Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3139372e3234382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          FXPbSkxoY+CgemeS+GT8MCLba7rrAfZDKvVj41M/hmI=
Subject key identifier:   9A:72:52:D5:D2:90:C0:25:22:16:F4:E4:68:95:39:1A:70:D4:C3:F2
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1DCDCDA71001620419A28B846192CA5C86498E56
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:24:19 +0000
ROA not before:           Wed 28 Dec 2022 09:19:19 +0000
ROA not after:            Wed 27 Dec 2023 09:24:19 +0000
asID:                     136787
IP address blocks:        185.197.248.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cd:cd:a7:10:01:62:04:19:a2:8b:84:61:92:ca:5c:86:49:8e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:19:19 2022 GMT
            Not After : Dec 27 09:24:19 2023 GMT
        Subject: CN=9A7252D5D290C0252216F4E46895391A70D4C3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:ef:d4:8a:1c:73:11:74:51:9f:a5:5f:f6:
                    c2:32:ea:e6:e2:a4:1e:87:26:19:88:1e:17:98:e8:
                    41:a3:23:74:74:44:69:72:80:f4:7c:2d:cf:36:cd:
                    38:b9:3f:fe:69:9a:54:3d:05:6c:16:e5:dc:2c:0e:
                    23:bf:d3:a5:17:c9:7d:b1:0c:fe:c6:74:9b:96:52:
                    c7:a4:19:8b:ae:c2:12:7a:c6:98:a5:9f:94:1d:84:
                    20:76:22:d4:34:62:8d:f5:c6:f2:e8:85:23:23:10:
                    52:82:30:87:02:ce:68:38:15:29:dc:62:f0:85:8a:
                    e5:e7:b9:93:cd:e7:81:fc:88:27:7b:72:68:54:22:
                    73:3f:a5:63:b6:11:4d:5c:14:94:9c:66:fa:bf:9f:
                    ac:45:24:8a:77:bb:0a:16:43:48:1c:bb:e4:11:54:
                    0e:ff:f9:33:23:35:94:ff:a2:48:cd:7e:40:fa:73:
                    fe:9a:5a:3b:28:9e:4e:84:cb:bc:ca:f0:8d:a0:ff:
                    e8:be:99:0b:b4:6a:7b:c4:2f:d8:4f:15:25:39:78:
                    18:8f:e0:e5:ff:3f:86:4f:00:97:00:ba:e3:7d:00:
                    40:22:97:25:ab:96:2e:35:35:35:0a:b2:42:4f:32:
                    0b:10:f6:e6:e1:8f:52:22:61:ee:29:ba:de:a4:01:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:72:52:D5:D2:90:C0:25:22:16:F4:E4:68:95:39:1A:70:D4:C3:F2
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:23:90:83:11:ce:37:15:07:b7:27:5f:41:22:fb:5d:3c:
         28:f4:c3:d2:e4:a3:e8:98:70:56:f7:43:c1:fd:8b:67:64:e0:
         48:ce:8b:25:29:4e:b8:56:77:17:02:e3:0e:bc:c7:bc:d4:15:
         c6:45:c4:03:ab:80:93:91:d1:ea:e7:9c:55:7c:0f:f8:82:ed:
         26:85:30:97:2d:74:f7:e8:7e:b9:d0:3d:ff:9d:b4:23:55:53:
         1c:70:8a:47:1c:06:56:f9:80:32:59:c4:0e:f2:46:b9:17:cf:
         c3:23:28:18:63:fc:a3:1e:34:62:5f:9e:bd:dc:84:d9:0a:84:
         09:48:50:b1:39:40:a1:57:c8:1e:04:33:a0:1f:00:c3:64:4f:
         92:b4:00:3f:f4:ca:aa:5c:d7:c2:49:25:ee:46:1c:84:29:65:
         d7:21:fa:f5:89:1b:a2:09:0d:55:92:30:a7:51:a1:ed:cb:ab:
         b6:f7:dc:72:62:6d:61:9c:cb:16:f7:1a:8e:2b:72:15:3c:c9:
         26:a3:f2:b0:d1:1d:0f:d8:55:56:f5:7e:a7:29:8d:80:cd:a9:
         4f:eb:56:32:30:0a:dc:08:ad:31:4b:24:6b:b4:f5:d4:18:e4:
         a4:f7:c3:9f:68:8d:87:70:46:cb:ac:bb:bb:59:3b:26:33:23:
         bf:14:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net