Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa
File:                     38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          NXlh6ft6CCLEfBov5+XZnS+ZX0sMPfwGqu86y4vuwDM=
Subject key identifier:   7B:D5:27:F5:2C:0A:C7:FB:06:A9:85:22:17:9F:81:DE:7A:52:D3:B9
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3624B76C24C3C93897389570124B12697BEA58E2
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 12 Dec 2022 13:33:19 +0000
ROA not before:           Mon 12 Dec 2022 13:28:19 +0000
ROA not after:            Mon 11 Dec 2023 13:33:19 +0000
asID:                     136787
IP address blocks:        82.180.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:24:b7:6c:24:c3:c9:38:97:38:95:70:12:4b:12:69:7b:ea:58:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 12 13:28:19 2022 GMT
            Not After : Dec 11 13:33:19 2023 GMT
        Subject: CN=7BD527F52C0AC7FB06A98522179F81DE7A52D3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:88:a7:18:4b:a0:6c:e3:4f:4c:5c:8b:f1:
                    fc:b5:92:98:50:5a:02:fc:6a:c3:3d:32:c7:ee:0b:
                    43:79:64:a3:39:6b:6f:5a:65:4c:6a:22:56:44:5b:
                    5a:e7:5c:59:97:37:72:eb:5e:2e:29:0b:96:8a:4b:
                    8f:95:62:d8:7f:d3:ee:5d:1f:59:c4:93:f5:6b:c0:
                    9c:c5:8b:4e:b7:f8:4f:20:63:a9:ec:6e:a1:c1:5f:
                    c4:c1:25:72:17:18:fb:6c:a2:dc:74:71:ce:7c:d7:
                    17:df:b6:96:7e:c5:e8:ab:41:37:90:4b:e2:b3:88:
                    bb:6c:b9:75:f7:1d:18:90:d1:4d:99:db:71:e8:09:
                    ec:88:87:45:47:4e:ca:0b:b3:76:17:58:0f:90:3a:
                    6c:3c:65:61:19:02:54:54:a7:92:bf:93:cc:9a:36:
                    5f:ff:16:d5:10:a2:73:2b:df:36:21:3e:9b:45:85:
                    43:77:89:2f:3b:42:f4:bb:7a:70:9b:70:74:43:39:
                    d0:21:ee:4f:10:78:5d:13:76:bf:ff:11:cb:a7:a0:
                    f7:79:a4:91:6b:c3:47:84:d2:aa:8f:b6:6a:38:74:
                    d4:f1:9b:62:dc:00:2a:40:fa:a3:76:52:73:43:a7:
                    e1:d3:45:b1:b2:d4:32:3b:f7:85:1c:b5:5a:f0:e6:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:27:F5:2C:0A:C7:FB:06:A9:85:22:17:9F:81:DE:7A:52:D3:B9
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:4a:8d:ab:8e:1e:07:ee:3f:0f:75:a4:eb:8c:c0:44:82:cb:
         25:4d:19:72:49:86:a6:95:8c:a5:6b:6a:a4:db:cf:fe:72:48:
         fa:a5:c0:51:22:e4:c2:f0:6b:1c:75:24:2f:86:80:e6:9f:50:
         0c:24:12:44:d8:64:65:ba:17:39:f4:3c:c3:6e:f3:e4:e1:7a:
         2d:5c:c0:0a:86:c8:4e:af:0f:36:42:46:4d:d5:e8:07:85:7d:
         1b:5a:07:ce:15:5c:46:0d:2d:a2:98:c4:21:7f:da:15:ca:d1:
         27:b8:50:ba:8d:3b:4a:2f:8e:f8:3e:f7:60:b3:d4:80:13:51:
         b4:d4:e5:43:7f:e3:c1:4c:31:d4:26:70:c6:26:d4:6c:1e:0b:
         e4:f4:c4:61:ff:7d:93:aa:69:03:d4:b3:f4:f0:5e:45:63:a9:
         b4:c0:74:99:f7:20:01:b8:02:a9:41:5d:78:c5:70:f3:5a:3c:
         0f:23:f3:51:05:f6:40:e7:93:82:d1:a1:64:5c:f5:8a:ec:ca:
         e7:79:bc:ca:16:1e:3c:ff:10:43:a1:21:01:d0:cd:6c:bf:9a:
         69:ef:12:08:3a:28:85:22:b9:e6:0e:75:36:a0:39:d6:d0:55:
         9f:71:37:70:e9:d2:32:c5:cf:52:e3:7c:07:46:b4:f5:7a:cb:
         80:a4:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net