Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa
File:                     38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          gBKEttyuuCjULV2lAFwWETm/KDorHSHQr6Y9eSBLlIk=
Subject key identifier:   63:79:51:57:BC:21:CF:68:FD:EF:7F:D8:7B:C6:B1:E7:67:18:3F:AB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       52AB74050D13B9E9FF941C7F50F86415F86037C6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:42:44 +0000
ROA not before:           Wed 28 Dec 2022 09:37:44 +0000
ROA not after:            Wed 27 Dec 2023 09:42:44 +0000
asID:                     136787
IP address blocks:        82.180.147.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:74:05:0d:13:b9:e9:ff:94:1c:7f:50:f8:64:15:f8:60:37:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:37:44 2022 GMT
            Not After : Dec 27 09:42:44 2023 GMT
        Subject: CN=63795157BC21CF68FDEF7FD87BC6B1E767183FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:97:73:48:f1:82:b6:a2:0c:64:5f:58:c0:
                    12:43:17:03:a4:36:40:e0:a2:13:ab:23:91:f1:f7:
                    d1:57:b3:c0:36:9b:58:c2:1d:79:17:7f:b2:71:d4:
                    0f:2d:5a:4b:d6:cc:b2:5a:8b:74:43:5d:80:de:a5:
                    09:01:00:ca:46:06:a7:8b:ea:fa:f0:9a:50:39:0a:
                    e1:f3:65:51:15:28:7b:0a:21:51:7d:77:ff:a4:8d:
                    01:ae:ab:be:6b:71:d7:bf:ee:28:3f:1a:81:a5:3d:
                    17:0a:ff:1c:73:10:ed:53:be:06:30:e8:ae:d4:5e:
                    89:78:7d:ea:29:0b:eb:85:46:9f:db:4a:3c:40:b9:
                    62:3e:8d:96:e1:94:01:39:9a:20:b9:c6:a6:c8:23:
                    eb:e5:fe:1b:f4:ed:e8:fe:28:75:28:9d:c6:9f:94:
                    05:4d:0b:ea:19:0f:3a:1b:96:3f:24:13:9e:2e:5f:
                    23:6a:98:9b:cb:21:7d:32:8d:22:c4:c4:ed:07:2a:
                    51:f4:41:ec:be:d2:fa:98:48:25:2c:f5:be:ec:9c:
                    ac:fe:8d:cb:0b:59:aa:b6:18:b3:d3:a0:e6:f3:02:
                    6f:68:20:60:d8:46:d1:81:2a:0f:a3:4a:f6:97:a2:
                    3b:ef:c6:4d:eb:3a:63:ba:f3:81:0e:79:82:dc:7b:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:79:51:57:BC:21:CF:68:FD:EF:7F:D8:7B:C6:B1:E7:67:18:3F:AB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:09:25:23:c6:05:6a:c9:fe:1b:cd:55:bb:3c:57:84:75:9b:
         26:26:45:9a:1a:dc:64:ad:54:e2:e1:45:0f:90:0a:ef:7e:af:
         36:62:25:09:e9:a2:3b:f1:0c:4a:2c:94:df:ef:0f:4b:bb:3a:
         07:48:d7:c6:e8:c8:97:2c:0a:dc:3e:aa:0c:da:76:95:25:4e:
         3b:12:ef:cc:f4:60:69:a8:e4:18:c2:b6:ef:79:68:51:37:e7:
         24:89:d9:d2:96:a7:3d:f4:5f:67:7d:ce:7e:f6:bd:fe:6b:76:
         93:20:c1:a0:25:1a:af:2c:c5:4f:cb:01:ed:c0:46:f6:a8:b7:
         4b:e0:5f:4d:8f:53:2a:21:2e:83:d5:ba:66:22:e3:69:69:54:
         fa:d8:55:e8:58:cd:b4:92:bc:45:50:ba:71:0c:ae:1f:e5:f6:
         44:3b:2c:34:2b:27:42:1b:59:25:32:e4:07:1c:94:ff:6c:68:
         b3:da:b7:06:c6:b7:c2:e1:f5:8f:c6:19:e2:e7:a5:09:02:e2:
         e3:e2:53:78:74:4e:f4:8b:59:00:eb:01:2a:f1:4a:7f:8f:c1:
         9d:d4:88:c1:ad:aa:5c:0a:c8:3d:2e:d8:c1:fb:21:78:9c:d2:
         68:0d:76:d6:8c:f9:2d:38:be:72:d2:02:3d:70:d1:64:39:bd:
         cb:b1:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net