Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38302e302f32342d3332203d3e203531313637.roa
File:                     3138352e3138352e38302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          YHfkdOXbo+b0YfZnGW7xhnUOfw/bRiazSzP6sDUqVyw=
Subject key identifier:   4F:27:92:32:A7:2D:4F:1E:8E:84:84:09:2F:68:73:15:90:22:C1:75
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       126AACFDD0430EAD934F43EE5E61116A8C49632C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:17 +0000
ROA not before:           Sat 22 Oct 2022 04:29:17 +0000
ROA not after:            Sat 21 Oct 2023 04:34:17 +0000
asID:                     51167
IP address blocks:        185.185.80.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6a:ac:fd:d0:43:0e:ad:93:4f:43:ee:5e:61:11:6a:8c:49:63:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:17 2022 GMT
            Not After : Oct 21 04:34:17 2023 GMT
        Subject: CN=4F279232A72D4F1E8E8484092F6873159022C175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:6a:b1:f9:12:b7:9c:08:c7:38:93:06:5b:
                    5c:71:6b:58:3b:a6:06:70:6d:ff:79:e2:59:fb:30:
                    66:7e:06:51:b1:e8:0f:a1:33:4b:fb:cf:c6:6d:e9:
                    2e:5e:8c:6a:6b:27:15:b5:3d:c9:9d:f2:e6:cc:3d:
                    19:6b:a4:61:28:9b:2c:3f:d7:69:68:d2:2a:a8:50:
                    5e:95:10:47:e3:d8:1b:28:11:2a:f3:02:06:8e:7b:
                    41:a4:e4:01:65:a9:7b:cd:58:d5:bb:94:4d:7c:f4:
                    6d:10:6a:4b:b1:03:a7:44:c7:89:16:9b:29:52:0e:
                    82:8a:81:81:bc:ed:f1:be:ff:da:13:69:0d:be:ac:
                    f6:bf:9c:be:dc:c4:cd:8b:24:42:98:80:65:63:7d:
                    98:8c:ff:f1:52:5e:9f:a6:92:63:d4:bd:85:ee:37:
                    b8:2a:ea:92:8b:aa:de:18:c1:5e:8c:ac:4b:20:c2:
                    46:6f:34:53:4a:f2:41:f5:85:03:35:1c:6b:af:0e:
                    1d:ed:7f:de:dd:12:fb:f0:f4:08:7b:0f:63:ce:6b:
                    1d:43:f1:dd:a2:fb:84:63:ac:81:e6:dc:bc:04:74:
                    72:08:19:88:6e:e3:f9:48:c4:78:9d:2f:07:ca:cc:
                    7e:67:bf:44:77:70:5a:f5:b1:66:14:d4:f2:59:f6:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:92:32:A7:2D:4F:1E:8E:84:84:09:2F:68:73:15:90:22:C1:75
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a1:3e:46:db:48:f5:3a:8b:2d:6d:ba:1f:2f:41:82:2d:ce:
         91:f3:26:45:92:70:60:73:3d:ad:a5:e1:bf:d0:77:58:85:b0:
         7a:26:e4:c0:a6:61:c2:69:f9:ec:9e:d8:9a:60:d4:25:be:42:
         ed:7c:70:3a:86:ea:7e:da:78:e8:e7:4f:28:02:5f:9c:b1:00:
         50:e5:1e:ca:02:cb:63:0d:37:ac:19:f0:b5:fe:17:5d:c6:62:
         59:ed:ba:8b:3d:59:44:17:5e:f4:19:f4:15:75:d7:e9:18:93:
         8d:02:4f:2b:3f:06:67:ce:a3:1e:b7:fa:3e:85:26:07:9f:d3:
         9c:15:e2:d8:72:35:50:e1:46:02:05:6e:e2:b1:6f:bc:3c:cb:
         32:7c:38:13:0b:f5:50:4a:58:b0:2c:a4:ce:ac:1c:e2:de:84:
         eb:05:5d:0f:41:5c:27:30:44:96:3a:6e:dc:5d:cf:3a:bc:c4:
         30:ce:81:b3:2b:08:d5:2b:3a:b6:7f:04:38:a1:10:87:c4:ea:
         bb:11:86:d9:16:f5:25:d1:e2:a2:64:a6:0a:12:11:2d:9f:f8:
         27:ba:a3:7f:7a:6c:91:ed:c0:fd:94:c9:81:f2:58:11:96:c5:
         c5:24:49:52:ed:7b:03:7c:b3:5b:f4:e2:ab:41:fa:28:e4:ee:
         f6:52:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net