Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135362e36372e3132352e302f32342d3234203d3e20313336373837.roa
File:                     3135362e36372e3132352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          Hi1v09p52FL6VIKNpDr1hLhJ0SFzQ9AiEtidIghQXK0=
Subject key identifier:   77:F9:43:46:60:AF:62:CE:BB:F0:D1:C3:41:17:57:B9:67:D0:62:55
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       02A520BE03B584BC744BFB13353867BF28AE6B47
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135362e36372e3132352e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 17 Mar 2023 09:24:15 +0000
ROA not before:           Fri 17 Mar 2023 09:19:15 +0000
ROA not after:            Fri 15 Mar 2024 09:24:15 +0000
asID:                     136787
IP address blocks:        156.67.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a5:20:be:03:b5:84:bc:74:4b:fb:13:35:38:67:bf:28:ae:6b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 17 09:19:15 2023 GMT
            Not After : Mar 15 09:24:15 2024 GMT
        Subject: CN=77F9434660AF62CEBBF0D1C3411757B967D06255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0a:0b:24:a7:b7:88:1e:29:dd:4e:c4:1a:a6:
                    cf:9f:23:eb:9b:14:c9:64:8b:cd:94:a3:cc:e7:1e:
                    17:5e:f1:23:84:ac:6e:53:db:5a:02:94:5a:22:33:
                    1f:03:02:00:97:4c:66:be:e4:cc:8d:14:77:9e:23:
                    2e:d3:b8:4a:3d:a4:ff:04:d7:3f:01:d2:fe:0e:fc:
                    a9:20:17:51:c2:8f:f1:7d:16:c5:27:0d:40:aa:e7:
                    29:f3:f2:bd:e7:fd:04:88:dd:35:1e:db:67:49:e5:
                    ca:de:12:93:f2:2e:14:29:52:3c:cc:2e:59:08:e4:
                    74:e2:c2:87:e2:d6:a9:66:12:0a:ca:22:ac:2c:7f:
                    13:1f:a0:35:05:02:ca:e0:0b:ee:c8:98:5e:a0:d1:
                    6d:26:d4:68:63:39:de:8b:a2:41:19:ed:a6:74:a8:
                    ad:9f:db:d0:68:1d:bc:52:91:37:9c:ba:ad:ca:74:
                    20:1b:87:05:8c:51:44:62:1b:e0:1f:5c:89:9c:bd:
                    bc:81:6f:e7:98:d9:aa:86:9d:e3:b9:9e:58:cc:23:
                    13:7d:b5:38:6a:46:6d:87:d2:b1:0a:fc:b0:1a:59:
                    ff:3c:45:38:7d:0d:fd:ea:4c:d1:de:73:0a:95:b0:
                    b5:e0:2f:b5:d5:3e:49:96:a8:01:d7:8a:b2:f9:ca:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F9:43:46:60:AF:62:CE:BB:F0:D1:C3:41:17:57:B9:67:D0:62:55
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135362e36372e3132352e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.67.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:37:7e:fc:7b:e1:81:64:7f:04:3c:ad:34:28:bb:14:ad:4d:
         e4:a1:e8:9a:84:61:06:1d:ed:be:5b:1c:6c:a4:cf:90:4d:b1:
         6c:58:75:a4:40:dc:da:99:c2:b9:c3:6b:0b:82:16:f2:fd:97:
         b3:4a:97:16:ce:8d:24:2c:40:a6:84:89:d0:4a:fb:93:20:51:
         2d:45:90:4b:05:24:68:bb:c7:47:54:88:0c:58:27:6c:d0:97:
         b1:35:4e:1d:50:bc:5b:cc:67:44:84:f3:96:02:be:a6:2f:f8:
         ed:67:39:58:1a:40:e0:94:83:a7:5a:05:41:ca:10:57:75:35:
         95:21:a1:87:74:cd:35:9d:a5:e2:23:48:73:dc:30:6c:be:07:
         29:82:26:26:57:7c:7d:d2:6c:06:4a:89:51:1b:df:51:20:36:
         c0:08:5d:c8:65:b1:32:12:46:95:7b:ee:68:10:7d:7b:67:00:
         81:85:9f:7d:af:4e:07:99:73:4c:9e:97:34:7e:e3:1b:fd:89:
         1e:45:e3:0b:c5:58:5d:62:68:af:3c:28:5e:77:d9:b9:1f:7e:
         f3:a2:a0:d3:88:66:84:2e:ca:c1:09:41:86:be:90:85:36:f6:
         8f:92:15:e1:b2:7c:45:a3:7b:7c:d9:9e:ac:69:3f:dd:d8:e9:
         c3:13:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net