Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31332e302f32342d3234203d3e20323132323331.roa
File:                     3138382e3131362e31332e302f32342d3234203d3e20323132323331.roa (raw, json)
Hash identifier:          WKEU6/CSTv8oTAjx6ZIZgiuc7D/WqyWgwDGCv/H+lwU=
Subject key identifier:   79:41:75:0B:46:AE:C1:FC:E8:77:A1:31:16:EB:10:3D:DE:5A:EE:F2
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0B4DE077E340C304792C85569DA8BBEE5A2C12C7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31332e302f32342d3234203d3e20323132323331.roa
Signing time:             Tue 28 Jun 2022 04:40:53 +0000
ROA not before:           Tue 28 Jun 2022 04:35:53 +0000
ROA not after:            Tue 27 Jun 2023 04:40:53 +0000
asID:                     212231
IP address blocks:        188.116.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4d:e0:77:e3:40:c3:04:79:2c:85:56:9d:a8:bb:ee:5a:2c:12:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:53 2022 GMT
            Not After : Jun 27 04:40:53 2023 GMT
        Subject: CN=7941750B46AEC1FCE877A13116EB103DDE5AEEF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:4c:ee:f4:0f:b7:59:1f:44:35:40:c0:d1:
                    d1:2b:99:60:ae:c8:7b:a6:02:f6:51:93:b5:4e:e6:
                    9c:c0:6b:4c:52:27:1f:0a:38:44:31:2c:e0:03:e4:
                    2c:65:6c:e1:3a:9f:ee:8c:56:3f:6f:4d:75:db:af:
                    45:64:8b:a2:c0:3e:16:39:1f:1a:4d:30:b0:d7:04:
                    72:6f:b5:4c:c0:d3:9e:9c:b0:0b:10:b4:d5:46:5f:
                    1b:ef:95:c8:73:94:6d:81:6d:8d:dc:bd:bf:69:ee:
                    c1:5a:e9:de:f0:13:cb:51:d6:26:b2:b1:f1:0d:b7:
                    e6:3a:70:33:39:80:e6:52:ba:0f:12:13:05:bb:be:
                    b1:a7:1b:eb:8d:83:b9:e8:bd:ba:da:e2:e5:29:56:
                    59:d7:84:e6:27:dd:80:45:88:2e:76:d0:3f:7a:28:
                    5c:10:8f:9c:96:43:e4:36:6e:5f:8e:67:16:4a:84:
                    fc:63:c1:ab:de:b2:88:f1:7a:a2:2b:4f:a2:51:4a:
                    04:05:43:53:72:48:17:f9:55:13:15:ce:85:11:70:
                    59:48:ba:60:df:23:6e:3e:25:a3:dc:d3:5f:fc:c9:
                    d2:4a:a7:bd:61:28:b5:f9:ad:e9:13:bd:cd:e6:14:
                    9f:72:79:9f:6b:d3:49:50:f2:11:11:34:f6:f3:de:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:75:0B:46:AE:C1:FC:E8:77:A1:31:16:EB:10:3D:DE:5A:EE:F2
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31332e302f32342d3234203d3e20323132323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:2f:88:8f:43:77:65:3f:aa:40:e8:35:9d:47:45:0d:ba:
         7b:5d:cc:20:29:6e:73:54:05:56:3e:0c:ab:3c:20:d4:c6:b7:
         a0:21:e0:b4:e4:2e:9a:d7:a3:b5:4a:6a:31:22:47:d6:4b:85:
         4a:d0:e1:32:55:8a:fb:bf:f9:87:50:d2:1a:29:b7:61:5b:47:
         f9:a0:80:90:69:ad:1f:fc:8e:27:ba:b6:e8:50:cd:92:f9:79:
         4e:d2:1c:99:6f:bc:fc:ad:b4:cc:a3:2a:13:55:c9:92:02:7f:
         18:4e:0c:c9:54:69:8b:e1:ef:c8:c2:8c:b8:74:3d:53:ef:6f:
         af:ca:a8:57:63:c1:2c:8c:17:1f:85:42:a2:e2:55:ea:17:da:
         de:69:95:b0:2e:1a:56:6b:e5:e1:f7:96:c5:0e:11:f7:4e:c2:
         32:ab:22:0e:8a:a2:15:61:7b:e8:9f:78:ba:25:0d:91:ca:fd:
         08:9f:8a:de:08:eb:cc:9f:93:74:12:d3:14:94:20:52:47:bd:
         3b:99:ac:9c:e8:dc:19:e4:b2:8b:ff:5e:43:87:71:44:39:08:
         77:3b:91:be:12:b3:a0:b4:0b:a4:e6:23:a4:d8:8e:ea:05:9b:
         6c:b5:9d:b4:3f:3a:8a:00:f9:f9:55:74:9b:15:81:13:40:df:
         d1:2f:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org