Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          JDb4OFEDdcOlO4o9FAyeJ25JxjxJem9AO4jcPNBNqLE=
Subject key identifier:   7E:60:59:87:07:FF:51:4B:0A:D9:D4:4E:DE:6A:39:25:37:E7:40:88
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       453A7A1595F88CF5E3A02EEFBE5EA5DC416D9800
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     136787
IP address blocks:        185.211.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:7a:15:95:f8:8c:f5:e3:a0:2e:ef:be:5e:a5:dc:41:6d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=7E60598707FF514B0AD9D44EDE6A392537E74088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:fe:18:93:48:39:4f:e6:5c:7f:a1:c9:05:
                    bb:6e:25:6b:af:b5:ce:41:b5:01:df:91:35:52:07:
                    84:d8:d3:69:5a:21:15:5f:a1:37:d2:dd:3c:9c:ee:
                    b2:ba:c3:0a:91:39:d0:e6:e0:dc:b9:66:ec:33:b4:
                    40:e1:5c:c5:d7:3f:b5:95:24:53:68:6d:1d:fb:5a:
                    07:8a:41:c2:79:db:8d:32:66:66:0b:64:eb:48:29:
                    18:87:ec:3b:67:e7:46:f8:6d:e0:f3:19:9d:c4:4c:
                    64:da:9e:81:cd:71:76:2d:75:41:5b:59:11:68:75:
                    02:8a:c8:bb:c5:7e:16:70:bd:23:75:94:d4:03:05:
                    f3:88:e8:f1:99:37:3e:fb:90:66:d4:f9:1e:d6:5d:
                    59:cb:24:9d:3d:61:39:f2:6f:6b:9f:ad:a7:65:26:
                    63:cb:b6:61:37:86:f8:b7:53:d7:12:95:24:72:39:
                    aa:45:3a:09:d9:6b:d1:99:6e:de:3e:d9:07:76:f9:
                    ae:b0:28:ca:9d:84:c9:68:f0:af:6e:54:60:e6:25:
                    b5:a3:fb:b4:df:82:13:d2:7b:65:b6:0f:48:ff:ae:
                    ca:9c:61:2d:b9:09:bb:f7:f7:38:07:ac:7d:0d:2d:
                    ea:70:87:a6:bb:c0:1a:05:df:8d:8e:e8:b6:ce:db:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:59:87:07:FF:51:4B:0A:D9:D4:4E:DE:6A:39:25:37:E7:40:88
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:0c:de:18:64:9c:59:be:73:51:0b:b2:45:6b:9b:86:c2:
         bb:65:b9:49:20:c0:37:ad:07:bc:ed:7e:c4:21:a8:56:50:d9:
         59:f2:8c:13:38:06:50:bd:3b:da:87:92:b4:70:47:c1:9b:5f:
         96:89:e3:e9:c6:42:b6:d7:52:2b:94:7e:85:48:c6:99:cb:86:
         30:90:68:bf:5c:29:d5:bc:ba:7d:d6:45:9d:27:54:ec:6b:dd:
         17:d0:95:eb:46:48:82:36:ce:27:d5:f7:70:ec:82:b0:cb:b5:
         7e:d2:26:66:a7:5a:f1:a4:db:ff:ee:af:b8:14:bd:2e:ec:30:
         b1:18:36:54:4d:47:b5:de:bd:2a:f0:b5:7d:99:3f:ba:b9:d7:
         ea:15:fa:d0:e1:d1:33:f8:6c:7b:1a:92:ff:af:9c:d4:af:4f:
         fd:e9:80:65:a0:89:c4:7e:df:b6:29:0f:51:87:64:17:0f:9f:
         16:c9:b0:26:49:44:9b:63:bd:69:01:25:fb:23:30:0d:e1:23:
         8a:55:62:37:00:f5:52:1e:5e:67:8d:af:a4:dc:fa:68:a5:bf:
         ce:4c:e0:b7:13:f4:67:e0:af:2a:a3:11:62:61:9a:5f:82:b5:
         39:e3:70:88:f5:b2:bf:c1:9f:3a:c8:8e:34:67:c6:88:04:35:
         be:1a:a5:72
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIURTp6FZX4jPXjoC7vvl6l3EFtmAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMjEwMjIwNDI5MDZaFw0yMzEwMjEwNDM0MDZaMDMxMTAvBgNV
BAMTKDdFNjA1OTg3MDdGRjUxNEIwQUQ5RDQ0RURFNkEzOTI1MzdFNzQwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Wf4Yk0g5T+Zcf6HJBbtuJWuv
tc5BtQHfkTVSB4TY02laIRVfoTfS3Tyc7rK6wwqROdDm4Ny5ZuwztEDhXMXXP7WV
JFNobR37WgeKQcJ5240yZmYLZOtIKRiH7Dtn50b4beDzGZ3ETGTanoHNcXYtdUFb
WRFodQKKyLvFfhZwvSN1lNQDBfOI6PGZNz77kGbU+R7WXVnLJJ09YTnyb2ufradl
JmPLtmE3hvi3U9cSlSRyOapFOgnZa9GZbt4+2Qd2+a6wKMqdhMlo8K9uVGDmJbWj
+7TfghPSe2W2D0j/rsqcYS25Cbv39zgHrH0NLepwh6a7wBoF342O6LbO29XdAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUfmBZhwf/UUsK2dRO3mo5JTfnQIgwHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
My8zMTM4MzUyZTMyMzEzMTJlMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnTIDANBgkqhkiG9w0BAQsFAAOCAQEAXCIM
3hhknFm+c1ELskVrm4bCu2W5SSDAN60HvO1+xCGoVlDZWfKMEzgGUL072oeStHBH
wZtflonj6cZCttdSK5R+hUjGmcuGMJBov1wp1by6fdZFnSdU7GvdF9CV60ZIgjbO
J9X3cOyCsMu1ftImZqda8aTb/+6vuBS9LuwwsRg2VE1Htd69KvC1fZk/urnX6hX6
0OHRM/hsexqS/6+c1K9P/emAZaCJxH7ftikPUYdkFw+fFsmwJklEm2O9aQEl+yMw
DeEjilViNwD1Uh5eZ42vpNz6aKW/zkzgtxP0Z+CvKqMRYmGaX4K1OeNwiPWyv8Gf
OsiONGfGiAQ1vhqlcg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org