Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
File:                     3135362e36372e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          jhk2SZCIA3F6VxFw9c5vqCt15xNtJFXZWXK66J8YNWs=
Subject key identifier:   31:81:EB:C8:6B:0A:49:B9:C0:EB:CA:AB:5A:D5:4A:DB:6D:37:D4:B0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       361AA15BA998958367C89F1A297A1019527AB07A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 17 Mar 2023 09:23:32 +0000
ROA not before:           Fri 17 Mar 2023 09:18:32 +0000
ROA not after:            Fri 15 Mar 2024 09:23:32 +0000
asID:                     136787
IP address blocks:        156.67.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1a:a1:5b:a9:98:95:83:67:c8:9f:1a:29:7a:10:19:52:7a:b0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 17 09:18:32 2023 GMT
            Not After : Mar 15 09:23:32 2024 GMT
        Subject: CN=3181EBC86B0A49B9C0EBCAAB5AD54ADB6D37D4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:f0:4c:f8:46:00:6e:17:42:4d:49:9c:8b:
                    98:09:b4:17:db:97:03:9d:14:9b:63:2d:6d:f7:e1:
                    de:71:f8:03:c7:12:87:4a:07:4e:13:9d:fb:46:e4:
                    7b:91:9d:c3:99:1c:5e:06:42:8e:a5:f6:30:34:a2:
                    48:e7:2b:9e:1d:55:3f:df:47:c5:fa:1d:a8:76:11:
                    d9:e0:78:ef:19:ab:22:0b:8f:35:bb:79:2c:04:30:
                    c3:e7:5a:2c:e5:45:bb:93:c2:78:50:5d:75:fa:40:
                    c7:8c:a1:bd:ad:4f:cd:b9:da:68:e0:d3:37:42:14:
                    ad:ab:3c:8a:61:15:f2:79:ef:92:5e:b3:3e:fd:94:
                    b3:e2:3b:1b:72:0a:d1:9f:c4:72:e5:72:6b:b5:12:
                    35:35:27:64:c7:6a:49:0d:5e:9e:03:84:52:f2:1a:
                    c7:79:88:be:e6:bb:d3:ce:39:0c:70:0f:52:fc:09:
                    a0:e2:bf:b0:12:d0:02:19:dd:1d:0a:52:13:24:3e:
                    1b:5f:08:7a:33:d0:44:96:c3:06:d1:cc:41:a8:2b:
                    20:44:b1:ba:25:af:9c:1c:1a:2c:dc:a5:a0:c7:cf:
                    2c:ab:b4:62:f6:96:26:39:44:0a:6d:5d:8e:46:82:
                    8b:fe:ca:84:d8:74:af:a5:4f:88:ce:94:95:7f:86:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:EB:C8:6B:0A:49:B9:C0:EB:CA:AB:5A:D5:4A:DB:6D:37:D4:B0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.67.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:23:20:58:90:ef:5f:b1:44:14:89:5b:fe:4f:9e:81:1b:c3:
         4c:04:7c:58:48:04:16:00:41:17:92:a9:66:04:83:00:49:50:
         dc:ae:eb:c3:45:50:b5:63:3a:35:41:6b:67:5d:35:b2:27:7f:
         6d:be:08:9d:d4:be:9d:84:41:94:4a:51:7a:72:44:5e:d7:08:
         2d:9d:69:3d:0f:0e:db:6c:7e:bf:ca:e6:fc:5f:06:07:a3:9e:
         79:58:1d:6a:51:65:9b:6b:85:05:f1:f8:aa:65:06:f4:46:a3:
         e5:1f:fa:8f:29:35:d0:53:85:e2:ca:31:85:69:21:89:57:04:
         c2:f0:3f:e5:3f:c9:31:16:85:70:fe:19:8d:c3:4d:11:16:3b:
         2a:6f:08:85:c4:f3:bb:89:9b:17:4d:33:01:14:da:dc:59:c2:
         fa:78:63:9f:ed:e4:e9:16:25:6b:6d:74:61:83:03:19:23:be:
         73:08:9f:54:38:c5:cc:5a:b3:76:93:bd:83:1b:a3:fa:3e:e7:
         0c:4c:25:e2:1d:53:65:30:98:fc:f5:82:db:17:1f:91:7c:71:
         35:00:ae:65:80:31:43:06:e7:c9:a4:cd:70:34:b5:37:87:5d:
         22:78:65:8e:c8:aa:39:ef:a2:ed:a2:92:41:19:15:10:56:e6:
         22:93:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net