Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e203631333137.roa
File:                     3231322e3130332e36332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Ixmq8uyO7do7AJAzJ2PYJRW/us1yoBENie3kZKo/Iw0=
Subject key identifier:   51:38:59:AA:81:1A:91:B3:E9:42:61:8B:56:FC:CD:2D:D3:D3:39:CD
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       38DFFD3282B9B00011E90B699ECDE7E98BED5DC5
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:31 +0000
ROA not before:           Sat 22 Oct 2022 04:28:31 +0000
ROA not after:            Sat 21 Oct 2023 04:33:31 +0000
asID:                     61317
IP address blocks:        212.103.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:df:fd:32:82:b9:b0:00:11:e9:0b:69:9e:cd:e7:e9:8b:ed:5d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:31 2022 GMT
            Not After : Oct 21 04:33:31 2023 GMT
        Subject: CN=513859AA811A91B3E942618B56FCCD2DD3D339CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:86:ad:c5:77:53:20:41:3e:59:ea:19:2e:
                    2a:d7:95:b8:ec:e7:27:f7:a0:5c:d4:22:0a:61:80:
                    13:59:72:26:b5:73:67:c8:cb:16:32:6d:3c:e7:2b:
                    7a:af:a0:f5:38:e3:d8:ab:e9:72:49:93:de:05:c1:
                    17:d3:9f:e3:ed:41:ec:d6:d5:06:b9:b8:67:07:8f:
                    4c:80:d8:53:04:52:96:80:4c:c2:ee:2e:08:3f:69:
                    b2:bd:43:6b:dd:9b:25:af:1a:29:2b:e8:20:70:3e:
                    d4:7b:03:e0:ee:67:67:e1:c8:c7:ef:cd:21:94:a4:
                    69:31:35:8e:fc:e0:dd:d9:df:f1:c3:a5:83:e8:2b:
                    96:bc:ce:11:fb:1e:26:79:f5:81:43:dd:b4:83:27:
                    4f:bc:f9:4d:26:39:7f:44:bd:ea:33:19:df:a4:03:
                    5c:f0:40:77:44:53:a7:a8:a6:be:d0:14:37:5a:14:
                    21:50:10:77:c0:af:49:fc:76:89:42:0f:30:86:73:
                    21:f7:53:cd:ca:4d:6f:39:87:c9:12:1c:4f:df:11:
                    e6:16:3c:1e:d5:54:5d:78:eb:4b:68:87:cd:fd:b3:
                    18:6b:14:df:36:26:69:45:b8:a8:2e:4b:de:94:fa:
                    30:34:a5:1c:25:3b:37:9f:66:2f:c9:db:4f:c3:f9:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:38:59:AA:81:1A:91:B3:E9:42:61:8B:56:FC:CD:2D:D3:D3:39:CD
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.103.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f9:87:4d:2a:48:9b:47:c8:53:c4:89:74:cd:aa:42:99:35:
         79:a1:e6:9d:12:4c:95:48:6e:f4:4c:03:59:40:91:ce:62:e8:
         df:f7:61:07:34:a7:1c:e7:9d:14:54:6a:12:37:be:af:b8:c4:
         fd:64:f2:24:19:09:c9:e3:9c:37:2f:18:52:35:15:a2:59:0f:
         a7:99:fd:7a:5f:9a:32:ac:99:6d:d6:e7:54:6c:93:b5:bb:74:
         77:fd:f0:71:b3:4a:c2:0d:ad:69:7a:ef:f1:98:28:2a:91:4c:
         29:e0:df:2f:9e:68:2d:d3:62:c2:93:46:b1:f5:28:91:4e:74:
         9b:df:c4:1a:cb:32:5b:ec:b9:d8:ac:5b:e6:9a:2f:bb:0b:f0:
         d5:c9:d6:9f:98:a0:c7:86:b5:0b:ff:a1:61:c9:7d:7a:51:cc:
         73:fe:e3:9e:3a:99:53:fd:d1:fa:6b:7c:66:f9:58:a2:e5:4f:
         ca:5b:92:48:4d:4d:bc:42:cf:3b:7a:2d:5a:97:26:53:3d:5c:
         79:2a:f0:84:26:ec:fe:3c:f6:48:25:8f:a9:85:3f:aa:e7:69:
         fe:f2:94:c5:c1:de:75:c4:18:c1:58:4a:2e:d4:a1:16:b6:24:
         93:13:ff:b7:01:7f:d7:48:ed:f8:f0:f3:4f:90:df:c9:07:2f:
         df:b1:f4:2f
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUON/9MoK5sAAR6Qtpns3n6YvtXcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzFaFw0yMzEwMjEwNDMzMzFaMDMxMTAvBgNV
BAMTKDUxMzg1OUFBODExQTkxQjNFOTQyNjE4QjU2RkNDRDJERDNEMzM5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaIatxXdTIEE+WeoZLirXlbjs
5yf3oFzUIgphgBNZcia1c2fIyxYybTznK3qvoPU449ir6XJJk94FwRfTn+PtQezW
1Qa5uGcHj0yA2FMEUpaATMLuLgg/abK9Q2vdmyWvGikr6CBwPtR7A+DuZ2fhyMfv
zSGUpGkxNY784N3Z3/HDpYPoK5a8zhH7HiZ59YFD3bSDJ0+8+U0mOX9EveozGd+k
A1zwQHdEU6eopr7QFDdaFCFQEHfAr0n8dolCDzCGcyH3U83KTW85h8kSHE/fEeYW
PB7VVF1460toh839sxhrFN82JmlFuKguS96U+jA0pRwlOzefZi/J20/D+coTAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUUThZqoEakbPpQmGLVvzNLdPTOc0wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMjMxMzIyZTMxMzAzMzJlMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADUZz8wDQYJKoZIhvcNAQELBQADggEBAFv5h00q
SJtHyFPEiXTNqkKZNXmh5p0STJVIbvRMA1lAkc5i6N/3YQc0pxznnRRUahI3vq+4
xP1k8iQZCcnjnDcvGFI1FaJZD6eZ/XpfmjKsmW3W51Rsk7W7dHf98HGzSsINrWl6
7/GYKCqRTCng3y+eaC3TYsKTRrH1KJFOdJvfxBrLMlvsudisW+aaL7sL8NXJ1p+Y
oMeGtQv/oWHJfXpRzHP+4546mVP90fprfGb5WKLlT8pbkkhNTbxCzzt6LVqXJlM9
XHkq8IQm7P489kglj6mFP6rnaf7ylMXB3nXEGMFYSi7UoRa2JJMT/7cBf9dI7fjw
80+Q38kHL9+x9C8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org