Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231382e3133322e302f32322d3234203d3e203631333137.roa
File:                     3138352e3231382e3133322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          NrjsNvXj4YD+zOuIioQYpwTRcSqcahmDEKchKKKN9X8=
Subject key identifier:   3A:E1:73:1E:C0:8A:A9:62:04:B7:57:AB:B3:71:E0:D2:BA:16:56:B0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3CD686A2A5FC3AC3AAED11187263C533A5A174D7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231382e3133322e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:47 +0000
ROA not before:           Tue 28 Jun 2022 04:35:47 +0000
ROA not after:            Tue 27 Jun 2023 04:40:47 +0000
asID:                     61317
IP address blocks:        185.218.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:86:a2:a5:fc:3a:c3:aa:ed:11:18:72:63:c5:33:a5:a1:74:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:47 2022 GMT
            Not After : Jun 27 04:40:47 2023 GMT
        Subject: CN=3AE1731EC08AA96204B757ABB371E0D2BA1656B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:94:bb:b4:f5:7c:62:8e:ca:75:08:4a:b5:
                    4a:d6:33:39:58:b8:14:55:1b:fa:6a:eb:2c:b2:e7:
                    fd:76:42:74:8d:c7:63:3e:cc:c0:c3:df:b1:e9:3e:
                    ba:ac:92:20:8f:86:03:5f:7e:c7:3f:be:30:00:9f:
                    42:ff:43:7c:9c:53:4b:90:62:27:0b:86:d9:0d:47:
                    e9:1e:04:df:08:87:90:23:aa:9c:11:64:7e:ef:24:
                    4d:d8:55:b5:87:2b:b8:30:ec:24:3e:d2:4b:0f:3d:
                    28:e4:62:77:80:90:bc:24:d7:cd:8a:02:23:fe:ba:
                    09:e4:84:47:03:3e:13:10:da:4b:ef:9c:49:03:70:
                    59:26:72:ce:00:cf:34:3b:39:c9:19:e4:e0:cc:cc:
                    81:73:fe:3c:4f:39:91:d3:43:e0:56:19:61:6c:85:
                    3d:4f:ba:61:92:13:ef:cc:bf:e8:f1:bd:ee:8f:78:
                    06:19:d3:0d:59:76:3a:0c:52:9b:40:40:3f:5c:45:
                    1f:35:ae:c0:0a:0f:b7:d6:81:cd:c4:79:8d:b1:d8:
                    db:47:e2:6b:b6:81:df:0c:d8:fc:31:60:24:a0:8f:
                    49:33:22:20:c4:53:74:aa:55:34:8f:84:1b:f7:4c:
                    69:54:60:14:17:96:00:67:f2:08:8b:0f:79:38:6b:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E1:73:1E:C0:8A:A9:62:04:B7:57:AB:B3:71:E0:D2:BA:16:56:B0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231382e3133322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:b1:e3:d1:2f:99:27:8d:f8:fd:f5:7a:1c:84:52:3d:c3:
         55:ef:ad:49:fb:2d:39:aa:57:74:d0:57:b5:f4:7a:ac:54:58:
         20:b5:7e:f4:87:02:d1:9b:6b:ce:ff:f4:d7:17:38:68:d3:db:
         16:e7:38:9e:f6:af:17:16:01:1c:92:1d:77:55:58:74:2d:7a:
         ce:30:04:15:8a:15:99:1e:02:7b:45:d6:39:40:37:6b:e6:61:
         0c:b6:12:53:ac:96:03:94:63:1a:83:bd:e4:2c:b2:13:a8:a5:
         8d:ec:ca:5d:af:ed:5f:89:6a:76:2f:4a:a1:73:a0:61:37:a9:
         80:28:ca:c2:16:fe:18:54:42:78:3d:8b:86:21:ce:b9:26:1d:
         3d:1f:c1:28:dd:d3:f7:b8:f1:94:db:d1:af:cd:9a:d0:58:3e:
         82:81:50:b0:c8:02:e0:84:11:df:c2:03:bb:4c:7d:93:eb:a1:
         aa:12:57:3a:e9:e4:ce:ac:92:22:02:5f:51:4f:1d:73:3a:63:
         5c:d5:cb:1c:ee:f6:56:74:c7:ae:0e:a8:32:ab:f0:d2:d8:60:
         6f:e0:f7:9f:50:d3:26:ed:ec:36:ad:a4:cc:99:57:f9:13:53:
         5a:07:ba:12:e6:17:28:76:33:c7:b8:db:21:58:21:b5:9e:ef:
         65:f4:aa:2f
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUPNaGoqX8OsOq7REYcmPFM6WhdNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1NDdaFw0yMzA2MjcwNDQwNDdaMDMxMTAvBgNV
BAMTKDNBRTE3MzFFQzA4QUE5NjIwNEI3NTdBQkIzNzFFMEQyQkExNjU2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1ZS7tPV8Yo7KdQhKtUrWMzlY
uBRVG/pq6yyy5/12QnSNx2M+zMDD37HpPrqskiCPhgNffsc/vjAAn0L/Q3ycU0uQ
YicLhtkNR+keBN8Ih5AjqpwRZH7vJE3YVbWHK7gw7CQ+0ksPPSjkYneAkLwk182K
AiP+ugnkhEcDPhMQ2kvvnEkDcFkmcs4AzzQ7OckZ5ODMzIFz/jxPOZHTQ+BWGWFs
hT1PumGSE+/Mv+jxve6PeAYZ0w1ZdjoMUptAQD9cRR81rsAKD7fWgc3EeY2x2NtH
4mu2gd8M2PwxYCSgj0kzIiDEU3SqVTSPhBv3TGlUYBQXlgBn8giLD3k4a1XZAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUOuFzHsCKqWIEt1ers3Hg0roWVrAwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzEzODJlMzEzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIw
MzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArnahDANBgkqhkiG9w0BAQsFAAOCAQEAj9Gx
49EvmSeN+P31ehyEUj3DVe+tSfstOapXdNBXtfR6rFRYILV+9IcC0Ztrzv/01xc4
aNPbFuc4nvavFxYBHJIdd1VYdC16zjAEFYoVmR4Ce0XWOUA3a+ZhDLYSU6yWA5Rj
GoO95CyyE6iljezKXa/tX4lqdi9KoXOgYTepgCjKwhb+GFRCeD2LhiHOuSYdPR/B
KN3T97jxlNvRr82a0Fg+goFQsMgC4IQR38IDu0x9k+uhqhJXOunkzqySIgJfUU8d
czpjXNXLHO72VnTHrg6oMqvw0thgb+D3n1DTJu3sNq2kzJlX+RNTWge6EuYXKHYz
x7jbIVghtZ7vZfSqLw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org