Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa
File:                     38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          bCkUCcBouwILk2nc9MkmQz+oVTg7Ge7AE6oB7ytRkSI=
Subject key identifier:   BA:64:E6:4A:5B:F3:01:32:4E:C2:93:BF:31:38:08:2F:2F:D0:3E:62
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6067D02C844DDFF05404E1801383D3AA4AE4CDDF
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:43:37 +0000
ROA not before:           Wed 28 Dec 2022 09:38:37 +0000
ROA not after:            Wed 27 Dec 2023 09:43:37 +0000
asID:                     136787
IP address blocks:        82.180.149.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:67:d0:2c:84:4d:df:f0:54:04:e1:80:13:83:d3:aa:4a:e4:cd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 28 09:38:37 2022 GMT
            Not After : Dec 27 09:43:37 2023 GMT
        Subject: CN=BA64E64A5BF301324EC293BF3138082F2FD03E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:24:4f:8d:6c:1c:a8:bb:f2:37:a2:ba:ad:
                    6d:eb:8e:9e:95:01:50:ac:36:20:cf:a1:a3:bc:46:
                    7d:9f:26:52:b2:41:1f:cd:6d:27:11:53:df:05:2c:
                    85:de:1a:ab:30:b7:dd:43:f2:45:1b:2b:4f:1a:b6:
                    88:08:4d:84:89:40:83:32:8a:e5:78:c6:a5:c4:d7:
                    0c:ba:0c:dd:ef:21:64:9a:c8:7e:00:44:4f:01:c2:
                    f5:dc:81:d9:43:d4:69:93:b6:5d:f1:09:b9:bd:43:
                    3b:16:19:a7:ce:64:cb:8c:ca:8f:ab:ad:4e:ca:72:
                    c2:a2:ef:55:c4:84:10:1a:db:77:66:ab:49:ff:86:
                    50:30:70:87:60:84:23:d1:08:97:44:5c:2a:8a:fe:
                    cd:11:94:07:4c:c2:36:c7:a5:f8:9a:20:8f:96:84:
                    d9:58:72:32:ec:55:aa:46:1a:11:a9:35:a7:c4:99:
                    98:0a:0c:0d:ab:94:4e:a9:ed:4f:37:ac:2d:c7:18:
                    09:34:4b:8c:f6:ec:47:00:4e:95:55:9a:bf:b8:94:
                    73:1f:c0:a0:f8:0e:bd:e7:17:09:81:b3:06:cc:5f:
                    9d:62:1a:cc:d5:dd:6b:cf:e3:66:d7:1b:e1:d9:c5:
                    ef:32:47:62:67:a5:21:19:a5:f0:d5:3b:33:a2:c0:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:64:E6:4A:5B:F3:01:32:4E:C2:93:BF:31:38:08:2F:2F:D0:3E:62
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:4b:dc:92:3c:f9:20:01:ec:e9:5d:68:b9:3e:c5:d9:e4:
         f3:0c:d0:16:8d:db:87:55:28:cb:2a:db:d3:e3:b8:e8:0f:af:
         c6:00:ee:75:23:9e:72:83:49:2c:7f:75:fd:11:b7:58:b0:91:
         8b:4e:00:b7:4b:7b:72:93:cb:19:f0:fa:e1:f0:d7:e3:cc:ab:
         6b:04:e3:4b:60:1e:96:8d:8a:41:b0:c1:83:1a:ce:de:c7:0e:
         a5:dc:e9:a4:b0:45:9a:8b:bb:c0:ae:8d:b9:ab:82:bf:8d:78:
         59:98:8f:ce:9d:26:e9:0e:83:59:dc:6e:10:c9:c1:61:62:94:
         5d:02:d8:64:b5:48:5f:69:ee:78:a6:51:18:08:fc:ba:70:f5:
         30:2f:1f:7d:e8:1e:7a:5e:0e:40:ec:13:87:fc:8e:95:d8:98:
         2c:13:19:32:7e:21:a4:c4:09:16:27:19:66:70:b4:6f:2c:3a:
         82:9f:20:c3:db:10:78:a2:45:66:e1:d9:a8:3a:12:92:7f:02:
         48:82:07:68:27:86:59:46:d4:e9:93:57:c4:0c:52:4f:40:a7:
         37:d0:be:9f:6b:7f:75:f0:52:fc:f6:1d:a9:b2:75:16:12:f6:
         65:4d:33:a6:c4:44:5d:01:61:e3:66:b0:08:e1:72:20:42:a7:
         c5:4e:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net