Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa
File:                     3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          cWY5Jy8tEe3vvBOHNmtTndJWmIpfOWJFCHbNTgrktSs=
Subject key identifier:   3A:8F:81:AD:0E:48:82:73:3A:73:44:76:56:7F:F7:3B:3C:BB:E3:DF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       138FDD6E4DBF6BDBE9A7F46F87D0C2619091F73C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:28 +0000
ROA not before:           Sat 22 Oct 2022 04:29:28 +0000
ROA not after:            Sat 21 Oct 2023 04:34:28 +0000
asID:                     51167
IP address blocks:        185.187.170.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8f:dd:6e:4d:bf:6b:db:e9:a7:f4:6f:87:d0:c2:61:90:91:f7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:28 2022 GMT
            Not After : Oct 21 04:34:28 2023 GMT
        Subject: CN=3A8F81AD0E4882733A734476567FF73B3CBBE3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:06:90:2d:d6:f0:17:18:c0:51:7f:23:92:
                    40:d8:7d:b1:58:a5:fd:23:1e:b9:73:71:4b:e5:53:
                    3b:b1:a7:20:8b:25:38:3a:e5:a5:de:2e:a3:18:92:
                    a8:8a:b5:e6:45:a3:5b:2f:bb:ce:c0:89:56:5e:34:
                    91:ad:3b:89:82:85:07:5c:99:8a:9d:c7:0f:71:20:
                    f6:bb:f1:b9:e3:2e:6a:be:45:1c:29:49:df:73:59:
                    94:50:ca:69:0e:12:f9:c3:40:95:ee:4d:98:8c:1a:
                    0f:04:70:1f:51:69:36:82:6d:b0:d2:9e:59:e3:1d:
                    4a:d8:db:a4:74:07:cc:3e:64:da:3f:53:a0:de:3b:
                    75:96:66:d7:06:73:da:c0:91:4a:77:00:bc:a8:72:
                    4e:48:e8:5d:15:22:27:c6:9f:fa:58:6c:65:00:3c:
                    3e:ad:21:c9:dc:a5:fa:7d:75:81:36:c1:8b:9d:9f:
                    55:98:a4:fa:54:a9:7d:38:a4:50:5f:ae:8d:93:74:
                    cc:8a:d2:07:da:c6:68:60:21:3b:90:e5:04:7b:b4:
                    73:ea:f9:44:76:c9:3d:39:b9:da:3a:84:f7:a6:ed:
                    8c:07:93:31:ac:6e:67:44:6e:2f:e9:83:b8:6e:9b:
                    02:83:1b:fc:9c:1c:7e:56:a9:03:65:a6:19:76:8b:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8F:81:AD:0E:48:82:73:3A:73:44:76:56:7F:F7:3B:3C:BB:E3:DF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:b5:ed:60:13:e9:85:0c:4a:04:7c:7c:00:39:71:17:59:38:
         d0:6d:76:6d:ce:ef:18:7f:04:9a:8b:65:20:42:f9:86:b8:fe:
         46:79:d6:90:56:bb:32:91:36:0e:60:74:aa:09:6c:31:63:cf:
         20:52:32:5d:ea:0e:37:48:f0:f7:c9:45:49:56:aa:46:1c:f1:
         1f:5e:ca:30:2c:59:ba:da:1a:b3:19:73:32:b4:1a:93:8b:7c:
         8b:7a:d0:cb:18:6c:cd:39:67:17:cc:f1:e8:01:b5:b7:67:47:
         b8:7f:18:db:2f:d8:83:5f:e5:15:54:57:b9:0b:96:d4:87:cd:
         27:b7:e2:d1:ec:b4:11:be:93:c8:ba:d2:37:bc:44:7b:a8:48:
         47:d5:71:16:51:85:22:a6:e1:d3:a4:3f:6f:c5:5e:16:f5:dd:
         a1:d6:9f:77:07:5f:56:9a:f0:43:34:65:00:1f:98:d5:64:88:
         84:05:4a:88:ed:5a:18:b4:e2:02:1a:f4:16:02:2e:f1:c3:19:
         10:84:ce:aa:1e:5e:f4:88:07:23:58:68:63:25:3f:50:0a:3c:
         23:6b:e4:56:39:15:35:29:a2:5a:1c:c3:98:8f:d1:73:da:b9:
         ab:d9:f9:eb:9c:b5:ca:c1:ad:3b:ad:61:47:6c:99:a4:60:37:
         7b:f5:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net