Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135352e302f32342d3234203d3e203437353833.roa
File:                     38322e3138302e3135352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          KsjJKbIl9dmgTCrB4pxco+f8r9kwPQDxwjxheE20MNQ=
Subject key identifier:   70:85:3E:23:B5:5D:A2:B9:C2:3A:0C:50:07:87:AD:0D:C5:CD:B9:07
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2C19D30C843D136185CDC6204F8976E0C4A37E59
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135352e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:35 +0000
ROA not before:           Sat 22 Oct 2022 04:29:35 +0000
ROA not after:            Sat 21 Oct 2023 04:34:35 +0000
asID:                     47583
IP address blocks:        82.180.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:19:d3:0c:84:3d:13:61:85:cd:c6:20:4f:89:76:e0:c4:a3:7e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:35 2022 GMT
            Not After : Oct 21 04:34:35 2023 GMT
        Subject: CN=70853E23B55DA2B9C23A0C500787AD0DC5CDB907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:e3:59:16:5f:46:c1:cd:17:f8:43:e7:b5:
                    62:c4:e7:20:94:78:e9:f5:e4:72:88:ef:bd:24:6e:
                    8f:e0:42:3c:3a:33:d4:87:07:bd:71:13:ae:71:ea:
                    92:97:a3:6f:ed:df:9c:0a:e6:9b:74:17:6c:a6:70:
                    e4:f5:c5:79:be:79:3c:d1:62:d7:32:94:33:fb:00:
                    6f:8d:fb:f8:8c:d3:1d:af:ba:c0:89:61:49:9e:31:
                    e5:72:56:d8:f9:34:11:d5:66:7f:a1:92:36:e4:81:
                    37:7d:82:05:b3:64:9e:05:6d:e8:be:97:72:4b:92:
                    d2:d7:36:b4:be:6c:57:ea:00:c3:b9:2e:6c:56:3a:
                    28:ab:ac:11:dc:7c:9f:bc:92:21:de:e9:6b:ab:a7:
                    bd:59:cc:6c:8b:40:e5:2f:0c:78:04:1e:dd:55:34:
                    b1:c6:d3:14:05:ea:91:7c:a3:b3:5c:3b:de:93:a7:
                    dc:c7:ba:66:ba:eb:7f:b8:f7:5f:c2:39:c5:4d:9a:
                    89:53:f6:87:3c:59:99:7c:35:0a:f1:5f:2a:a5:e5:
                    a3:7f:6b:da:fe:f4:38:00:21:cb:92:99:53:26:e8:
                    4c:10:73:4b:5b:94:95:2e:3a:86:ef:50:15:48:8e:
                    b1:2b:c1:d2:bc:fa:ec:a1:36:73:ee:6e:a2:46:37:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:85:3E:23:B5:5D:A2:B9:C2:3A:0C:50:07:87:AD:0D:C5:CD:B9:07
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135352e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:29:a8:65:72:5f:34:e6:b9:3f:0b:06:3f:ca:79:a8:7c:5c:
         f3:f2:6c:24:bf:44:91:38:cf:cf:7a:c7:a0:4a:a6:4b:a6:8f:
         d0:9d:dc:c3:87:d3:d9:98:ae:25:6d:8a:69:31:2a:56:74:e0:
         4b:af:b0:58:12:d3:8c:51:d6:7a:04:a1:0d:75:19:42:1c:08:
         8f:5d:5a:a7:4b:2e:01:42:ef:89:45:89:07:87:14:e7:03:bb:
         3f:05:61:95:34:5e:df:fb:26:5d:55:0b:cd:1e:2c:63:5f:10:
         62:bb:3e:0d:c7:bd:8e:1e:57:6c:55:ae:07:f5:5f:eb:5f:22:
         e7:11:d6:66:2c:f2:a4:61:47:fc:52:78:14:65:d9:e4:01:94:
         ca:f0:08:f1:fa:70:b1:54:56:7a:13:2e:7d:11:81:03:88:6b:
         d7:9e:7d:15:cc:8d:7e:9a:30:2f:34:a6:b6:e8:d7:2b:f4:80:
         f9:da:2f:33:74:9f:2a:ab:e3:1e:de:db:8f:20:40:9d:ad:b3:
         86:c6:50:07:e4:df:91:68:2c:65:d6:19:0d:0f:32:cf:ec:2c:
         74:86:b8:c8:40:25:d5:a0:80:c4:99:3d:bf:8a:d0:a9:95:e9:
         c2:65:a1:93:52:95:cd:6d:25:bb:ff:b5:76:9f:1c:f1:05:8f:
         12:79:3a:49
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIULBnTDIQ9E2GFzcYgT4l24MSjflkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzVaFw0yMzEwMjEwNDM0MzVaMDMxMTAvBgNV
BAMTKDcwODUzRTIzQjU1REEyQjlDMjNBMEM1MDA3ODdBRDBEQzVDREI5MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjONZFl9Gwc0X+EPntWLE5yCU
eOn15HKI770kbo/gQjw6M9SHB71xE65x6pKXo2/t35wK5pt0F2ymcOT1xXm+eTzR
YtcylDP7AG+N+/iM0x2vusCJYUmeMeVyVtj5NBHVZn+hkjbkgTd9ggWzZJ4Fbei+
l3JLktLXNrS+bFfqAMO5LmxWOiirrBHcfJ+8kiHe6Wurp71ZzGyLQOUvDHgEHt1V
NLHG0xQF6pF8o7NcO96Tp9zHuma663+491/COcVNmolT9oc8WZl8NQrxXyql5aN/
a9r+9DgAIcuSmVMm6EwQc0tblJUuOobvUBVIjrErwdK8+uyhNnPubqJGN/dpAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUcIU+I7VdornCOgxQB4etDcXNuQcwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODMyMmUzMTM4MzAyZTMxMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzczNTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABStJswDQYJKoZIhvcNAQELBQADggEBAJEpqGVy
XzTmuT8LBj/Keah8XPPybCS/RJE4z896x6BKpkumj9Cd3MOH09mYriVtimkxKlZ0
4EuvsFgS04xR1noEoQ11GUIcCI9dWqdLLgFC74lFiQeHFOcDuz8FYZU0Xt/7Jl1V
C80eLGNfEGK7Pg3HvY4eV2xVrgf1X+tfIucR1mYs8qRhR/xSeBRl2eQBlMrwCPH6
cLFUVnoTLn0RgQOIa9eefRXMjX6aMC80prbo1yv0gPnaLzN0nyqr4x7e248gQJ2t
s4bGUAfk35FoLGXWGQ0PMs/sLHSGuMhAJdWggMSZPb+K0KmV6cJloZNSlc1tJbv/
tXafHPEFjxJ5Okk=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net