Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          wDqG0Rk4bWxDPCcftZ7pWFNMElZOAMqYi3QquBYgy9k=
Subject key identifier:   9E:A8:F7:91:0F:FC:68:55:59:85:99:F1:66:28:C7:EC:3C:54:78:3C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       532E3BD47DC2AE876462B2980BD6322057B2F86B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:30 +0000
ROA not before:           Sat 22 Oct 2022 04:29:30 +0000
ROA not after:            Sat 21 Oct 2023 04:34:30 +0000
asID:                     51167
IP address blocks:        185.215.166.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2e:3b:d4:7d:c2:ae:87:64:62:b2:98:0b:d6:32:20:57:b2:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:30 2022 GMT
            Not After : Oct 21 04:34:30 2023 GMT
        Subject: CN=9EA8F7910FFC6855598599F16628C7EC3C54783C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:81:21:6d:20:3e:92:ab:23:96:5f:55:e1:64:
                    10:ac:a9:5c:bd:a8:d9:53:e3:83:e4:4e:06:29:c3:
                    d3:cc:97:e9:7a:84:c6:53:e0:a5:10:0a:2e:44:49:
                    0b:27:fe:d8:68:cc:1b:75:39:86:fb:26:16:bd:5e:
                    52:b3:43:f3:87:1e:69:d7:29:30:87:61:06:e1:27:
                    be:1f:22:f1:ff:05:40:99:cb:de:6b:c7:e3:c2:69:
                    b8:bb:e7:98:6c:68:0b:25:4d:a4:c2:fe:db:8a:b0:
                    c8:04:8c:2a:b1:6c:4d:44:1f:61:98:d4:33:39:ca:
                    58:99:4b:29:7c:c1:17:b4:b4:4f:c5:91:9e:06:ac:
                    f7:a0:63:92:5b:b1:ff:73:b7:67:7a:b9:57:15:06:
                    0e:2d:23:6e:8b:c2:e4:c2:ab:90:d3:09:22:63:ad:
                    aa:07:0d:3b:bc:fc:5a:19:ad:31:96:a3:78:31:2e:
                    90:59:59:3c:e2:6c:7a:16:4d:07:6e:9f:b1:06:4c:
                    32:dc:98:95:a1:13:e6:3d:fd:0f:90:04:8a:8c:d2:
                    2c:f9:c3:5f:09:c0:23:48:5e:f0:31:e7:8e:c2:2a:
                    d4:94:b0:3b:be:ed:b8:f0:80:71:5b:4b:0c:14:e7:
                    f6:80:30:20:6f:8c:0d:42:ba:2f:39:21:97:aa:af:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:F7:91:0F:FC:68:55:59:85:99:F1:66:28:C7:EC:3C:54:78:3C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:54:36:b7:8f:42:44:ed:c0:4d:cf:38:6a:d0:0c:1c:fd:02:
         43:b9:4d:04:bb:be:60:f3:8d:b8:06:7e:34:33:0a:1a:15:4b:
         82:49:94:22:b9:97:b4:65:8c:26:66:46:dc:70:4a:ac:68:d8:
         0d:2d:78:d2:d5:76:61:15:10:64:f7:5b:cd:8f:cb:25:db:ca:
         ba:f3:0f:df:67:8d:a4:89:a1:22:2d:bd:06:51:28:0f:f4:79:
         ec:c8:d6:59:43:83:e8:0b:28:d0:56:ad:fc:41:b1:72:d4:d7:
         03:83:30:69:16:4b:26:a2:10:79:55:17:a1:5e:43:26:9c:47:
         ce:de:8f:66:25:5f:41:cd:45:a1:fe:e6:06:05:9b:0f:00:e6:
         cd:39:1d:fa:19:14:a9:42:9d:ef:ec:fa:14:2a:8d:e3:97:7b:
         76:08:ce:aa:81:75:5b:6c:02:6e:23:eb:1c:5a:2e:6f:cf:76:
         4a:1e:44:35:84:84:57:82:73:1f:19:24:57:15:fc:6b:dc:71:
         05:ab:eb:87:21:4c:97:94:cc:bb:ad:97:ce:ae:ca:48:46:8c:
         f0:b8:e1:7c:6e:9c:e8:09:5f:11:68:39:79:78:ec:89:36:b5:
         a4:8e:b2:67:58:48:ce:b6:63:db:4b:ac:27:cf:85:ec:ae:4e:
         85:2e:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net