Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3138372e3136382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          8Lt+9HlC3FEsvEQVHpnjRi/8Cb8RfK+PT81LxcB/WsI=
Subject key identifier:   D1:9F:A4:59:CA:F8:7F:12:EC:AD:F5:02:66:E8:B9:F3:9A:C2:66:F6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       075099A1489CC2E9C0B55C42755A5CF3CC0389D1
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:09 +0000
ROA not before:           Sat 22 Oct 2022 04:29:09 +0000
ROA not after:            Sat 21 Oct 2023 04:34:09 +0000
asID:                     136787
IP address blocks:        185.187.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:50:99:a1:48:9c:c2:e9:c0:b5:5c:42:75:5a:5c:f3:cc:03:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:09 2022 GMT
            Not After : Oct 21 04:34:09 2023 GMT
        Subject: CN=D19FA459CAF87F12ECADF50266E8B9F39AC266F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:a7:bf:8e:5d:5d:b0:c4:07:89:52:9e:3c:
                    b6:e7:a9:2e:c2:2e:44:3a:5e:1f:31:3a:6d:82:bc:
                    9b:b5:da:a4:12:81:a9:9d:ba:e6:ad:2e:ab:4f:7b:
                    22:d0:a2:8d:84:ea:39:30:1f:9f:44:6a:09:e1:53:
                    29:f9:78:8c:d4:da:1a:37:b2:9b:80:92:7a:af:1f:
                    06:bc:4d:4f:ec:9a:8f:ef:07:c0:27:8a:67:ff:28:
                    38:3b:75:ee:24:34:36:e0:6c:f5:3a:83:b3:75:0c:
                    30:e0:de:63:c7:4e:e3:8d:14:2b:06:f8:0d:98:5c:
                    19:f8:75:b0:6d:ce:06:12:cc:70:a8:4f:f0:48:fa:
                    f3:3c:24:20:23:01:cd:39:9a:93:95:53:bc:7e:c2:
                    ea:d2:56:63:52:b3:80:2e:d8:dc:0e:37:8a:8b:4e:
                    33:85:89:ee:c8:3a:02:06:aa:48:f2:5a:aa:12:c2:
                    5b:5f:93:7c:34:eb:1d:51:6c:ba:49:f7:0d:c7:fe:
                    cb:87:39:db:d3:6c:f8:b0:c4:d4:bb:04:77:af:e7:
                    3e:95:95:2e:c1:5d:ba:bf:5a:41:3b:1d:b8:7c:65:
                    8f:b7:0a:d1:af:b1:50:bb:47:0f:a1:76:9a:4c:37:
                    48:c3:48:eb:c5:03:12:c4:3e:3e:73:07:91:71:3d:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9F:A4:59:CA:F8:7F:12:EC:AD:F5:02:66:E8:B9:F3:9A:C2:66:F6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:25:c1:94:76:81:89:86:c1:ea:43:d3:77:19:77:1c:6d:2b:
         67:56:34:ce:c5:1c:48:15:ae:f4:9e:86:74:6a:b8:a9:da:32:
         1e:49:a0:45:09:46:44:68:27:ea:dc:49:6f:23:a9:70:69:8d:
         83:f6:8c:2b:9d:8d:a3:a3:a2:75:98:97:c4:c0:b4:90:12:86:
         f0:42:da:a8:d1:21:33:a1:c2:6e:84:d3:8b:0d:5f:bd:ef:02:
         76:74:d5:da:b0:43:a0:fb:df:43:c8:8c:1f:09:3e:f2:37:7b:
         f2:7b:2e:80:d6:be:58:bb:5e:68:2a:8d:a5:e5:e3:05:af:3a:
         b7:40:8e:c0:f6:b8:c8:c0:de:35:ad:fd:8a:e4:2d:35:65:eb:
         8b:d4:31:2d:98:09:8a:ac:4f:75:85:a2:b6:93:c2:8b:9b:2e:
         85:68:f6:7f:d5:1b:91:f8:84:c3:cd:f6:ec:d1:50:1d:55:3a:
         c5:61:ac:5f:9e:e5:e8:f2:eb:5f:0a:cc:d8:32:55:6a:f7:db:
         81:2f:13:74:89:b5:fa:8a:4e:e4:70:53:31:99:b7:53:a2:be:
         16:15:bf:98:59:82:d6:86:bc:a4:28:37:74:3f:f3:a6:a6:9f:
         b1:cf:e7:63:7e:82:94:b7:7c:7f:00:b0:6c:db:63:97:fc:f2:
         fc:fa:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net