Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3132382e302f32332d3234203d3e203437353833.roa
File:                     38322e3138302e3132382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          Y0M00ZVmLqL9FcmjfDA4Ousnr0d4m/QcRIn1ppq4NAs=
Subject key identifier:   E5:70:D1:34:40:CE:56:D9:1E:E4:FE:54:E7:C6:45:03:14:73:28:66
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1C99DBC987D63E3DEC29F8C6F6110981DC43C946
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3132382e302f32332d3234203d3e203437353833.roa
Signing time:             Thu 02 Feb 2023 16:32:18 +0000
ROA not before:           Thu 02 Feb 2023 16:27:18 +0000
ROA not after:            Thu 01 Feb 2024 16:32:18 +0000
asID:                     47583
IP address blocks:        82.180.128.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:99:db:c9:87:d6:3e:3d:ec:29:f8:c6:f6:11:09:81:dc:43:c9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb  2 16:27:18 2023 GMT
            Not After : Feb  1 16:32:18 2024 GMT
        Subject: CN=E570D13440CE56D91EE4FE54E7C6450314732866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:2a:01:14:ee:f7:ef:30:d0:3e:19:ac:94:
                    ea:42:5c:a0:62:86:65:cf:c8:b7:9a:a7:23:2c:b6:
                    d0:8d:16:bb:d8:6e:fa:c7:de:24:30:50:4f:81:e9:
                    4b:58:06:44:b7:74:ec:6b:07:a1:01:f8:86:07:5b:
                    0b:22:1c:02:3f:7f:13:44:0c:4d:8a:6b:8e:0e:90:
                    8d:f3:db:f8:c1:f0:fa:e2:74:79:3f:97:4d:87:44:
                    8b:71:91:d1:48:8b:03:54:78:bb:9c:5d:53:fb:1d:
                    30:e7:8b:d2:65:8d:66:c9:21:af:0e:61:68:56:67:
                    72:f9:1f:89:70:60:a7:0d:32:e0:a3:94:ca:08:9b:
                    2d:cb:08:ab:d9:fd:a2:34:25:bd:c5:14:ff:7f:96:
                    19:f4:4b:83:52:16:bc:48:71:86:bf:2b:8a:4c:ad:
                    7c:09:9f:0b:23:09:30:e2:ec:01:cb:c3:00:c8:cc:
                    24:61:3f:51:a4:fc:9d:7a:67:09:6d:af:12:db:1c:
                    da:06:a5:ba:a0:a5:fa:72:e0:5c:d1:92:4d:75:52:
                    13:d4:68:07:44:7e:c8:89:5c:d5:94:08:64:4a:75:
                    2b:0f:74:a1:08:f5:2f:60:c5:47:99:3f:1a:b6:8d:
                    d9:cb:92:04:da:05:32:04:ca:02:b3:a9:1a:89:6f:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:D1:34:40:CE:56:D9:1E:E4:FE:54:E7:C6:45:03:14:73:28:66
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3132382e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:99:bd:73:a0:5a:dd:97:20:ce:19:5d:74:f1:0e:0d:f5:22:
         30:fa:09:08:c2:ac:5d:71:0c:1b:79:b8:24:56:a8:fa:30:ba:
         69:71:38:3f:44:c3:58:c8:74:44:48:b1:6b:ee:4f:7b:7d:4c:
         c4:9b:09:73:1f:22:db:c6:3f:44:70:88:2b:a9:ac:59:dc:2c:
         d5:f4:39:35:98:74:82:aa:27:dd:a5:7a:d3:73:45:7a:91:db:
         58:7a:1b:2f:dd:db:d6:74:9b:1f:c4:bf:f0:4f:12:b0:b3:11:
         1e:6e:8a:bd:d8:60:d0:95:39:41:50:a8:d1:92:15:60:eb:c4:
         a1:f5:38:ad:50:a9:1a:76:4d:59:98:c1:85:69:79:4f:df:d0:
         a0:c5:d7:4e:24:28:7f:4a:18:9c:07:31:6e:d1:c8:1c:f8:aa:
         ee:3f:b2:31:5d:83:7e:31:80:40:67:be:15:ed:da:89:f7:11:
         ce:78:85:de:aa:24:f8:c5:22:19:c6:46:32:09:2d:8c:2f:03:
         2d:d2:f4:9b:9a:ae:da:f5:b0:61:46:e3:85:2e:2c:b8:6d:9c:
         5d:e7:ca:29:bf:44:b6:ab:91:97:03:08:d2:50:ca:3e:56:cd:
         55:75:b2:5e:e5:01:75:f2:9f:5a:72:18:f8:e9:70:81:00:7d:
         72:74:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net