Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
File:                     38322e3138302e3134302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          oNRMrb4yQqsL1iCwYk4zVA8ruqDl/EG98VQMdrlcogY=
Subject key identifier:   50:BA:0D:40:E0:F1:A6:11:30:09:1D:FE:30:CF:CC:27:B4:15:E2:09
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4402164168E5A6D0965B58074FDD10FEAD296A49
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:20 +0000
ROA not before:           Sat 22 Oct 2022 04:29:20 +0000
ROA not after:            Sat 21 Oct 2023 04:34:20 +0000
asID:                     47583
IP address blocks:        82.180.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:02:16:41:68:e5:a6:d0:96:5b:58:07:4f:dd:10:fe:ad:29:6a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:20 2022 GMT
            Not After : Oct 21 04:34:20 2023 GMT
        Subject: CN=50BA0D40E0F1A61130091DFE30CFCC27B415E209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:90:79:f3:b9:bc:85:56:fb:2b:67:9d:37:
                    bc:05:99:c4:24:41:55:eb:57:cf:58:2b:97:14:09:
                    8b:28:ce:1c:a8:33:6b:85:45:52:1e:7a:4d:f7:db:
                    6e:2d:77:ba:35:e6:4e:3a:eb:9d:12:86:3b:bc:8a:
                    5a:55:2c:ae:7e:0b:7a:aa:44:30:5d:5e:3f:e7:fc:
                    6a:00:41:7d:21:c8:5d:51:aa:b2:84:02:4d:5b:af:
                    2c:f5:65:4d:fd:66:d1:a7:5b:7a:bc:01:37:0a:af:
                    87:2d:22:0e:00:b6:c3:04:31:aa:72:a5:6c:cf:a5:
                    b0:c9:70:28:8d:92:91:7f:33:de:d9:2d:21:7e:80:
                    3d:47:74:13:0a:67:57:3a:7b:05:ca:24:d1:6d:96:
                    c4:05:49:3d:c8:b4:16:f9:79:f8:9b:da:47:40:ee:
                    8e:3f:ab:ef:e0:a9:bc:c7:f5:b2:45:9b:98:8d:1a:
                    58:33:3b:e7:ae:f5:cf:47:58:1c:be:b9:e8:b9:b5:
                    8c:39:09:5e:5a:b4:35:46:27:c1:4f:5d:4b:d6:f7:
                    85:bd:a7:cb:fd:c5:f1:57:64:a2:58:fb:86:5a:f9:
                    80:86:39:c0:aa:0a:3b:df:9d:f2:1b:c3:59:d6:bf:
                    87:ee:18:d3:e6:23:12:02:13:6c:17:83:3e:d3:4d:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BA:0D:40:E0:F1:A6:11:30:09:1D:FE:30:CF:CC:27:B4:15:E2:09
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:aa:f8:d9:3c:0d:6c:a2:3d:1d:be:60:94:9c:e7:0d:59:
         cb:bf:8a:1d:97:25:27:40:fa:9d:23:09:40:cc:29:73:52:d1:
         63:d8:a0:0f:cc:27:46:25:b0:74:8e:ae:16:00:d8:ec:b2:91:
         ae:01:91:59:fa:cb:ca:5f:f7:17:6e:23:db:64:69:93:05:6d:
         57:42:49:4a:b2:db:c9:d4:e1:be:15:38:4b:20:d0:ed:64:79:
         01:b2:ca:01:c8:36:ec:72:1b:d3:c6:80:a3:71:1d:f2:85:2b:
         34:51:7d:fc:f6:99:c1:c4:e4:2d:e6:c5:0c:3d:66:2e:cd:b2:
         04:51:45:0b:77:99:5c:cd:34:8a:ed:12:f9:ec:04:df:c2:0b:
         e7:02:49:6e:e1:b6:a5:e9:e8:06:6a:99:e1:1e:b9:82:b6:31:
         51:0f:c7:97:bb:f9:4f:51:06:d0:9f:03:52:f5:8d:bb:aa:75:
         48:ee:a1:07:1e:6a:6a:8d:61:2b:5c:60:e6:4f:90:f5:fc:fa:
         82:3d:5e:d3:28:da:fc:f5:82:e2:ea:a1:a1:41:c5:3a:21:89:
         2e:cc:30:23:d7:42:1b:b7:98:b2:fd:d3:64:3d:3d:c9:31:48:
         b9:47:1b:71:63:49:63:40:57:98:d6:c3:e7:8d:71:64:67:3f:
         ee:ed:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net