Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138332e302f32342d3234203d3e20323132303730.roa
File:                     3138352e3231352e3138332e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier:          dVsZa6zm0Ai7NgG6Zqyzw9wEoKlwbUMv4NJb79z6nOg=
Subject key identifier:   F7:9F:10:54:41:31:57:4B:C9:8D:08:88:84:BF:BB:76:D0:1E:65:9C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3F779BB88ECCBBBAC008E2E3990BE5BF938EF7F3
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138332e302f32342d3234203d3e20323132303730.roa
Signing time:             Mon 04 Jan 2021 14:54:06 +0000
ROA not before:           Mon 04 Jan 2021 14:49:06 +0000
ROA not after:            Mon 03 Jan 2022 14:54:06 +0000
asID:                     212070
IP address blocks:        185.215.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:77:9b:b8:8e:cc:bb:ba:c0:08:e2:e3:99:0b:e5:bf:93:8e:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan  4 14:49:06 2021 GMT
            Not After : Jan  3 14:54:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:e1:2e:b9:25:ec:b3:70:f7:1a:6e:d3:f2:
                    97:86:e8:bf:f0:ee:78:33:c6:03:ed:18:b3:2e:87:
                    e3:62:48:ee:0e:bc:d4:c8:e3:53:5f:5f:78:85:9c:
                    87:d5:49:bb:09:6d:bb:8c:ea:24:da:72:40:64:e4:
                    93:0c:73:a7:a5:07:b6:c4:2a:ca:3c:4b:8b:2b:8a:
                    25:e7:2d:d5:ea:1e:1f:6d:85:dc:9c:bd:a0:36:4b:
                    68:3e:84:20:8a:d3:9a:df:34:8b:25:4c:25:07:3b:
                    d9:c5:8a:84:10:9b:3f:2c:96:19:49:7a:2c:da:34:
                    0c:f0:95:d1:1e:0d:88:02:c4:ac:4d:23:c7:16:7b:
                    8c:bf:e9:b9:45:19:cd:af:1c:cd:e5:58:6d:44:e7:
                    5c:3b:37:cc:c8:e1:1b:e3:5d:53:d4:5b:b8:80:eb:
                    bd:d4:99:2f:76:24:8d:aa:4b:6d:67:79:34:b0:bb:
                    ac:47:c5:8c:ed:1a:36:d0:fd:5c:dc:ab:64:2e:20:
                    08:f8:af:86:58:37:ab:64:bc:61:28:c2:df:63:09:
                    b7:24:55:ad:cd:bd:e9:d8:8d:3e:d8:88:54:ac:c3:
                    54:53:e3:61:86:c9:1f:8f:4b:e7:c4:96:6b:93:1a:
                    4b:32:8a:de:05:a6:38:2f:5b:e1:08:cf:19:35:ec:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:10:54:41:31:57:4B:C9:8D:08:88:84:BF:BB:76:D0:1E:65:9C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138332e302f32342d3234203d3e20323132303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:76:ff:d1:f8:3d:a1:1b:24:a2:80:07:b7:4c:fa:c1:fe:a0:
         e1:29:d4:84:1c:db:73:5e:73:e1:dd:c6:0a:02:ff:42:f9:31:
         b5:75:58:40:1d:b6:ae:a2:fb:2e:40:cc:f2:26:53:a8:75:90:
         ff:3b:fe:f7:88:41:bf:81:d5:9b:d4:e9:47:4f:16:9a:1b:c0:
         f0:16:a3:96:31:4b:6a:08:69:8f:d5:e3:1f:7f:a7:be:b5:15:
         3d:42:80:ac:b4:02:93:97:41:5e:dc:43:3d:5f:9b:53:ac:8d:
         37:fe:5e:b4:72:0b:6c:9c:fc:02:b8:12:48:c3:d8:01:88:87:
         3b:d4:39:53:8f:95:0c:4c:56:63:cb:9a:bc:84:d6:34:6b:6d:
         5a:50:2f:e9:ba:62:09:7d:b8:7c:90:1a:13:90:49:8e:3a:b1:
         0d:75:78:0e:b2:be:a7:14:96:18:5c:78:46:61:2b:38:a1:d7:
         f2:38:8b:8c:8b:4a:60:05:bb:78:ec:5b:50:be:a7:7a:dd:45:
         a7:1d:b9:8f:e8:6a:af:53:9e:73:11:78:12:aa:99:af:ac:fb:
         2d:f0:18:d8:6a:a2:06:23:b7:1e:11:70:94:27:56:4b:22:07:
         61:31:52:f0:e6:27:a6:86:e9:48:93:d7:e5:1d:04:2b:92:70:
         37:36:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net