Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235302e302f32342d3234203d3e20323132373836.roa
File:                     38332e3137312e3235302e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          1Vuvvny1eSzA+TWbOIsNawXA5XtVH27JMWDPPSIj1ZM=
Subject key identifier:   92:05:73:3B:C8:EE:94:07:F6:9B:BA:A6:60:8C:39:DC:57:06:10:A5
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2FA1D62D358CE920CA6C780E4F4F024E3D27A9C1
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235302e302f32342d3234203d3e20323132373836.roa
Signing time:             Sat 22 Oct 2022 04:33:59 +0000
ROA not before:           Sat 22 Oct 2022 04:28:59 +0000
ROA not after:            Sat 21 Oct 2023 04:33:59 +0000
asID:                     212786
IP address blocks:        83.171.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a1:d6:2d:35:8c:e9:20:ca:6c:78:0e:4f:4f:02:4e:3d:27:a9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:28:59 2022 GMT
            Not After : Oct 21 04:33:59 2023 GMT
        Subject: CN=9205733BC8EE9407F69BBAA6608C39DC570610A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:8d:55:81:c8:8b:23:8b:7f:32:f9:25:5b:
                    15:b5:ba:91:85:c8:84:f8:80:61:af:e4:14:a8:d2:
                    72:f6:4d:89:1a:ac:d2:a0:0f:b6:a4:23:fc:70:62:
                    3a:54:ea:e6:3b:95:18:39:be:57:a5:12:5f:7c:13:
                    e9:1e:5e:71:d5:dd:c3:60:84:42:af:ad:f1:49:38:
                    7b:e0:6d:08:8e:da:dd:5f:75:74:0c:06:ef:c7:13:
                    81:b9:2a:82:27:b8:72:1a:54:a5:0f:ef:72:ad:a2:
                    0e:df:99:e2:4f:7c:27:32:96:37:1a:e5:d8:ad:1e:
                    57:1f:8e:da:cb:ff:ab:5a:fb:af:4e:59:71:1d:88:
                    1b:07:84:80:50:39:0f:46:be:bb:eb:41:0f:a7:8f:
                    f8:ee:ea:8e:86:4c:c8:85:c8:b1:2c:1a:91:c3:79:
                    0a:02:c7:8c:60:9d:55:bd:0c:a0:27:66:93:ce:f3:
                    c3:f3:00:11:e5:9d:24:1f:89:41:19:a5:16:b3:38:
                    57:d7:09:d1:8e:06:02:00:95:1b:bf:bb:a5:d9:82:
                    4a:da:1e:fb:9b:75:2d:5f:8a:eb:37:ef:36:db:62:
                    2d:cb:53:67:84:ec:21:95:c7:85:6b:8d:5d:da:69:
                    94:c8:43:0d:d1:3f:b7:c1:d1:f9:f8:a8:c9:95:e0:
                    42:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:05:73:3B:C8:EE:94:07:F6:9B:BA:A6:60:8C:39:DC:57:06:10:A5
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235302e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:15:e2:da:8b:6f:19:83:a1:18:d0:b3:be:43:d5:5d:2b:37:
         24:30:58:86:92:6b:be:a9:d3:30:e9:44:2f:37:89:46:c3:da:
         d7:4b:64:f1:37:8b:63:d5:34:d8:8b:a7:af:83:cc:54:3e:55:
         3e:04:3b:5a:40:a5:5c:71:70:3b:4a:84:2d:b1:d7:ff:83:5c:
         de:d4:a5:51:8d:2d:7a:9c:7c:0d:21:12:ce:7c:83:90:a4:b4:
         17:11:88:8c:b6:05:24:4b:01:fe:73:ec:3c:aa:09:5a:78:f2:
         29:64:74:60:cb:d5:6b:d4:ad:f7:2d:c0:91:d5:9f:69:a1:3f:
         73:30:ac:c5:3e:26:d0:cc:e4:64:94:1b:c1:15:4e:dc:cc:ec:
         3e:6c:60:6b:1c:b1:d8:68:9e:53:7f:50:3e:73:b8:35:d1:9a:
         d8:a4:c2:56:98:b6:c8:d4:77:f5:7f:d6:e6:75:7c:f4:d2:54:
         47:b1:e5:b5:e4:42:87:f3:3a:0d:90:ef:33:f3:5d:8c:69:21:
         9b:e0:02:af:9c:3a:0f:c5:21:20:b2:9a:ff:05:db:82:b4:62:
         8f:68:be:4e:6f:45:11:11:1a:b5:f1:f4:2c:6d:36:20:e8:53:
         88:7b:9b:73:a3:d5:29:26:9f:b5:45:31:57:be:b6:c3:5b:9b:
         b2:22:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org