Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31332e302f32342d3234203d3e20323132373730.roa
File:                     3138382e3131362e31332e302f32342d3234203d3e20323132373730.roa (raw, json)
Hash identifier:          4jzaNNao61gIWv7zD8vSSYGP2CIa3DKxY/VyGgPUVB0=
Subject key identifier:   EF:D9:A6:B0:2E:86:55:20:1B:B1:28:B4:9E:19:1A:0E:C3:66:41:70
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0911C44B373BA2FE22B1B9EC0D8520F300D32189
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31332e302f32342d3234203d3e20323132373730.roa
Signing time:             Tue 28 Jun 2022 04:40:49 +0000
ROA not before:           Tue 28 Jun 2022 04:35:49 +0000
ROA not after:            Tue 27 Jun 2023 04:40:49 +0000
asID:                     212770
IP address blocks:        188.116.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:11:c4:4b:37:3b:a2:fe:22:b1:b9:ec:0d:85:20:f3:00:d3:21:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:49 2022 GMT
            Not After : Jun 27 04:40:49 2023 GMT
        Subject: CN=EFD9A6B02E8655201BB128B49E191A0EC3664170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:eb:13:12:ed:ff:b3:5e:3c:2b:40:53:37:
                    5b:cb:5d:7a:e8:7b:b9:85:00:d0:00:c0:54:9d:66:
                    39:a9:61:c2:5d:35:18:a6:09:60:ba:a7:12:70:e1:
                    43:d8:3d:2c:4b:0c:37:b9:35:a7:44:fe:8f:f0:27:
                    62:66:23:73:04:8e:a9:38:68:cc:0c:c7:a2:a1:2b:
                    59:bb:51:53:3a:29:f8:fc:40:db:79:09:32:63:bd:
                    6f:70:ad:28:40:be:15:a4:10:66:c6:ab:7c:d0:78:
                    d5:20:50:84:c8:2c:1e:c0:b3:0b:e7:8d:61:ff:c1:
                    fd:22:de:2e:69:90:6c:fe:7e:f6:d3:7d:d6:d8:7c:
                    0c:2a:55:49:f4:7e:60:78:7f:eb:cb:69:64:af:3a:
                    68:95:bd:e9:0f:b6:99:b7:97:a9:7a:db:a1:d4:c0:
                    8e:dc:a3:df:8e:82:eb:e4:51:0c:be:b1:19:f8:ed:
                    1b:67:6c:86:8d:56:7e:f0:a9:44:5a:88:96:4e:93:
                    04:a1:f0:46:12:a9:dd:dd:f4:27:14:fc:8d:3e:ff:
                    a5:70:fd:cb:15:52:24:da:7b:4d:fd:75:49:90:d5:
                    ef:9c:ec:a6:af:4f:28:cd:30:e7:57:d2:dd:04:7b:
                    77:e1:e0:1f:fb:cc:80:08:ae:dd:f1:20:0a:e1:7c:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D9:A6:B0:2E:86:55:20:1B:B1:28:B4:9E:19:1A:0E:C3:66:41:70
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31332e302f32342d3234203d3e20323132373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:ec:3e:61:94:2e:a9:cf:07:eb:30:57:36:57:41:44:fd:
         9d:c5:4e:c5:19:f2:03:7b:9a:c8:25:47:cd:06:33:f0:fe:59:
         e4:0d:c9:d5:da:e1:9b:30:7b:c5:43:58:58:aa:c6:75:e6:48:
         8e:d5:61:22:1c:ae:96:95:4c:1d:f9:44:85:af:d3:35:67:7a:
         d8:40:3f:5c:81:bf:ef:bd:1f:0e:41:ec:e2:44:45:ce:ed:64:
         fc:c6:4d:93:78:58:4e:9a:b8:57:e9:05:44:c0:6c:c4:aa:b3:
         62:17:09:91:c8:cc:6e:0f:b4:7f:66:21:69:8c:36:1e:8d:93:
         ce:dc:8c:ee:a8:f7:5d:48:34:9a:6b:02:6b:56:a0:9f:9c:39:
         54:83:5a:1a:95:06:bb:97:4d:1a:5c:f5:b1:60:27:02:32:ac:
         63:b4:de:b3:0b:06:28:fb:f8:23:b2:76:f5:84:4c:70:b3:81:
         93:a1:a3:cb:02:da:a7:69:bf:cf:bc:bc:85:d4:4d:fa:12:e2:
         47:89:62:4d:c9:c3:f9:d2:d9:31:0d:39:97:c6:b0:23:b6:bf:
         3b:d3:01:95:9d:d2:d2:a9:14:25:e8:5d:09:50:10:d4:40:15:
         24:a4:8d:2e:c1:6f:00:dd:f2:72:54:db:42:42:cf:94:e6:9c:
         9f:b8:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org