Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa
File:                     38322e3138302e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          D3tTmeGngfLwQeSUhDpxPFrqJTtm7Vc866DOpjvK5KE=
Subject key identifier:   65:74:F5:B6:3D:14:E3:A0:01:A6:BB:2A:91:9F:C0:AC:F5:7A:17:CE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       63C2210DA0C61D3B058159FDAB77B1CF5FF988C5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:20 +0000
ROA not before:           Sat 22 Oct 2022 04:29:20 +0000
ROA not after:            Sat 21 Oct 2023 04:34:20 +0000
asID:                     47583
IP address blocks:        82.180.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c2:21:0d:a0:c6:1d:3b:05:81:59:fd:ab:77:b1:cf:5f:f9:88:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:20 2022 GMT
            Not After : Oct 21 04:34:20 2023 GMT
        Subject: CN=6574F5B63D14E3A001A6BB2A919FC0ACF57A17CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:02:7e:43:ab:1c:23:ef:3f:e3:57:7b:59:
                    47:36:0f:b0:b5:b8:70:6b:b3:fa:80:8f:1b:f6:60:
                    8c:87:6e:d9:f8:8c:11:c2:07:46:e4:fb:1e:e9:c1:
                    fe:b7:f3:4f:9c:49:6b:57:12:5b:9f:df:07:e9:0e:
                    39:af:08:f8:f8:3f:94:30:e0:f1:a5:5c:7d:f1:ba:
                    1f:ca:72:39:c7:c1:4e:09:1c:82:de:df:ef:a1:4e:
                    62:8d:c0:2e:db:b3:66:e5:cf:bf:9b:56:7a:29:06:
                    05:61:a9:91:d5:05:10:03:09:c6:54:3a:22:3a:ae:
                    4f:e1:6c:f0:65:29:38:9f:c7:c7:10:19:18:17:54:
                    8b:8f:92:bd:3f:4e:96:d3:2b:2a:e3:e0:34:20:e0:
                    e4:2b:86:e0:a4:45:a6:fc:95:94:2e:84:48:c6:30:
                    95:0e:0e:c5:24:2b:50:42:f4:0b:bd:cf:90:9b:e9:
                    4b:90:49:ff:56:8f:7f:e9:74:dc:20:e0:01:03:84:
                    c6:7a:5c:0d:76:52:3b:15:5f:f0:8c:2d:eb:87:50:
                    44:f3:e2:00:1f:4e:4d:7c:6c:f4:dc:bd:06:a2:7c:
                    91:5a:d3:b8:67:aa:66:2c:e4:85:f9:a5:53:c2:b0:
                    56:00:e9:42:9f:98:07:a1:8b:7e:89:92:6c:99:e0:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:74:F5:B6:3D:14:E3:A0:01:A6:BB:2A:91:9F:C0:AC:F5:7A:17:CE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:11:e1:23:a3:99:da:09:c8:39:cc:fe:ac:a6:f1:2b:77:
         34:76:d7:2e:e2:6e:ad:db:e6:8a:fc:1c:7d:a3:e9:d9:19:e9:
         c1:77:0c:82:83:71:75:75:e2:ff:69:2e:cf:b8:96:0a:05:1b:
         a9:58:bd:55:20:df:bc:80:1c:b4:55:33:29:f2:ca:e5:10:76:
         84:05:dd:86:bf:0f:80:33:e2:58:dc:2b:e3:3d:ac:b3:a6:43:
         54:a2:33:78:f0:c6:8b:ec:d6:59:0a:cc:57:8e:a9:a1:58:81:
         9e:8e:57:a0:87:12:30:0d:98:1d:11:6f:7b:8a:fb:31:e3:bb:
         9a:2f:a8:53:6d:9a:fe:96:28:dd:1c:4e:f2:a5:07:a0:93:6f:
         f1:a4:97:28:3e:a2:8d:a4:7c:ae:72:e6:1d:da:e8:03:51:f1:
         19:32:bd:5a:83:4b:7c:72:59:77:dd:44:78:f9:97:ca:80:78:
         c4:1b:61:20:b2:16:f8:ab:3a:a1:56:0f:14:e8:94:b6:8b:d0:
         45:14:33:b8:ab:56:61:9f:35:a9:ea:c0:64:c5:62:6d:e8:3b:
         b0:8a:7b:f1:e3:4b:a0:43:48:61:f6:14:ed:3d:ca:d0:1e:4c:
         a1:42:52:fa:3c:37:0d:dd:46:5d:5e:d5:92:ee:69:81:e8:0c:
         16:56:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net