Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa
File:                     38322e3138302e3133322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          ck0EjZnUT5U3KlHuX/6LIa31KKPMUZXzitSVj0iJjY4=
Subject key identifier:   1D:85:8B:15:5A:CF:AC:87:BC:65:27:ED:2A:64:53:0E:D6:D3:92:AA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4FCB2F27B4F0D5CF40554C78A3085158AA8BB93C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa
Signing time:             Thu 02 Feb 2023 16:33:36 +0000
ROA not before:           Thu 02 Feb 2023 16:28:36 +0000
ROA not after:            Thu 01 Feb 2024 16:33:36 +0000
asID:                     47583
IP address blocks:        82.180.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cb:2f:27:b4:f0:d5:cf:40:55:4c:78:a3:08:51:58:aa:8b:b9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb  2 16:28:36 2023 GMT
            Not After : Feb  1 16:33:36 2024 GMT
        Subject: CN=1D858B155ACFAC87BC6527ED2A64530ED6D392AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f4:c2:d7:52:d3:48:fe:d4:e9:fb:3b:eb:09:
                    c2:07:85:fe:f3:49:38:58:ef:93:1f:05:39:2b:1e:
                    6b:4c:29:fa:55:d4:10:df:5c:86:f5:fd:63:82:3f:
                    d8:b4:51:82:61:fe:89:ef:46:e8:16:16:d5:cc:56:
                    c1:d6:c0:06:5c:ef:40:8e:f8:07:da:39:d5:4b:37:
                    30:37:12:70:8a:d4:5b:19:e1:5d:a6:e2:8c:34:c4:
                    eb:c2:fd:cc:42:d3:ab:3a:75:0f:c8:24:7f:2e:84:
                    3b:7d:03:c0:8f:1e:b9:cb:25:89:99:07:f1:7e:fa:
                    e4:e4:ae:4f:c9:91:54:85:50:3f:e5:9a:f9:23:1a:
                    9b:5e:32:0a:7d:e5:63:d2:78:ad:0d:db:f1:75:d1:
                    4c:7c:66:71:0b:80:ae:38:a6:29:36:1c:c3:03:c1:
                    31:cf:b8:08:5b:3f:12:3d:e6:b1:49:87:db:5e:5b:
                    f0:bc:00:97:12:e9:e6:b3:6a:93:f4:43:57:ef:97:
                    bf:9e:8b:a4:a0:38:79:06:03:a9:50:1b:7b:5b:d8:
                    1e:b6:06:9a:ae:fe:c4:93:2e:fd:ef:3f:58:69:3d:
                    63:c7:dc:dd:30:ff:d3:3c:91:a2:a8:86:f3:6f:6b:
                    a2:a3:2c:16:45:6c:3f:bd:35:e6:38:29:a1:95:62:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:8B:15:5A:CF:AC:87:BC:65:27:ED:2A:64:53:0E:D6:D3:92:AA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:92:d7:a7:73:9a:73:4a:e0:0c:0b:ae:de:b4:c8:bd:23:9c:
         2a:8a:ef:ba:65:84:ba:a6:a2:5e:56:7d:60:cb:3c:e8:9a:62:
         b5:00:4a:e6:d6:dc:9f:ea:cf:58:10:b6:10:86:c2:78:3f:06:
         aa:af:21:fe:21:08:94:98:9e:03:7b:be:9c:2a:e7:06:f9:85:
         df:b3:d2:b5:54:f8:1b:32:f6:ec:7e:84:8c:f7:61:10:7d:4f:
         2b:39:d7:d8:9a:38:2b:6e:17:32:ce:bc:0b:b8:0d:f0:74:76:
         a9:af:fa:c3:e6:4a:bd:73:d2:51:18:0c:53:b7:22:0b:19:0b:
         5f:64:e6:fd:40:f2:c8:70:6f:64:9b:ec:a1:80:e6:b0:f8:f0:
         87:65:19:b6:42:23:e3:dc:7b:f6:a9:b7:15:d1:cb:21:b4:eb:
         d3:f0:f7:6a:9b:80:c8:ef:91:f2:83:32:2f:19:62:b8:3b:8f:
         9d:d9:95:05:41:cc:3a:d1:b4:4c:2d:51:32:11:02:b6:08:d0:
         24:8e:f0:a3:5a:49:01:e3:f9:d4:3c:ae:bf:c6:1d:f1:0e:b7:
         2a:ac:fb:8e:15:d0:ea:4c:50:4a:6a:51:93:48:27:25:df:4b:
         92:ba:d4:c8:64:54:d4:56:27:90:25:a4:fc:b1:5e:9d:62:f7:
         1c:55:93:26
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUT8svJ7Tw1c9AVUx4owhRWKqLuTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAyMDIxNjI4MzZaFw0yNDAyMDExNjMzMzZaMDMxMTAvBgNV
BAMTKDFEODU4QjE1NUFDRkFDODdCQzY1MjdFRDJBNjQ1MzBFRDZEMzkyQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf9MLXUtNI/tTp+zvrCcIHhf7z
SThY75MfBTkrHmtMKfpV1BDfXIb1/WOCP9i0UYJh/onvRugWFtXMVsHWwAZc70CO
+AfaOdVLNzA3EnCK1FsZ4V2m4ow0xOvC/cxC06s6dQ/IJH8uhDt9A8CPHrnLJYmZ
B/F++uTkrk/JkVSFUD/lmvkjGpteMgp95WPSeK0N2/F10Ux8ZnELgK44pik2HMMD
wTHPuAhbPxI95rFJh9teW/C8AJcS6eazapP0Q1fvl7+ei6SgOHkGA6lQG3tb2B62
Bpqu/sSTLv3vP1hpPWPH3N0w/9M8kaKohvNva6KjLBZFbD+9NeY4KaGVYvQjAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUHYWLFVrPrIe8ZSftKmRTDtbTkqowHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODMyMmUzMTM4MzAyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0
MzczNTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAFStIQwDQYJKoZIhvcNAQELBQADggEBABOS16dz
mnNK4AwLrt60yL0jnCqK77plhLqmol5WfWDLPOiaYrUASubW3J/qz1gQthCGwng/
BqqvIf4hCJSYngN7vpwq5wb5hd+z0rVU+Bsy9ux+hIz3YRB9Tys519iaOCtuFzLO
vAu4DfB0dqmv+sPmSr1z0lEYDFO3IgsZC19k5v1A8shwb2Sb7KGA5rD48IdlGbZC
I+Pce/aptxXRyyG069Pw92qbgMjvkfKDMi8ZYrg7j53ZlQVBzDrRtEwtUTIRArYI
0CSO8KNaSQHj+dQ8rr/GHfEOtyqs+44V0OpMUEpqUZNIJyXfS5K61MhkVNRWJ5Al
pPyxXp1i9xxVkyY=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net