Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
File:                     38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          5Vf17M6xbZUr0ofEqBHwwRHA84V6701P4PobJQBXqqs=
Subject key identifier:   45:BA:96:9B:11:A2:56:60:C9:D2:B9:CA:BC:2C:33:2D:96:D3:3E:13
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       0908F70D14872E36E32907CA64074564B224B0C2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 24 Feb 2023 07:43:12 +0000
ROA not before:           Fri 24 Feb 2023 07:38:12 +0000
ROA not after:            Fri 23 Feb 2024 07:43:12 +0000
asID:                     141039
IP address blocks:        83.136.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:08:f7:0d:14:87:2e:36:e3:29:07:ca:64:07:45:64:b2:24:b0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 24 07:38:12 2023 GMT
            Not After : Feb 23 07:43:12 2024 GMT
        Subject: CN=45BA969B11A25660C9D2B9CABC2C332D96D33E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:29:34:b4:65:6b:97:d3:41:01:77:4a:f2:6d:
                    cb:ae:fd:cb:d9:cd:41:a7:b7:68:0a:66:e5:a7:20:
                    8a:e8:ff:5f:4d:d7:5c:4a:a1:5f:b6:87:98:21:6a:
                    b8:a5:77:71:fa:c4:32:92:32:69:ea:24:b5:25:e6:
                    92:3c:9a:05:eb:6e:03:e3:80:4e:04:9c:35:c9:9b:
                    65:10:15:8f:a1:05:b1:09:f0:45:b2:66:5f:ca:40:
                    6a:eb:2b:6c:3d:72:1a:f4:d7:af:c0:4e:b1:35:5e:
                    fe:42:95:bf:f2:3f:0f:d5:d4:96:27:68:8e:ee:91:
                    69:bb:3e:b3:0c:f3:0e:8a:0f:02:25:9b:2b:24:e6:
                    9a:82:64:0a:ce:2c:f1:48:b7:f0:1e:9b:ad:bb:d0:
                    1f:d6:ac:72:b3:79:7d:d0:bf:f1:24:e2:25:0a:f2:
                    66:c1:5c:ff:85:d9:e1:9a:cc:18:83:75:fc:c6:71:
                    17:ec:c9:cd:73:85:b1:a9:1f:2e:79:f7:b2:ef:15:
                    fe:75:37:d6:b8:48:f5:97:13:55:6a:53:56:9d:a5:
                    d3:c9:1a:61:b7:83:ae:34:f8:05:f2:83:a0:e7:1d:
                    e6:e0:ac:c5:7c:bf:08:cb:17:c7:dc:ea:62:ae:23:
                    46:11:25:d9:97:37:ee:e1:01:f0:00:e2:39:c1:a7:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:96:9B:11:A2:56:60:C9:D2:B9:CA:BC:2C:33:2D:96:D3:3E:13
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:5b:e9:ac:92:0c:3a:04:83:99:64:9f:c8:2f:2b:af:d3:
         a3:2f:42:38:f6:4a:f2:93:98:01:31:ba:44:a7:ba:83:f5:52:
         5f:78:2a:09:70:bf:97:13:f6:fa:9c:0f:fa:33:37:2b:31:4f:
         32:e2:67:55:b4:7e:95:ab:a3:85:ce:74:c0:fb:e6:34:e0:2a:
         80:9e:11:22:2f:d4:7d:b7:c2:bb:43:45:6e:49:02:c5:58:c5:
         09:e5:fd:80:7b:22:7b:6e:b8:0e:ef:37:f1:a7:8a:9b:f0:74:
         ed:dd:e6:2c:aa:80:77:08:bf:21:7b:40:ed:b2:fe:40:76:11:
         15:49:23:c2:21:3b:46:1f:d5:70:dc:4e:85:b4:7f:04:2e:39:
         ee:e6:31:a4:70:6e:16:2d:20:94:b1:0c:f4:c4:23:08:7a:61:
         d8:49:5e:d5:e8:c5:74:ed:a1:cb:12:0d:4c:bb:b1:bf:22:79:
         8e:0f:ee:93:f0:92:f1:9f:15:9b:ff:ce:13:1c:86:43:d9:0e:
         2a:09:57:76:bd:a0:08:be:d7:e3:ae:ae:80:b2:5b:f0:6c:22:
         a8:5f:52:80:2a:67:b9:89:ee:ac:a1:1b:dd:4c:b2:57:c6:62:
         b2:fc:f0:c8:ed:e3:29:b1:e8:c3:b2:46:28:cb:b1:c5:f7:8b:
         fd:27:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org