Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32342d3234203d3e20323133303335.roa
File:                     3134392e36322e33362e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          jFDssT8PIR7nJGYBrPZnXMG9ty8HkvmQ+Zs2W9LDZvQ=
Subject key identifier:   40:EB:ED:EC:4E:1C:00:E4:E7:C2:F0:68:0C:16:6D:80:09:CA:AF:1B
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       57A9B86AC8CE75BC0A088E20CB694DA24E935D05
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 08 Jan 2021 18:21:40 +0000
ROA not before:           Fri 08 Jan 2021 18:16:40 +0000
ROA not after:            Fri 07 Jan 2022 18:21:40 +0000
asID:                     213035
IP address blocks:        149.62.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a9:b8:6a:c8:ce:75:bc:0a:08:8e:20:cb:69:4d:a2:4e:93:5d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jan  8 18:16:40 2021 GMT
            Not After : Jan  7 18:21:40 2022 GMT
        Subject: CN=3082010A0282010100A1C67DE23F5672754118F629A6BD85BD5D84CBF67C782A031DBC802BC9097A8586B5D530ADFC809BA557267DB951DEEA86BE1B72657D27A41E863E793F9CCF08E43A0988F6C615A13AF885917B0517F5B6BEDC453CCB426C75684488DE5FA56B340470BFB24061D54E92CEAF72D0FBCEA822D0DA5A0E35626798913567BF8A365D10EB089AA51079488B3C17A6A27AA0EE677795CD947D9F69EBB28A191DD5B701FCF78F57009F885334CCC95F2871058270ECB0C90A4B97C8A3B0E93E8CBC748BA8F852E5EDB270C43CA03DAA2C1AD2285ECC8350116FBC3AA301BA12F8503199854B9562ECC31B5586AEDCAD725B4584FEB232F42BA1CC7B2C4A654E8F0AAD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:7d:e2:3f:56:72:75:41:18:f6:29:a6:bd:
                    85:bd:5d:84:cb:f6:7c:78:2a:03:1d:bc:80:2b:c9:
                    09:7a:85:86:b5:d5:30:ad:fc:80:9b:a5:57:26:7d:
                    b9:51:de:ea:86:be:1b:72:65:7d:27:a4:1e:86:3e:
                    79:3f:9c:cf:08:e4:3a:09:88:f6:c6:15:a1:3a:f8:
                    85:91:7b:05:17:f5:b6:be:dc:45:3c:cb:42:6c:75:
                    68:44:88:de:5f:a5:6b:34:04:70:bf:b2:40:61:d5:
                    4e:92:ce:af:72:d0:fb:ce:a8:22:d0:da:5a:0e:35:
                    62:67:98:91:35:67:bf:8a:36:5d:10:eb:08:9a:a5:
                    10:79:48:8b:3c:17:a6:a2:7a:a0:ee:67:77:95:cd:
                    94:7d:9f:69:eb:b2:8a:19:1d:d5:b7:01:fc:f7:8f:
                    57:00:9f:88:53:34:cc:c9:5f:28:71:05:82:70:ec:
                    b0:c9:0a:4b:97:c8:a3:b0:e9:3e:8c:bc:74:8b:a8:
                    f8:52:e5:ed:b2:70:c4:3c:a0:3d:aa:2c:1a:d2:28:
                    5e:cc:83:50:11:6f:bc:3a:a3:01:ba:12:f8:50:31:
                    99:85:4b:95:62:ec:c3:1b:55:86:ae:dc:ad:72:5b:
                    45:84:fe:b2:32:f4:2b:a1:cc:7b:2c:4a:65:4e:8f:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:ED:EC:4E:1C:00:E4:E7:C2:F0:68:0C:16:6D:80:09:CA:AF:1B
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:a7:9a:cf:c1:16:4a:15:77:b2:68:ad:35:63:e4:8c:f2:
         55:62:7c:26:50:55:8f:2a:f2:a0:2c:4e:64:e8:6a:11:ac:39:
         fd:ca:dd:e7:1f:7d:00:02:2a:ff:27:29:be:3a:53:9c:79:4b:
         b8:75:f7:0a:d1:65:86:80:e0:70:96:58:e7:d7:46:80:eb:2a:
         85:1f:95:e3:4e:03:fb:c0:48:73:32:58:35:de:ed:6f:da:27:
         61:34:b3:1c:df:52:e3:ba:4a:7f:48:a1:09:0b:b5:48:57:71:
         8e:6f:9a:a6:0a:cb:f0:84:76:10:0d:52:e1:56:ab:2e:cd:89:
         8c:37:16:6a:3e:17:58:43:8c:0c:5d:e3:72:a1:d4:ac:31:66:
         ef:49:9c:35:43:ac:84:eb:8a:58:fb:18:26:aa:da:f6:35:f1:
         81:9f:55:9b:ac:87:3d:be:72:68:39:41:a1:f1:8f:45:cd:69:
         28:d3:78:2c:53:a6:43:ef:88:ef:db:8a:ab:98:d4:b0:64:ab:
         da:72:5d:68:bb:37:61:dd:58:dd:94:dd:77:55:96:92:5c:f7:
         a1:d2:6b:91:19:6f:3a:f1:10:7b:47:7e:c6:cf:4e:9b:e6:8b:
         34:d9:9f:3a:f4:2b:a3:4e:97:5a:1a:63:27:a4:4b:eb:95:e1:
         8d:05:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org