Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3137382e3231322e33342e302f32342d3234203d3e2030.roa
File:                     3137382e3231322e33342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          cJ53kSXhuE2nLsDcq2JXQYlNhzC+hU3FLfQTDNbtULs=
Subject key identifier:   9D:18:58:A6:4F:84:0C:A2:33:E8:C3:0A:F4:FB:81:AE:7B:30:4B:C6
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       415D9A6D9D2FF46687FA00ABB67DFB586EE39A4E
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3137382e3231322e33342e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:05:50 +0000
ROA not before:           Fri 03 Mar 2023 16:00:50 +0000
ROA not after:            Fri 01 Mar 2024 16:05:50 +0000
asID:                     0
IP address blocks:        178.212.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5d:9a:6d:9d:2f:f4:66:87:fa:00:ab:b6:7d:fb:58:6e:e3:9a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:00:50 2023 GMT
            Not After : Mar  1 16:05:50 2024 GMT
        Subject: CN=9D1858A64F840CA233E8C30AF4FB81AE7B304BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:2a:8b:43:47:07:91:9b:c4:4e:ac:c9:2d:
                    f8:11:f4:04:bd:06:b5:62:5b:52:5c:a8:57:26:8c:
                    da:5c:57:47:fc:72:9c:75:be:46:64:25:b8:1d:74:
                    9a:f7:33:d8:b1:99:7f:2c:2f:28:9a:6c:a8:fc:8c:
                    f8:48:db:d2:b8:62:c9:34:39:21:40:b2:89:1e:d2:
                    1d:3c:3a:59:7d:f0:f2:6e:23:78:17:07:3a:82:f6:
                    78:8c:47:56:c7:9a:51:d2:8c:4a:a8:d6:71:59:ca:
                    dc:05:45:07:40:19:9c:dd:b8:b3:67:b0:73:e4:b8:
                    92:36:39:8e:7e:f2:ca:0f:e1:13:ba:80:5f:6f:13:
                    76:90:ec:50:2c:52:93:f3:9b:dc:9e:a1:5b:16:93:
                    b3:20:5a:9e:94:02:64:8a:94:21:0f:49:e0:9a:a3:
                    8c:99:d2:2a:cc:bb:be:71:f0:6d:a1:f9:45:1f:25:
                    42:da:50:e2:15:bc:95:48:d3:42:9d:ff:74:77:b4:
                    10:b2:d1:b3:0b:02:32:c4:2c:d2:f1:92:c0:53:e0:
                    a0:35:1b:76:87:49:ba:16:e3:fe:b2:b8:cf:a3:f6:
                    88:20:e5:57:f3:79:2c:6d:06:29:6a:fc:8a:de:c3:
                    c3:77:67:12:07:4e:3a:7f:20:3b:23:8e:f4:c7:23:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:58:A6:4F:84:0C:A2:33:E8:C3:0A:F4:FB:81:AE:7B:30:4B:C6
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3137382e3231322e33342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:fb:50:16:94:12:e4:d5:94:bf:68:a4:4c:43:de:0c:17:
         80:f9:e0:08:74:44:73:ca:6e:8f:4a:da:3c:8b:03:f5:b5:bd:
         d7:9a:93:0f:bd:e7:03:e2:58:df:19:d0:76:3a:22:3b:75:8e:
         96:8f:93:09:9f:32:67:b3:1e:ad:87:09:9d:e2:42:6d:5a:e3:
         8f:e2:8a:75:fb:fe:9e:8b:de:19:3b:b4:55:78:a9:ce:fe:23:
         12:c8:06:e6:67:72:57:92:6f:9b:19:d6:02:ac:97:b9:7d:7c:
         72:f3:47:ef:87:68:20:33:2d:d2:2b:d3:a2:19:d8:2f:f0:22:
         da:59:b7:6c:3b:bc:7f:a3:46:6f:fe:7e:80:19:ef:1a:52:d0:
         8c:92:0b:4b:41:eb:8f:08:34:b9:f7:13:69:11:e4:fc:cf:85:
         37:d3:e6:6b:7f:ee:1d:e9:73:04:37:95:93:8b:be:9d:ae:57:
         96:e8:20:0f:3f:9a:35:8c:95:95:03:63:1f:69:46:9c:70:b2:
         f3:2e:04:3d:d0:e6:48:ff:26:8e:d8:b8:f9:74:5d:e5:b1:12:
         48:2a:b2:9a:49:74:f2:6b:73:59:8e:18:32:ba:97:d9:c4:65:
         d5:38:c6:a6:6c:ec:b0:d3:af:65:68:61:4e:4e:98:5f:14:b3:
         17:16:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net