Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135302e302f32342d3234203d3e20313336373837.roa
File:                     38322e3138302e3135302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          GVAonyvh5B0Zj+6a/N10ZMqBGOOcPIlEuwVl+urdz2E=
Subject key identifier:   C5:0C:81:23:1D:4E:51:A0:72:AE:77:F5:15:5B:BD:CF:EF:33:88:DA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       262B1C267FAD9052D4986C51215E527612177683
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135302e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:30 +0000
ROA not before:           Sat 22 Oct 2022 04:29:30 +0000
ROA not after:            Sat 21 Oct 2023 04:34:30 +0000
asID:                     136787
IP address blocks:        82.180.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2b:1c:26:7f:ad:90:52:d4:98:6c:51:21:5e:52:76:12:17:76:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:30 2022 GMT
            Not After : Oct 21 04:34:30 2023 GMT
        Subject: CN=C50C81231D4E51A072AE77F5155BBDCFEF3388DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:0a:c1:4a:c6:a9:2c:0e:04:83:a1:17:7a:
                    58:5f:a1:b8:ee:a0:5e:12:2d:01:4a:22:9e:00:3e:
                    76:68:86:22:c4:bc:e6:aa:d7:b7:cc:5c:37:7d:d7:
                    6b:1a:09:b9:d1:25:1c:f1:10:6c:bc:d2:69:8b:ce:
                    b7:6a:9b:6e:68:17:46:6e:c5:ba:44:34:3a:32:e7:
                    dc:0f:2f:e8:c9:b7:44:0e:77:12:c4:42:f6:77:70:
                    02:b7:cc:ee:03:47:bf:a0:25:a9:c1:43:92:66:c6:
                    8c:f8:61:c0:ab:fa:d3:f9:9e:3b:1a:15:cf:de:77:
                    f8:8b:7c:08:96:2c:a6:d0:df:e5:0c:d9:71:70:2f:
                    91:a7:13:5b:e2:3a:bd:48:9c:28:3d:04:2e:dd:ce:
                    44:8a:96:53:61:cf:4a:83:16:f2:c4:73:9e:5f:10:
                    a2:ec:4e:88:10:75:43:2f:28:09:ca:f8:99:79:a7:
                    8c:80:64:fd:ab:ab:82:91:d1:34:ce:be:0e:d9:4b:
                    ad:74:b5:75:65:b7:99:fa:a4:f8:cc:ac:bc:ed:40:
                    34:d3:3c:23:c5:c9:4f:98:2d:0a:6e:07:4e:b9:3f:
                    95:84:f7:b2:c6:8f:2a:87:35:2e:e2:e5:86:90:ad:
                    44:45:14:56:3c:f9:15:42:05:da:be:23:32:37:f8:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:81:23:1D:4E:51:A0:72:AE:77:F5:15:5B:BD:CF:EF:33:88:DA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135302e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:8c:b3:f5:5e:25:2b:06:b4:a5:b0:f2:74:20:ed:c2:fa:
         a5:ab:42:fd:cc:1a:e8:fc:c4:49:e2:45:d7:d9:23:2b:b6:1e:
         20:19:32:b6:28:6a:1c:48:bf:b0:b7:a0:1e:cb:af:5e:9d:ef:
         8c:4f:9e:2f:d3:7e:b6:af:58:ad:4d:73:67:fa:eb:22:dd:58:
         c3:15:be:a6:8f:82:be:84:ea:5c:c0:f4:bf:24:f9:f5:a9:e7:
         58:08:71:3a:13:8a:ff:de:71:27:12:6a:0f:de:18:cb:ca:b9:
         4e:76:e8:d9:49:ac:c5:6b:93:83:64:13:4e:8e:87:a1:33:0e:
         d6:f9:87:ed:7f:fe:29:41:1a:51:f6:36:71:49:3a:88:41:51:
         bc:f5:04:1f:9c:3d:84:66:a5:6f:9d:d6:f1:01:a6:fa:93:a4:
         72:a6:57:ac:26:92:4b:4a:84:b1:01:1b:ea:4f:52:ea:7b:2d:
         87:24:11:0e:5e:f1:08:da:a0:00:00:e9:68:c2:ef:0b:90:c1:
         47:85:27:b3:de:39:de:23:44:13:28:0e:88:fb:b9:cd:05:8f:
         09:58:29:61:e1:98:e4:bc:8a:aa:13:a0:60:8d:f7:14:12:48:
         74:92:5f:86:b3:f8:7c:23:ca:a0:af:96:00:7e:a8:ac:e7:c8:
         2b:f8:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net