Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32342d3234203d3e20323132373730.roa
File:                     3138382e3131362e31322e302f32342d3234203d3e20323132373730.roa (raw, json)
Hash identifier:          usG8wHd8+OmufDXdFmjuWNd4VzJfJKszKgdy9r0Q+UA=
Subject key identifier:   C0:AA:A3:56:F2:FD:0D:9E:7C:FA:2C:67:B4:33:26:F9:D1:06:2E:DB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2B523BD468096BB5C0C3B1D2F38A7319336336F1
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32342d3234203d3e20323132373730.roa
Signing time:             Tue 28 Jun 2022 04:40:48 +0000
ROA not before:           Tue 28 Jun 2022 04:35:48 +0000
ROA not after:            Tue 27 Jun 2023 04:40:48 +0000
asID:                     212770
IP address blocks:        188.116.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:52:3b:d4:68:09:6b:b5:c0:c3:b1:d2:f3:8a:73:19:33:63:36:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:48 2022 GMT
            Not After : Jun 27 04:40:48 2023 GMT
        Subject: CN=C0AAA356F2FD0D9E7CFA2C67B43326F9D1062EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:40:0e:b2:7c:d7:76:35:e5:12:10:8d:73:
                    cb:65:50:e8:44:f5:0e:dc:ab:cc:89:df:76:9b:b8:
                    3d:ea:33:3a:46:be:18:11:97:46:b8:ee:6e:ed:26:
                    87:21:58:e8:88:11:ee:7f:d5:3c:be:d7:af:fc:44:
                    d8:b6:19:5a:80:3e:2a:ac:14:62:97:6e:06:fb:d7:
                    d7:f4:d8:29:d7:47:a0:3b:b6:44:cc:2d:28:d8:67:
                    9a:e4:00:fb:cf:2c:96:8b:12:81:4c:dd:90:bf:f1:
                    f5:81:91:d0:4a:cc:6b:03:f1:26:ec:e8:11:14:c5:
                    9d:92:2b:8e:5e:15:d5:f1:d2:cb:98:b8:a1:61:ee:
                    02:d9:36:59:73:1b:5e:97:93:8b:ac:ce:95:23:30:
                    af:ff:2b:70:d1:85:05:da:29:94:56:c2:8d:37:a9:
                    1b:c1:74:a7:8e:8f:52:f9:f2:83:bb:d1:82:ab:c1:
                    31:dc:21:29:e7:1b:a2:a8:9a:60:c9:09:dd:a1:07:
                    c6:5a:da:b5:29:91:5b:fb:c6:bf:4e:c2:b3:92:ec:
                    d5:ce:19:e4:4f:fd:60:75:68:ee:fe:6b:66:75:12:
                    3d:2d:95:2f:72:79:41:c4:2d:1a:1d:87:33:9c:cd:
                    3f:ee:46:a8:bc:c4:87:13:42:7c:95:40:de:7a:11:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AA:A3:56:F2:FD:0D:9E:7C:FA:2C:67:B4:33:26:F9:D1:06:2E:DB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32342d3234203d3e20323132373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:b0:39:da:cf:89:da:01:12:a1:77:bc:57:5f:e0:12:e9:
         dc:16:2c:5d:a5:98:cd:6f:6f:b3:78:2d:b2:5f:60:81:1f:89:
         ee:b0:e5:15:bc:0a:0e:a0:16:8e:22:0e:25:5e:32:95:92:f0:
         cb:7c:ac:a8:a5:42:82:22:07:a7:1a:f9:e1:5f:e2:69:2e:45:
         4e:d9:ab:fd:e4:32:9b:ed:b6:cc:1c:f5:2d:aa:36:7f:c2:1f:
         f6:6c:19:05:d4:75:e2:0a:76:64:83:e5:ad:19:d8:8d:31:1f:
         b6:aa:16:4d:a5:cb:df:03:db:47:1b:b7:87:48:d6:55:f2:63:
         db:85:72:ff:3a:be:45:af:ec:6d:26:5a:8a:40:af:74:ed:50:
         98:37:dc:a5:17:0b:a3:43:c2:15:89:f6:b8:11:4f:88:d3:38:
         f5:19:ea:c2:df:cf:22:4a:18:11:6f:95:b2:72:ee:8d:81:5c:
         ad:ae:25:98:4e:ad:5a:5c:b7:46:28:9f:58:46:fe:30:ba:03:
         ca:b3:9a:ed:32:f4:65:78:c9:85:02:70:af:82:4a:aa:81:c9:
         fd:fe:38:f4:b7:43:dd:c8:bf:29:a1:b4:4a:ef:47:0e:03:21:
         a7:8b:c6:56:8a:3a:07:13:51:b2:00:a5:a1:87:88:cd:68:3e:
         5e:eb:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org