Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134382e302f32342d3332203d3e20313336373837.roa
File:                     38322e3138302e3134382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          f+5HL6YBRH0JMGUjyeGrZmytzt7nEQXiCWcbeTmh3R0=
Subject key identifier:   F2:2D:E9:57:95:02:D1:2F:00:85:55:8F:FB:17:E1:C2:CF:23:14:A3
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       278C30A392D6E405425EFBE1E3F00A724C97BB82
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134382e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:43:20 +0000
ROA not before:           Wed 28 Dec 2022 09:38:20 +0000
ROA not after:            Wed 27 Dec 2023 09:43:20 +0000
asID:                     136787
IP address blocks:        82.180.148.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8c:30:a3:92:d6:e4:05:42:5e:fb:e1:e3:f0:0a:72:4c:97:bb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:38:20 2022 GMT
            Not After : Dec 27 09:43:20 2023 GMT
        Subject: CN=F22DE9579502D12F0085558FFB17E1C2CF2314A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:b6:51:6d:01:b2:00:5d:f2:b7:ef:bc:4c:
                    ec:4d:90:d3:0c:0f:0d:e4:94:89:78:52:08:a2:f5:
                    ae:40:d5:1e:e5:44:fd:89:1e:48:c1:fe:c5:ca:ed:
                    cf:5f:47:1b:81:ae:c0:29:43:19:81:f5:59:f6:34:
                    26:52:00:80:2f:e4:fc:d2:da:c8:af:1e:da:a0:94:
                    cf:aa:21:c6:5b:5d:ba:c2:f4:b2:c8:26:13:0f:e0:
                    f8:4a:75:d9:35:bd:90:f1:1d:b2:02:07:5f:c4:66:
                    2a:d1:70:28:11:ca:dd:c0:7c:84:02:f3:1b:c3:9f:
                    1a:97:20:98:3f:4b:cd:8c:bc:ba:c9:fe:4d:66:cb:
                    27:1f:3e:66:92:20:b3:bf:1c:b4:05:c5:b3:17:1d:
                    63:a9:5f:96:85:34:57:72:34:00:df:86:2b:fa:da:
                    24:e5:f5:79:54:4c:d8:2b:24:b4:19:84:51:14:9d:
                    99:2c:f8:c6:c2:38:b6:b7:0d:c2:75:4d:3e:92:70:
                    a3:18:15:da:ab:0f:0c:08:cf:94:b2:82:09:7f:69:
                    62:93:e8:f4:13:06:7d:9f:e6:a5:50:28:98:56:c2:
                    27:84:68:c1:76:44:77:39:1b:cd:bf:1c:97:6c:0c:
                    d1:bd:ad:44:9f:65:80:ef:37:5f:fd:95:e1:e5:3d:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:E9:57:95:02:D1:2F:00:85:55:8F:FB:17:E1:C2:CF:23:14:A3
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134382e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:20:15:48:5c:90:d5:1c:30:ee:6e:77:5c:0f:43:42:4f:
         6a:16:4b:c1:0f:b3:d2:ff:82:07:0c:0f:79:41:a1:78:0d:94:
         11:5b:c5:7a:41:a8:ef:86:d6:c6:f1:bf:4a:23:ea:ea:bd:74:
         44:dc:aa:2d:bf:a2:c8:d8:74:f2:30:fb:04:a5:41:dd:75:17:
         43:82:36:a4:28:fa:5c:73:95:c3:a3:90:a7:3a:00:f6:43:b5:
         df:99:ea:c1:dc:87:84:51:db:60:28:f7:55:ba:e7:53:08:2a:
         7f:f9:4f:c2:eb:31:cc:06:2a:85:71:9c:d5:c3:22:3a:54:e0:
         35:60:67:dc:7c:e6:17:c6:12:ff:0f:aa:02:25:b1:0f:36:8e:
         0f:d7:22:d3:93:07:a1:b6:4a:7f:d4:d4:04:75:70:aa:16:fc:
         54:76:9f:78:d2:be:ec:87:3d:2f:05:42:54:84:76:fb:c1:37:
         86:04:24:e2:8a:fc:d0:83:96:48:79:3d:e0:cb:dd:95:d1:34:
         11:56:0f:16:ee:8a:85:0a:26:7d:24:62:5b:29:80:64:65:d4:
         b2:23:ba:01:8b:09:5b:8f:6b:65:e5:62:df:59:27:9e:7e:0c:
         05:93:a8:b0:51:db:8a:f0:5b:5d:bf:91:c6:e0:0d:80:6f:c0:
         b0:52:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net