Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e20323037373837.roa
File:                     38302e36352e3230392e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          f7yDn5YMU7YNCNkjap0KhGKxEv9irGLt56VLs9iHeko=
Subject key identifier:   FA:28:1E:1B:43:78:17:F4:B8:03:D1:2D:63:FE:C3:E1:63:2A:3D:19
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       7CCE8E776770655176FAE74938267E915EE7CC6F
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e20323037373837.roa
Signing time:             Fri 27 Nov 2020 15:10:26 +0000
ROA not before:           Fri 27 Nov 2020 15:05:26 +0000
ROA not after:            Fri 26 Nov 2021 15:10:26 +0000
asID:                     207787
IP address blocks:        80.65.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:8e:77:67:70:65:51:76:fa:e7:49:38:26:7e:91:5e:e7:cc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Nov 27 15:05:26 2020 GMT
            Not After : Nov 26 15:10:26 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:71:8c:45:8c:5f:7e:3b:5b:4b:d9:71:66:
                    2e:b3:f0:0f:91:b6:2c:8a:13:75:a1:ab:01:71:f1:
                    4a:4d:20:19:9e:8f:f0:99:8f:5b:b6:5c:08:e4:db:
                    d5:84:6b:1e:df:f2:5d:9f:76:83:c6:bd:63:b7:06:
                    da:2a:4b:aa:b6:95:61:3e:a2:a3:da:2d:54:70:3d:
                    17:0b:96:71:b8:8d:da:02:f1:d2:8d:c3:a8:e0:d0:
                    96:50:7c:de:ef:7d:a5:78:62:40:69:b1:ce:22:81:
                    c9:fc:a9:0e:da:be:1d:32:03:06:0c:69:5d:ed:a1:
                    e9:75:c2:cf:75:32:a2:27:5d:25:b9:99:f5:98:dc:
                    c0:9d:a6:e4:f0:9e:f5:78:ae:7a:b5:11:d7:b0:a1:
                    10:24:6f:69:8e:1a:75:04:da:a9:97:d7:29:5d:30:
                    55:b0:7c:6d:14:28:97:5f:96:7e:74:7d:33:73:84:
                    08:a6:c4:bc:af:f8:ae:fa:f0:b8:20:c8:d2:be:6a:
                    b9:72:42:58:5e:73:54:f5:80:3d:3a:81:d7:eb:e0:
                    e2:9e:f2:e2:4b:74:4f:56:bf:c9:b4:0d:b9:d9:cf:
                    51:5d:ab:2f:7e:fb:1e:b2:dd:3a:40:b9:7d:7b:ac:
                    b3:2c:6c:ac:0e:aa:23:71:b2:14:32:4a:3a:7e:92:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:1E:1B:43:78:17:F4:B8:03:D1:2D:63:FE:C3:E1:63:2A:3D:19
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.65.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:cf:c1:60:32:5e:df:ed:70:82:2a:c6:c6:de:ae:ec:22:
         cc:4c:84:cb:84:2f:2b:a0:29:ea:18:0e:f9:33:20:ee:2a:ba:
         48:7c:fa:23:f2:3b:c3:10:ff:e8:c4:b7:a5:10:f0:2e:29:75:
         5a:e4:8b:42:c1:88:70:a2:71:9b:ea:95:c5:1f:a6:14:f7:1f:
         e2:cd:0c:ba:47:83:30:22:42:4a:16:16:1e:46:16:9a:41:ab:
         fd:f4:12:aa:43:73:69:db:ed:96:87:3b:93:e7:52:54:7f:45:
         40:d3:ab:a1:fc:1e:54:57:db:ca:eb:54:65:1e:a5:21:08:b1:
         1d:44:7d:f2:59:b4:12:75:8e:33:8e:f7:45:bc:77:a4:29:a0:
         5a:ed:61:7e:8c:0b:f3:77:2d:3b:d7:9f:aa:99:42:bc:83:41:
         4f:a6:7f:55:6d:03:97:13:0f:52:0a:f6:ba:9d:4e:e6:7e:43:
         28:99:ba:e2:99:e9:6f:ff:44:cc:eb:6d:44:02:59:b0:ab:9f:
         65:c7:67:1d:06:40:41:9f:3f:a5:6e:c4:9a:38:c7:3a:b9:02:
         0c:5f:61:eb:c5:7b:22:4a:6b:00:d3:bc:d1:3e:55:f3:0a:fc:
         30:11:fa:5a:b2:8c:d8:24:d9:b8:e5:45:a5:04:80:02:a7:28:
         fe:df:b3:55
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUfM6Od2dwZVF2+udJOCZ+kV7nzG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMDExMjcxNTA1MjZaFw0yMTExMjYxNTEwMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUREMDcxOEM0NThDNUY3RTNC
NUI0QkQ5NzE2NjJFQjNGMDBGOTFCNjJDOEExMzc1QTFBQjAxNzFGMTRBNEQyMDE5
OUU4RkYwOTk4RjVCQjY1QzA4RTREQkQ1ODQ2QjFFREZGMjVEOUY3NjgzQzZCRDYz
QjcwNkRBMkE0QkFBQjY5NTYxM0VBMkEzREEyRDU0NzAzRDE3MEI5NjcxQjg4RERB
MDJGMUQyOERDM0E4RTBEMDk2NTA3Q0RFRUY3REE1Nzg2MjQwNjlCMUNFMjI4MUM5
RkNBOTBFREFCRTFEMzIwMzA2MEM2OTVERURBMUU5NzVDMkNGNzUzMkEyMjc1RDI1
Qjk5OUY1OThEQ0MwOURBNkU0RjA5RUY1NzhBRTdBQjUxMUQ3QjBBMTEwMjQ2RjY5
OEUxQTc1MDREQUE5OTdENzI5NUQzMDU1QjA3QzZEMTQyODk3NUY5NjdFNzQ3RDMz
NzM4NDA4QTZDNEJDQUZGOEFFRkFGMEI4MjBDOEQyQkU2QUI5NzI0MjU4NUU3MzU0
RjU4MDNEM0E4MUQ3RUJFMEUyOUVGMkUyNEI3NDRGNTZCRkM5QjQwREI5RDlDRjUx
NURBQjJGN0VGQjFFQjJERDNBNDBCOTdEN0JBQ0IzMkM2Q0FDMEVBQTIzNzFCMjE0
MzI0QTNBN0U5MjQzNkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArdBxjEWMX347W0vZcWYus/APkbYsihN1oasBcfFKTSAZno/wmY9b
tlwI5NvVhGse3/Jdn3aDxr1jtwbaKkuqtpVhPqKj2i1UcD0XC5ZxuI3aAvHSjcOo
4NCWUHze732leGJAabHOIoHJ/KkO2r4dMgMGDGld7aHpdcLPdTKiJ10luZn1mNzA
nabk8J71eK56tRHXsKEQJG9pjhp1BNqpl9cpXTBVsHxtFCiXX5Z+dH0zc4QIpsS8
r/iu+vC4IMjSvmq5ckJYXnNU9YA9OoHX6+DinvLiS3RPVr/JtA252c9RXasvfvse
st06QLl9e6yzLGysDqojcbIUMko6fpJDawIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FPooHhtDeBf0uAPRLWP+w+FjKj0ZMB8GA1UdIwQYMBaAFB55O1wSOSMeCN7db7gG
BzLNBj9NMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC84LzFFNzkz
QjVDMTIzOTIzMUUwOERFREQ2RkI4MDYwNzMyQ0QwNjNGNEQuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9Ibms3WEJJNUl4NEkzdDF2dUFZSE1zMEdQMDAuY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzgvMzgzMDJlMzYzNTJlMzIzMDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UEHRMA0GCSqGSIb3DQEBCwUAA4IBAQA5i8/BYDJe3+1wgirGxt6u7CLMTITLhC8r
oCnqGA75MyDuKrpIfPoj8jvDEP/oxLelEPAuKXVa5ItCwYhwonGb6pXFH6YU9x/i
zQy6R4MwIkJKFhYeRhaaQav99BKqQ3Np2+2WhzuT51JUf0VA06uh/B5UV9vK61Rl
HqUhCLEdRH3yWbQSdY4zjvdFvHekKaBa7WF+jAvzdy0715+qmUK8g0FPpn9VbQOX
Ew9SCva6nU7mfkMombrimelv/0TM621EAlmwq59lx2cdBkBBnz+lbsSaOMc6uQIM
X2HrxXsiSmsA07zRPlXzCvwwEfpasozYJNm45UWlBIACpyj+37NV
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net