Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38332e3133362e3138302e302f32342d3234203d3e2030.roa
File:                     38332e3133362e3138302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          lCglMj1HQPZ0i3AdrcWl3Ehh9cnQv9zM4X011SsDJCo=
Subject key identifier:   E4:0A:64:5E:B6:CC:99:89:AA:B1:19:B2:BD:FF:24:21:5F:64:43:14
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7F1B8C3363B1E672F9F432656EF3F1F5C8BDE004
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38332e3133362e3138302e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:21:34 +0000
ROA not before:           Fri 03 Mar 2023 16:16:34 +0000
ROA not after:            Fri 01 Mar 2024 16:21:34 +0000
asID:                     0
IP address blocks:        83.136.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1b:8c:33:63:b1:e6:72:f9:f4:32:65:6e:f3:f1:f5:c8:bd:e0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Mar  3 16:16:34 2023 GMT
            Not After : Mar  1 16:21:34 2024 GMT
        Subject: CN=E40A645EB6CC9989AAB119B2BDFF24215F644314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:a5:22:d7:e8:42:a3:c6:29:58:fe:58:b8:
                    08:02:a8:8d:c0:3c:9b:db:10:ae:64:9f:df:10:03:
                    20:57:6c:56:05:b5:47:84:0e:85:9f:a4:81:cb:63:
                    72:e1:fa:cc:bd:3e:87:05:5e:1b:72:14:c6:39:91:
                    dc:85:09:48:62:3f:23:ee:cb:4f:34:15:e5:6d:d2:
                    76:35:80:d3:17:8b:74:4f:21:ab:0a:a7:07:bd:47:
                    8b:73:40:0a:5a:91:8a:5c:38:5a:cb:c7:3e:be:61:
                    8a:f0:a3:f2:77:63:6a:94:40:c8:ff:a8:32:5e:47:
                    41:60:95:fe:6c:4f:e0:47:8c:ef:df:52:2d:ee:ea:
                    a9:d0:53:9e:51:8a:0e:6f:bb:27:6c:e8:ea:4b:ae:
                    bd:3c:a9:48:1c:ae:56:56:3c:a5:70:55:56:05:f6:
                    ca:4d:0c:59:e3:01:6b:c8:f1:f3:05:36:ae:9e:09:
                    cb:6a:32:d3:9f:48:1a:e4:68:a6:04:e5:bb:d9:13:
                    fd:e5:63:d9:0c:c9:83:e6:e0:2e:9b:75:95:cd:73:
                    f0:0d:48:1d:ef:e0:10:40:4b:60:f5:da:da:87:40:
                    2d:25:25:5b:73:87:5e:8b:01:b4:4b:08:55:b8:9c:
                    54:85:24:a3:b4:5c:4a:cb:1d:4a:c4:c2:4c:51:a2:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0A:64:5E:B6:CC:99:89:AA:B1:19:B2:BD:FF:24:21:5F:64:43:14
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38332e3133362e3138302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:ff:52:e6:44:d2:f8:ff:4e:17:81:00:04:6a:31:3b:72:
         0e:b8:9c:c3:29:0e:ff:12:1e:5a:ae:16:f7:87:1b:3b:af:aa:
         6a:43:ab:6a:2d:3d:cc:ed:0e:ba:ed:e8:68:5e:72:9a:b2:0d:
         b9:00:30:67:e7:78:9b:e7:4e:82:68:e0:c6:4d:3b:61:89:73:
         d0:85:03:ea:49:48:ff:d3:85:75:e0:c1:64:9a:c4:d7:dd:27:
         cf:c4:93:fb:c1:6b:29:bf:12:06:6e:2c:4f:ea:62:d7:b2:4b:
         f5:ff:24:67:7d:a3:5b:e9:56:9e:06:c8:bf:bc:c5:1e:2c:2b:
         06:53:55:56:f5:86:42:09:e1:45:ce:2c:bd:61:99:d8:90:7b:
         af:a0:06:1c:3d:23:d7:7f:24:c1:2e:f2:56:57:91:3c:65:d3:
         10:4e:77:5a:6a:10:17:ce:ee:38:0e:65:e6:d1:5a:99:5f:82:
         1a:69:11:55:40:a7:4c:a5:1e:8f:ba:f1:d7:64:e1:18:77:36:
         4b:5f:76:f9:6f:8a:3f:3e:34:03:12:27:dc:d1:85:8e:0b:89:
         c6:74:e5:a0:09:e6:8c:68:2a:e2:fb:3b:45:5c:8c:43:8b:bf:
         aa:bf:b5:f6:cb:48:6e:a1:e8:d3:2e:e1:dd:e9:3f:e4:86:42:
         f4:11:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org