Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231352e3136362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Tpbx2wy02HEX5+OobiAQ4IUR0IGhgJxv73o1dJrlJn4=
Subject key identifier:   15:C3:5E:EC:35:F8:F7:8C:0C:CB:BB:3E:B5:4F:D3:54:50:15:53:3C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       780B1C806E7E145D6AC5D07E5EE011A198FA81E4
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:41 +0000
ROA not before:           Tue 28 Jun 2022 04:35:41 +0000
ROA not after:            Tue 27 Jun 2023 04:40:41 +0000
asID:                     61317
IP address blocks:        185.215.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0b:1c:80:6e:7e:14:5d:6a:c5:d0:7e:5e:e0:11:a1:98:fa:81:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:41 2022 GMT
            Not After : Jun 27 04:40:41 2023 GMT
        Subject: CN=15C35EEC35F8F78C0CCBBB3EB54FD3545015533C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:da:60:af:d3:cd:be:17:fb:7c:e7:9f:9f:
                    88:54:c5:dc:65:f2:2f:df:4c:7a:1c:44:aa:0c:92:
                    1a:5d:67:0b:ed:ab:1d:d4:b6:b6:90:12:4d:e2:4d:
                    8f:c9:a4:09:ae:ca:dc:82:a4:ff:77:43:2f:35:6d:
                    bc:22:01:bf:9d:0b:59:b0:27:27:71:15:b5:12:20:
                    48:7f:65:fc:13:50:87:3b:e7:ba:6b:47:ca:29:1f:
                    1b:aa:0b:92:51:43:f8:bb:b3:90:53:f3:2a:21:14:
                    b5:ed:9b:06:98:5b:30:b3:9c:2c:08:32:83:b6:25:
                    b4:4b:d3:cd:40:cc:76:aa:4e:6a:4b:d7:01:46:44:
                    1c:36:3e:7f:d4:f5:22:43:31:e6:8f:5a:6d:35:7f:
                    e3:ca:5b:55:09:d2:f3:0a:af:a9:50:68:e6:dc:1d:
                    45:5d:1e:2e:c8:8e:62:48:a4:41:7a:26:93:b1:22:
                    fa:5e:7d:43:a7:de:94:7b:79:cc:90:f9:ff:8e:b3:
                    d8:56:91:71:85:5e:57:0c:ae:8c:08:b1:19:45:a6:
                    fb:90:76:f5:62:02:15:a6:ec:d4:94:84:31:aa:d7:
                    50:5c:14:ea:e8:91:b3:16:85:2f:9e:24:d2:b3:5d:
                    b8:38:12:61:0f:f1:71:72:d3:82:1d:dd:95:68:38:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C3:5E:EC:35:F8:F7:8C:0C:CB:BB:3E:B5:4F:D3:54:50:15:53:3C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:11:3d:29:72:ca:3d:09:13:9e:c0:c9:e5:72:4f:97:fe:f2:
         af:7f:09:0d:6e:5d:8f:31:02:2a:c3:40:91:47:c0:e3:5a:2a:
         b3:05:69:70:27:0e:fa:66:dd:b8:09:f7:b3:55:e5:f4:2f:27:
         0a:ea:84:ba:db:c9:62:97:ed:60:2f:b3:64:93:9d:21:d5:d6:
         4f:f4:bc:9d:5b:8a:62:e9:e4:58:36:c7:b9:7d:f2:e8:24:ec:
         8b:24:2c:e3:fb:b0:5d:4b:b8:bd:c9:0c:c8:12:b6:3b:da:a6:
         d6:3b:ae:c1:c6:70:a3:50:e9:59:70:35:5b:0b:e9:9d:47:08:
         93:1e:ac:23:68:92:df:bd:b7:18:45:fa:51:17:91:3b:e7:a0:
         ee:a1:71:da:6f:19:c0:dd:ff:1f:c1:2b:ba:f2:9e:da:4b:8e:
         f6:3e:1d:37:c4:f3:3b:54:61:2d:4b:96:f7:ba:8e:6c:65:a2:
         32:13:b9:31:b7:4b:65:da:0c:06:d6:8a:54:57:50:65:77:72:
         52:0d:cb:92:6c:6d:12:55:6a:6c:5f:e2:cf:4a:8d:2c:33:bc:
         92:7f:b9:b3:52:55:af:9c:2d:38:5a:9a:da:8c:6f:ac:4f:d1:
         bd:41:b7:85:7f:03:b9:6a:d9:2a:c5:db:02:af:00:d4:d4:65:
         96:b0:6e:21
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUeAscgG5+FF1qxdB+XuARoZj6geQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDFaFw0yMzA2MjcwNDQwNDFaMDMxMTAvBgNV
BAMTKDE1QzM1RUVDMzVGOEY3OEMwQ0NCQkIzRUI1NEZEMzU0NTAxNTUzM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLo9pgr9PNvhf7fOefn4hUxdxl
8i/fTHocRKoMkhpdZwvtqx3UtraQEk3iTY/JpAmuytyCpP93Qy81bbwiAb+dC1mw
JydxFbUSIEh/ZfwTUIc757prR8opHxuqC5JRQ/i7s5BT8yohFLXtmwaYWzCznCwI
MoO2JbRL081AzHaqTmpL1wFGRBw2Pn/U9SJDMeaPWm01f+PKW1UJ0vMKr6lQaObc
HUVdHi7IjmJIpEF6JpOxIvpefUOn3pR7ecyQ+f+Os9hWkXGFXlcMrowIsRlFpvuQ
dvViAhWm7NSUhDGq11BcFOrokbMWhS+eJNKzXbg4EmEP8XFy04Id3ZVoOEhnAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUFcNe7DX494wMy7s+tU/TVFAVUzwwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzEzNTJlMzEzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnXpjANBgkqhkiG9w0BAQsFAAOCAQEAoRE9
KXLKPQkTnsDJ5XJPl/7yr38JDW5djzECKsNAkUfA41oqswVpcCcO+mbduAn3s1Xl
9C8nCuqEutvJYpftYC+zZJOdIdXWT/S8nVuKYunkWDbHuX3y6CTsiyQs4/uwXUu4
vckMyBK2O9qm1juuwcZwo1DpWXA1WwvpnUcIkx6sI2iS3723GEX6UReRO+eg7qFx
2m8ZwN3/H8EruvKe2kuO9j4dN8TzO1RhLUuW97qObGWiMhO5MbdLZdoMBtaKVFdQ
ZXdyUg3LkmxtElVqbF/iz0qNLDO8kn+5s1JVr5wtOFqa2oxvrE/RvUG3hX8DuWrZ
KsXbAq8A1NRllrBuIQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org