Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa
File:                     38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          DyQe810WvD1T6v8VrH+5L8cwt1xJvac5B1y7drA56bU=
Subject key identifier:   4D:4F:1C:87:A0:CC:0C:39:52:FC:F4:77:5B:F9:2E:06:E9:6A:A8:B6
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       136913BF0FE81DA35E934B01C50237BE205FC645
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     203061
IP address blocks:        83.171.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:69:13:bf:0f:e8:1d:a3:5e:93:4b:01:c5:02:37:be:20:5f:c6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=4D4F1C87A0CC0C3952FCF4775BF92E06E96AA8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:a2:27:05:db:98:6f:50:0e:d1:30:97:69:
                    05:15:d7:96:9c:53:62:19:08:23:80:11:6c:84:f5:
                    2e:4b:2f:35:df:3e:19:c5:f9:dc:0a:7e:aa:37:77:
                    84:79:1e:3f:3d:58:8a:eb:71:0f:fc:1c:8e:65:fc:
                    47:fe:7b:72:96:3a:16:77:35:ac:19:e9:81:59:cb:
                    7a:8b:63:29:a1:74:7d:43:a9:f9:49:55:98:94:23:
                    9d:15:09:58:59:97:4f:1d:94:0f:89:ec:a4:41:ba:
                    8b:64:af:f7:aa:18:bf:52:b5:45:33:23:ef:77:2a:
                    84:bc:19:a2:bc:2b:37:63:17:59:b2:2c:ff:1e:6f:
                    09:a8:b5:0c:53:cc:18:4b:0f:b9:ab:0a:ec:e1:87:
                    b4:bf:9a:35:08:c2:c1:6f:ef:16:44:89:7b:e5:0c:
                    7e:f6:38:d3:dc:08:e4:45:94:a5:9c:eb:f5:83:83:
                    ed:5c:9a:2a:49:4b:50:d0:01:d3:fb:ec:7c:d7:2d:
                    6e:4d:17:73:57:6d:2e:62:da:32:04:44:db:62:89:
                    2a:f9:7d:c3:37:fe:5e:75:fa:0b:6d:99:43:33:65:
                    b6:f6:dc:15:10:61:80:17:18:dd:aa:74:8a:75:1e:
                    e9:0b:7e:f1:4d:38:5c:18:85:9f:6e:55:bf:0e:9b:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4F:1C:87:A0:CC:0C:39:52:FC:F4:77:5B:F9:2E:06:E9:6A:A8:B6
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:3e:fe:79:0e:db:63:e7:37:30:33:de:64:a3:2a:ae:8e:
         b0:0f:6e:07:63:44:2a:33:58:e1:20:cf:86:da:d5:92:c8:65:
         45:36:96:83:35:6f:6b:fb:78:55:15:e3:b3:ca:3a:d4:0f:04:
         08:84:f9:a9:4d:cc:1b:16:f6:9b:16:88:4d:c2:26:b5:8c:2e:
         9d:36:ba:6e:d4:01:d2:83:56:d7:59:00:b6:25:c0:d3:24:54:
         23:2b:35:48:a1:23:fd:68:cf:62:25:df:1a:e4:92:83:b8:ee:
         55:c5:4c:c0:a8:23:fe:e9:da:04:32:d7:f6:02:b7:44:45:cc:
         6a:5b:bd:74:cc:39:1b:8b:7d:66:57:16:2b:b6:2e:39:ad:53:
         8a:9c:40:36:4f:57:05:b1:5d:7b:5e:d1:0a:cb:59:07:0a:4d:
         20:5d:96:b9:3b:41:60:42:12:1e:8a:00:89:20:1d:54:59:ac:
         64:f5:ad:c1:26:bb:53:21:a1:17:be:22:a3:ea:d5:8a:fb:4a:
         d6:7a:c3:92:0f:b4:4f:49:92:47:35:e0:c2:5c:c9:30:54:7d:
         14:25:6d:b5:de:d8:79:87:44:11:23:44:ba:e3:9c:9f:83:2d:
         4a:ec:8f:e5:b9:d7:76:4e:02:e4:b5:ca:5b:18:45:66:f5:98:
         c7:d6:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org