Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
File:                     3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          WwBhzyeuL+Sn1OKZe0mInmeEXUbIH5cRGdXBx9J5tGM=
Subject key identifier:   F8:16:8B:41:61:05:6D:13:43:CC:B0:9D:52:D4:E6:90:55:81:AC:26
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       169FBD83707DFA573CDC84803C1EBF3441A349B7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
Signing time:             Wed 04 Jan 2023 08:06:41 +0000
ROA not before:           Wed 04 Jan 2023 08:01:41 +0000
ROA not after:            Wed 03 Jan 2024 08:06:41 +0000
asID:                     136787
IP address blocks:        178.132.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9f:bd:83:70:7d:fa:57:3c:dc:84:80:3c:1e:bf:34:41:a3:49:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan  4 08:01:41 2023 GMT
            Not After : Jan  3 08:06:41 2024 GMT
        Subject: CN=F8168B4161056D1343CCB09D52D4E6905581AC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:9b:55:4e:61:00:c8:72:71:c2:91:4e:28:
                    e5:a9:47:79:52:de:81:56:11:b6:03:29:db:9a:81:
                    fa:a5:f3:9b:aa:eb:ed:b5:cf:ec:2d:3d:bc:f8:9d:
                    f9:e9:64:90:ad:a0:71:92:fe:cb:2a:b0:72:d0:5c:
                    78:82:5d:6c:e0:cc:b2:2c:c1:2a:29:4a:85:a1:88:
                    8f:17:88:3d:5f:dc:80:f8:a4:e5:a5:67:38:e7:c2:
                    b7:5b:f6:24:f6:64:e6:d2:b2:93:44:84:2d:dd:71:
                    1c:fd:31:bc:da:98:8d:48:46:f4:0b:5a:31:c9:43:
                    3a:8a:97:83:4f:e6:da:e8:f8:cd:70:54:2f:d6:1a:
                    cc:e7:90:0e:88:10:85:a3:65:7d:f1:ad:a6:d6:87:
                    9b:f3:68:38:c8:fd:f8:fc:dc:66:50:fe:1f:8b:1f:
                    f9:e3:1e:94:12:0e:52:bd:a5:09:80:00:41:c8:cf:
                    4e:ce:44:12:8e:29:82:43:34:af:4a:40:b5:14:55:
                    7e:07:b8:7f:ac:33:e8:49:e7:a7:24:6e:bd:fc:19:
                    9e:a1:dc:94:5f:f4:a8:68:db:24:3a:ea:5d:0a:c8:
                    4c:10:b6:d8:72:51:76:5e:c8:89:7c:14:42:d2:d9:
                    a7:04:d7:cc:71:de:1a:c8:9f:4a:2b:3c:69:20:8c:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:8B:41:61:05:6D:13:43:CC:B0:9D:52:D4:E6:90:55:81:AC:26
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.132.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:11:e5:f3:f3:18:f2:a1:b2:f6:cf:47:9e:da:7f:f0:3b:
         13:b8:7c:a9:87:fa:7e:7a:96:bb:db:b1:7b:02:a1:e1:01:4e:
         6e:55:78:f4:2e:ef:e1:e5:99:6d:06:b2:5c:c0:9c:7b:87:e9:
         f4:48:af:31:d3:f6:e2:ec:4c:7b:63:a2:d3:12:69:61:43:ca:
         7f:d3:39:b9:c0:c2:56:6e:59:c8:b3:30:62:e3:81:85:df:82:
         06:22:71:cd:da:a6:e8:27:ca:83:b1:b0:ce:16:07:b4:f6:dc:
         d7:20:c8:89:64:d4:62:1c:80:e7:2c:d7:7a:34:33:4c:82:ac:
         f9:2a:57:23:f2:60:f1:42:17:47:e4:51:5c:c6:97:92:73:1f:
         e4:ea:f4:f0:f0:e4:df:91:f9:5a:f8:ba:48:f0:ce:68:c8:36:
         81:8d:5f:0a:0a:c8:25:ff:fd:6d:67:15:51:d9:d5:4f:d8:bc:
         f5:c9:18:02:3a:69:5f:41:2d:86:c5:28:9f:66:28:f9:42:e8:
         34:eb:cf:a3:82:40:7a:66:02:1c:ae:bd:68:34:51:e1:f5:a7:
         29:1f:e7:4e:2f:24:04:7f:64:78:8c:29:81:42:de:23:9b:7f:
         02:c1:4d:81:50:dc:2b:87:f9:71:e4:26:18:e3:6a:68:3b:86:
         7e:00:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net