Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3234203d3e203631333137.roa
File:                     3138352e3139372e3235302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          7/fZGfTpIIGzaHNx2rbj12bmYfQnm9gDJFxORpvwbl4=
Subject key identifier:   A3:22:24:F3:AA:0A:0D:E1:0F:4B:83:46:54:32:BB:B1:BD:C9:AF:EB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3053459B7821327ECBF167FBDFCDA3C02134DB5F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:38 +0000
ROA not before:           Tue 28 Jun 2022 04:35:38 +0000
ROA not after:            Tue 27 Jun 2023 04:40:38 +0000
asID:                     61317
IP address blocks:        185.197.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:53:45:9b:78:21:32:7e:cb:f1:67:fb:df:cd:a3:c0:21:34:db:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:38 2022 GMT
            Not After : Jun 27 04:40:38 2023 GMT
        Subject: CN=A32224F3AA0A0DE10F4B83465432BBB1BDC9AFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:0a:e7:2b:49:62:dc:a4:ea:cc:46:c8:3e:
                    7a:8d:b1:d8:b0:85:80:55:b5:f7:27:2d:b8:24:d2:
                    f7:1c:b5:ea:37:1f:f4:a2:ef:2f:78:79:b2:14:fd:
                    ac:c4:ae:9f:86:0d:39:ee:01:63:4e:c3:2c:30:ca:
                    5a:c1:88:dc:10:0f:d5:c6:06:70:74:3f:e3:30:9b:
                    d6:42:2b:2b:a7:db:63:37:66:57:4f:fe:a7:b0:9b:
                    5a:28:39:ab:50:36:3e:52:23:77:55:3a:ea:3c:99:
                    55:e5:05:b9:15:c1:78:25:cc:04:d9:98:20:a9:21:
                    95:95:5c:52:4d:42:b6:2e:a0:5b:b9:2a:e1:6d:04:
                    9e:3e:fd:ab:09:b7:dd:fa:43:02:ad:93:66:5f:86:
                    73:dd:af:02:30:69:ef:48:d6:fe:45:22:9f:fe:89:
                    1c:6c:e5:bd:0f:88:c1:87:6e:c2:08:25:c8:27:e9:
                    03:ed:ce:d6:06:4f:7b:bd:1f:80:c4:8d:8d:45:cf:
                    99:0a:d7:8f:ff:a5:8b:4a:0e:2c:47:80:c3:fc:fb:
                    d0:e8:7d:16:31:f6:17:9b:74:d7:5e:3d:5f:36:7b:
                    1d:0d:a7:a2:4f:4f:c3:c7:69:aa:72:b1:8d:d4:28:
                    62:f1:93:9a:5c:6e:41:92:c7:a0:cc:1d:3a:b1:57:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:24:F3:AA:0A:0D:E1:0F:4B:83:46:54:32:BB:B1:BD:C9:AF:EB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3235302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:6b:1f:6a:95:7e:79:0c:bf:d2:ef:74:b6:17:a7:39:f4:c7:
         ee:f6:2e:5b:2b:76:e8:a2:62:f5:d7:ea:d8:ac:20:96:71:4d:
         e7:48:2d:e1:23:b8:bc:4e:2b:c8:ab:0e:2f:b8:f7:4f:06:05:
         bf:19:3b:52:8a:95:ea:71:15:e6:be:f5:b4:fe:9e:08:07:76:
         50:cf:21:9d:66:12:49:f1:f1:cf:77:b3:b0:47:1f:49:22:aa:
         61:15:c5:2a:d9:18:dd:ea:39:62:0f:85:8d:9a:37:ae:38:5f:
         53:87:19:e4:0c:02:d8:eb:bd:ed:4f:36:f5:b9:41:7f:8e:c4:
         0e:bd:71:d8:3c:8c:99:1a:65:36:8f:1b:5b:d2:34:70:97:0b:
         be:6b:a0:9e:53:34:8e:4f:3d:f8:f6:37:f5:57:f5:93:53:e7:
         5b:a8:cd:d8:34:7b:17:83:be:65:4b:b6:9b:99:0b:0f:c7:5b:
         c1:45:80:85:71:3d:61:eb:05:b5:1a:03:17:d4:e2:b5:8d:26:
         0e:24:ea:15:b9:ad:18:29:e3:90:34:60:b3:16:35:9f:d9:a9:
         a9:3e:66:cf:69:ca:3b:44:34:47:c2:2a:ed:d2:9a:4a:1d:c8:
         ec:5d:f9:1d:6c:d6:eb:8c:82:5d:71:ab:ea:4b:4b:d4:63:c2:
         bd:6d:62:03
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUMFNFm3ghMn7L8Wf7382jwCE0218wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1MzhaFw0yMzA2MjcwNDQwMzhaMDMxMTAvBgNV
BAMTKEEzMjIyNEYzQUEwQTBERTEwRjRCODM0NjU0MzJCQkIxQkRDOUFGRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNQrnK0li3KTqzEbIPnqNsdiw
hYBVtfcnLbgk0vccteo3H/Si7y94ebIU/azErp+GDTnuAWNOwywwylrBiNwQD9XG
BnB0P+Mwm9ZCKyun22M3ZldP/qewm1ooOatQNj5SI3dVOuo8mVXlBbkVwXglzATZ
mCCpIZWVXFJNQrYuoFu5KuFtBJ4+/asJt936QwKtk2ZfhnPdrwIwae9I1v5FIp/+
iRxs5b0PiMGHbsIIJcgn6QPtztYGT3u9H4DEjY1Fz5kK14//pYtKDixHgMP8+9Do
fRYx9hebdNdePV82ex0Np6JPT8PHaapysY3UKGLxk5pcbkGSx6DMHTqxV2eTAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUoyIk86oKDeEPS4NGVDK7sb3Jr+swHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMxMzkzNzJlMzIzNTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIw
MzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnF+jANBgkqhkiG9w0BAQsFAAOCAQEAu2sf
apV+eQy/0u90thenOfTH7vYuWyt26KJi9dfq2KwglnFN50gt4SO4vE4ryKsOL7j3
TwYFvxk7UoqV6nEV5r71tP6eCAd2UM8hnWYSSfHxz3ezsEcfSSKqYRXFKtkY3eo5
Yg+FjZo3rjhfU4cZ5AwC2Ou97U829blBf47EDr1x2DyMmRplNo8bW9I0cJcLvmug
nlM0jk89+PY39Vf1k1PnW6jN2DR7F4O+ZUu2m5kLD8dbwUWAhXE9YesFtRoDF9Ti
tY0mDiTqFbmtGCnjkDRgsxY1n9mpqT5mz2nKO0Q0R8Iq7dKaSh3I7F35HWzW64yC
XXGr6ktL1GPCvW1iAw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org