Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135302e302f32342d3234203d3e203439343533.roa
File:                     38322e3138302e3135302e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier:          xkE7GaTzN1XHk65CUjj3NFPP8t06LoQ7IGGCNKoUwwc=
Subject key identifier:   64:0D:19:5F:8E:ED:A2:F7:03:F2:3F:BE:95:07:B4:B5:33:3F:AE:EA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3F89D56E7A7F6F6AFE4CBA99EDE79029566F5DEA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135302e302f32342d3234203d3e203439343533.roa
Signing time:             Sat 22 Oct 2022 04:34:20 +0000
ROA not before:           Sat 22 Oct 2022 04:29:20 +0000
ROA not after:            Sat 21 Oct 2023 04:34:20 +0000
asID:                     49453
IP address blocks:        82.180.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:d5:6e:7a:7f:6f:6a:fe:4c:ba:99:ed:e7:90:29:56:6f:5d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:20 2022 GMT
            Not After : Oct 21 04:34:20 2023 GMT
        Subject: CN=640D195F8EEDA2F703F23FBE9507B4B5333FAEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:47:e6:b2:a4:7b:0d:19:0b:3a:a5:d0:b9:
                    0b:f9:c6:44:a1:62:04:13:c7:07:b4:0d:0c:0e:0e:
                    14:86:99:d7:78:c6:60:12:a2:49:65:a2:50:75:71:
                    2d:20:dc:e6:22:c5:4d:fe:9e:57:7b:63:bd:06:b3:
                    d3:63:2a:e4:e3:d1:6f:7f:fd:63:38:d5:cb:f3:b4:
                    59:ce:87:0a:6a:61:29:8a:f6:43:43:fc:71:43:c3:
                    77:b6:c8:3c:76:cc:42:ea:ac:2b:4a:a4:58:34:42:
                    89:ef:68:fc:b5:64:c3:4e:d1:ac:c2:78:8d:81:5b:
                    cb:b1:c2:66:55:06:c9:a8:d1:68:18:d1:80:be:f3:
                    7d:70:3f:fa:a3:94:4f:d2:89:cf:97:90:8c:12:3a:
                    87:59:ff:e9:0c:5e:cf:89:54:3f:5a:ec:73:4c:55:
                    0d:b0:ba:03:f0:a9:9e:62:de:54:0d:b8:6a:67:91:
                    90:fa:c2:a7:a8:d6:6a:9a:d0:92:68:56:b4:94:4e:
                    b5:6f:6d:93:ed:cf:ec:b4:71:ac:e2:15:b6:3f:e1:
                    84:93:d0:e2:15:70:7a:38:eb:63:aa:07:6c:62:0d:
                    84:cd:74:b7:5a:e7:fb:b0:a4:8d:62:e5:7e:f3:00:
                    b1:cc:58:89:02:71:f4:0c:c3:31:92:d8:25:c5:91:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0D:19:5F:8E:ED:A2:F7:03:F2:3F:BE:95:07:B4:B5:33:3F:AE:EA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135302e302f32342d3234203d3e203439343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b5:7e:41:e6:dc:5a:72:6b:e3:93:c7:fb:d2:d6:bd:1f:6f:
         cf:a0:d7:a6:19:43:32:ff:71:c6:d8:54:28:17:cd:bc:66:fc:
         6c:90:8a:d1:c2:de:d5:7d:01:d8:4e:fb:1c:0e:ce:5e:13:a2:
         53:d3:2b:ad:9e:66:a8:0a:04:b9:e9:41:2b:a9:b2:e0:77:e9:
         2e:dd:da:d0:c0:90:7d:64:99:09:7c:51:88:a1:0a:40:fd:c4:
         ef:74:9b:12:89:d8:4a:4f:82:0c:cd:4f:b5:40:05:aa:28:3a:
         3d:25:da:76:37:ab:95:8a:0b:2d:e1:d2:b3:5f:55:bb:5e:08:
         ba:35:09:e8:75:1b:1a:3e:9a:9b:85:c4:bb:f8:47:0e:cc:29:
         07:5e:9d:61:15:36:08:51:b1:58:eb:0c:30:6e:f9:fd:c8:2c:
         8a:2d:82:b4:85:66:36:36:c8:aa:bb:b5:96:83:66:f6:68:bf:
         ad:c0:ed:1c:dc:48:87:c3:09:5d:98:26:78:fa:95:17:d8:34:
         3d:ad:7e:04:45:52:8f:4c:c8:64:0f:d3:6e:53:c6:20:b3:81:
         6c:80:a2:26:c0:18:a3:b9:a1:9d:67:37:ca:6a:ba:56:f8:9a:
         84:a2:fd:f4:da:31:94:80:c6:d6:64:83:f3:6d:a2:dc:87:99:
         03:72:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net