Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138302e302f32332d3234203d3e20313336373837.roa
File:                     3138352e3138332e3138302e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          dVf0tBVGVj6YwgvAoGVFJgZjgMo92xHTCzAtHU9XWlU=
Subject key identifier:   0E:C3:CC:BB:AD:30:73:39:28:7A:74:A0:44:97:56:57:5F:48:4E:2C
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       5389858B150BAF478151053C7823E7E33E1B9241
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138302e302f32332d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:05 +0000
ROA not before:           Sat 22 Oct 2022 04:29:05 +0000
ROA not after:            Sat 21 Oct 2023 04:34:05 +0000
asID:                     136787
IP address blocks:        185.183.180.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:89:85:8b:15:0b:af:47:81:51:05:3c:78:23:e7:e3:3e:1b:92:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:05 2022 GMT
            Not After : Oct 21 04:34:05 2023 GMT
        Subject: CN=0EC3CCBBAD307339287A74A0449756575F484E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:3a:cb:59:c0:54:cd:47:19:99:12:0c:6e:
                    05:80:d6:96:8f:f3:c7:cd:a3:f8:9e:a6:cf:59:87:
                    db:e1:9d:45:bc:60:09:97:01:5f:7d:e4:f2:99:59:
                    0c:e6:71:41:1b:33:43:2e:8e:f9:3b:a3:d8:73:a8:
                    a0:57:1f:4a:af:32:29:52:e1:81:0b:3d:24:3f:87:
                    06:a6:36:90:00:95:a4:18:d7:dd:c1:83:12:63:8f:
                    6b:e7:35:ec:e3:68:6c:2c:c6:ac:a7:e4:ad:b6:90:
                    39:da:a0:a2:eb:56:67:ff:42:85:7b:c2:a8:8f:78:
                    9f:0e:41:dd:f6:09:25:e6:c8:91:1f:0c:ef:4d:af:
                    11:f2:a6:9d:6a:64:b0:e8:0b:ea:39:76:2e:0c:b7:
                    bf:9f:f4:62:57:ed:fa:17:f4:b3:6c:fa:68:ae:9f:
                    32:c9:db:66:6b:4c:fc:05:3c:8d:32:4f:b4:0f:86:
                    39:e4:bb:b8:33:ac:77:90:66:56:36:7c:7d:8f:5a:
                    7b:e3:1f:69:c6:b9:85:8c:97:2b:ce:f7:1c:f8:c3:
                    28:9a:73:95:46:a3:42:10:2c:e4:e3:9f:ff:35:70:
                    4a:04:20:ef:1a:5e:7f:ff:ef:08:f9:4f:6e:80:dc:
                    e1:ee:09:08:7a:ae:71:4b:99:92:56:d2:47:93:6f:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C3:CC:BB:AD:30:73:39:28:7A:74:A0:44:97:56:57:5F:48:4E:2C
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138302e302f32332d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:34:87:c6:28:80:fe:1e:bb:b9:a7:16:71:e9:00:7f:56:
         0f:b5:05:05:e5:56:33:e4:47:0e:3f:fe:1e:9c:80:43:45:53:
         9d:bd:d8:30:7a:7e:84:11:6a:09:4d:7e:3d:49:dd:ff:3e:9d:
         62:05:4d:28:b0:76:f2:a4:dd:e4:79:a6:da:09:7c:6e:49:93:
         08:18:7e:b4:3c:59:7e:c4:8b:e7:56:4e:d2:2f:08:78:e2:5c:
         a4:2f:22:a7:80:d1:23:36:34:1a:a2:2c:bf:c0:18:9a:ea:ca:
         60:0e:9e:ad:db:75:ea:38:a2:be:67:85:46:ab:b8:41:48:b7:
         4d:80:f4:72:76:03:07:c3:d8:79:41:31:10:3a:18:73:d2:78:
         d3:bf:3e:47:68:c0:58:f6:7c:1a:e3:15:59:d0:a3:70:03:5c:
         b5:e0:e1:c3:e6:9f:32:45:f4:52:1b:78:3d:ea:8b:ee:b9:cd:
         28:87:8e:a1:c5:84:2d:41:d2:8c:82:37:fe:f3:b7:32:cd:d1:
         31:17:7b:59:30:32:f9:03:81:80:8b:3e:04:45:79:67:51:52:
         95:d7:4b:95:26:66:73:38:76:fd:ea:ea:63:58:ac:f2:68:ce:
         aa:41:46:9b:c4:8a:50:d9:e3:ab:5a:9e:47:14:a1:29:3f:3b:
         6c:71:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org