c:c0:d3:ae:a8:68:79:04:a7:b0:35:0e:43:8d:
         2f:2f:b8:0b:14:7d:2e:10:d1:33:52:ee:56:74:82:2e:5a:a8:
         72:2c:62:82:f9:04:21:ca:bc:db:5f:b7:e9:34:5d:15:c4:b4:
         ba:cc:ec:0b:d0:2e:c1:d1:28:84:3a:2c:05:8a:f9:4f:4f:25:
         56:0b:7e:15:42:41:d0:58:1d:72:5c:99:a2:e5:15:fe:f1:ae:
         fe:62:8a:45:a1:f6:a0:c0:06:89:97:7c:46:b0:59:c3:ce:7b:
         3e:79:ac:e1:bc:cb:a4:ed:fa:62:c7:7d:db:58:0e:61:76:da:
         a4:a1:99:e3:41:8c:59:9b:bc:bc:9f:a7:f6:b4:a3:33:4b:e2:
         1b:3a:13:f4:23:5e:78:62:97:d9:24:db:92:40:52:5e:32:33:
         37:5e:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net