Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134342e302f32342d3332203d3e20313336373837.roa
File:                     38322e3138302e3134342e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          dXdJOoMFK8aQLE1iDl2MG1viVKRczYacuK5FLzSSRxM=
Subject key identifier:   1E:80:79:94:3C:46:25:81:BC:1B:67:25:9B:E2:2E:33:28:3B:01:1E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       79955E6B132B6C3C3AE0A4D191008FC982971AD8
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134342e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:42:03 +0000
ROA not before:           Wed 28 Dec 2022 09:37:03 +0000
ROA not after:            Wed 27 Dec 2023 09:42:03 +0000
asID:                     136787
IP address blocks:        82.180.144.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:95:5e:6b:13:2b:6c:3c:3a:e0:a4:d1:91:00:8f:c9:82:97:1a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:37:03 2022 GMT
            Not After : Dec 27 09:42:03 2023 GMT
        Subject: CN=1E8079943C462581BC1B67259BE22E33283B011E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:91:3e:c2:b5:db:b7:6f:c3:31:93:9f:2f:
                    ef:60:a1:5c:02:09:da:aa:c5:e6:d9:db:42:45:8a:
                    94:b9:75:a2:3d:42:d0:93:f5:38:34:1f:36:75:85:
                    40:5c:2c:24:09:5a:6f:40:05:6d:00:67:12:ef:be:
                    3f:a2:80:cb:82:74:99:75:60:15:3e:8b:8f:dc:5e:
                    34:99:ab:ec:8e:ad:d8:58:fb:2e:1a:5b:c3:dc:33:
                    06:0a:ea:63:33:39:26:37:57:26:bf:35:45:30:a8:
                    60:cd:fc:7c:9a:d2:36:c5:eb:1c:af:6a:83:e8:bc:
                    0d:19:85:0f:2d:72:64:a5:57:87:bc:1d:db:19:25:
                    89:a3:b2:dc:8f:64:0b:d3:85:70:69:11:a7:f1:22:
                    41:6b:95:65:72:5b:1c:f5:24:30:d2:45:ab:3c:11:
                    8c:a9:41:73:62:22:b8:4f:bf:ee:9b:9a:d6:98:b4:
                    1f:b1:a1:41:54:de:1f:72:2d:e2:2f:8c:74:60:55:
                    02:47:72:da:40:e4:40:d5:8b:c7:b0:44:1d:78:97:
                    40:c0:88:43:51:a5:e6:9a:9f:64:39:c8:c5:9d:73:
                    ff:24:f1:4d:67:6b:d6:2a:1f:72:2a:3e:25:96:89:
                    f8:19:ad:18:4f:9b:f5:14:f7:c2:87:1b:cf:b3:7a:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:79:94:3C:46:25:81:BC:1B:67:25:9B:E2:2E:33:28:3B:01:1E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134342e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:88:a6:98:43:36:16:db:03:3c:66:4f:0c:18:f0:ef:82:
         89:38:97:66:ed:51:49:db:ef:1c:be:1f:e4:be:e3:a2:f9:f5:
         b5:11:91:4e:12:50:33:c2:8e:8b:dd:f0:e1:cb:21:14:d5:9a:
         2a:7a:da:ba:a1:22:72:1e:a3:01:43:21:8e:6c:2e:90:ff:45:
         7f:9b:e6:65:34:18:00:dd:c1:fd:7b:44:dc:e4:64:f0:a0:28:
         53:68:70:39:79:0e:c2:e1:e5:59:de:39:39:d9:ec:bf:8e:22:
         8b:cf:44:9c:fa:f0:80:48:1a:d1:ba:d5:6b:a8:41:2e:24:4c:
         13:c1:8c:06:c3:e5:6a:fa:d8:02:5b:2f:7c:9a:5a:3f:5a:bc:
         bf:0a:04:2e:0f:36:06:77:84:47:b4:39:c6:da:8e:fc:00:8a:
         e8:58:42:6e:04:35:34:85:1c:f7:e2:03:80:0d:3c:59:41:72:
         68:81:cb:0f:99:0e:3c:68:0c:ab:37:50:89:70:94:4c:99:d0:
         0a:1c:4f:7d:c6:01:e5:81:f8:e5:b6:c7:6b:55:cd:92:09:c8:
         89:ba:35:6e:1b:7a:1d:95:fd:89:20:b6:f6:96:02:63:f1:96:
         3a:f1:51:12:d0:fe:6f:6b:e5:82:e6:b2:fc:39:c6:6a:da:4a:
         46:2b:67:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net