Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3133302e302f32332d3234203d3e203437353833.roa
File:                     38322e3138302e3133302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          RtNXVLhuMc3wW8cla2nQPyyNnvizez/gf9hhX9x36YA=
Subject key identifier:   C9:90:B1:2A:7C:06:99:42:D2:81:11:9E:26:C2:13:D2:AF:8A:15:5F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       68259F0FE22A6CE71A00EEAC3E2E6999D86D4E55
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3133302e302f32332d3234203d3e203437353833.roa
Signing time:             Thu 02 Feb 2023 16:32:57 +0000
ROA not before:           Thu 02 Feb 2023 16:27:57 +0000
ROA not after:            Thu 01 Feb 2024 16:32:57 +0000
asID:                     47583
IP address blocks:        82.180.130.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:25:9f:0f:e2:2a:6c:e7:1a:00:ee:ac:3e:2e:69:99:d8:6d:4e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb  2 16:27:57 2023 GMT
            Not After : Feb  1 16:32:57 2024 GMT
        Subject: CN=C990B12A7C069942D281119E26C213D2AF8A155F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:41:8b:97:62:b0:56:f6:b1:12:26:69:b9:
                    ad:2a:18:5f:66:f2:d3:7f:2e:f2:7f:03:22:44:84:
                    cd:8d:f1:c2:33:6d:ba:63:f9:de:4b:83:6c:f4:d0:
                    4d:18:b8:35:14:34:9d:fe:21:3b:2b:47:ae:52:fe:
                    59:a0:4d:7b:a0:55:22:bd:b5:e6:eb:ff:ac:28:20:
                    42:f5:31:0b:a0:55:6c:f7:ae:9a:1f:bd:77:e2:78:
                    d3:96:de:42:8e:27:7c:7d:cc:33:62:33:f7:47:8f:
                    b1:78:54:d3:ae:be:09:0c:09:07:68:0b:19:ea:93:
                    c7:fe:de:da:09:d2:86:1e:46:84:50:a3:a4:ef:15:
                    e2:a1:96:aa:05:83:56:9d:da:93:d5:7f:48:48:6d:
                    d8:bf:e7:51:b0:8c:52:00:db:c7:bb:b8:b3:99:13:
                    4a:3c:d3:a7:ee:1a:ff:b1:af:05:3e:66:de:90:6d:
                    52:ec:36:46:9c:49:93:5c:aa:f6:cd:9a:dd:7c:44:
                    51:46:a4:92:b7:ba:ec:2b:bb:44:34:7d:77:bb:91:
                    9e:da:00:c7:b3:1b:79:b4:44:e7:74:f6:d1:1f:de:
                    33:a6:22:36:2f:bc:a0:b7:3c:39:bd:56:a6:82:e8:
                    84:76:49:5b:11:6f:ad:92:e3:d0:b8:00:69:3c:d4:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:90:B1:2A:7C:06:99:42:D2:81:11:9E:26:C2:13:D2:AF:8A:15:5F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3133302e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:37:30:d8:c7:c4:29:a9:3e:c4:df:84:e9:ff:ad:ac:53:
         88:7a:ca:0e:cb:28:dc:57:a0:e7:24:76:fe:4b:37:40:38:c4:
         20:bf:14:a4:bc:15:ab:e0:f7:63:18:04:a7:7f:8e:fb:06:ce:
         7e:2c:b8:6e:a7:97:61:f8:98:fd:dc:de:86:53:bc:a9:fb:50:
         78:b5:8d:f7:be:78:09:4f:55:43:92:b0:23:80:68:c7:52:4a:
         1a:54:58:5b:83:11:07:7a:9f:7d:a7:77:12:15:50:f2:a1:22:
         50:f5:b8:17:e9:24:38:16:36:f7:cc:c9:45:23:07:1d:7f:57:
         e8:f9:0b:25:3f:1d:0e:8b:58:65:a8:59:1e:54:c7:3b:9d:f3:
         81:1c:22:1f:3f:9d:c8:b2:6e:75:a0:60:70:22:16:02:3f:f1:
         8e:07:ca:5c:bc:b0:9a:1e:5c:2c:4f:34:ee:ae:c4:59:8d:7e:
         d0:aa:30:b8:68:cc:ca:a2:70:c0:c2:47:e2:40:47:4e:bf:27:
         cb:cb:47:76:33:64:b8:20:86:e2:e4:96:c9:cc:91:30:32:b9:
         58:b6:60:1e:80:f5:48:8c:bc:6a:6f:c6:f0:63:8c:3e:fa:f4:
         e1:34:ec:67:2c:2a:d1:41:0f:ea:8b:57:b5:6c:e4:88:99:53:
         56:a6:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net