Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32322d3234203d3e203631333137.roa
File:                     3138382e3131362e31322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          A/AA18vASbKgvsxH7UqVbZOGWkOi9u4u+bG6h/CFOkY=
Subject key identifier:   A6:C7:71:D4:AC:A8:64:BE:B0:7C:6D:5D:D5:7D:5D:3F:7A:FC:79:6F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7B07BE2D335B15E7630EB93E1124FD01816EB7E5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:43 +0000
ROA not before:           Tue 28 Jun 2022 04:35:43 +0000
ROA not after:            Tue 27 Jun 2023 04:40:43 +0000
asID:                     61317
IP address blocks:        188.116.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:07:be:2d:33:5b:15:e7:63:0e:b9:3e:11:24:fd:01:81:6e:b7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:43 2022 GMT
            Not After : Jun 27 04:40:43 2023 GMT
        Subject: CN=A6C771D4ACA864BEB07C6D5DD57D5D3F7AFC796F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:76:09:9f:b0:89:0a:ab:66:b5:35:fd:26:
                    f0:db:60:bc:65:f8:e1:13:cf:75:c6:1c:95:d3:4f:
                    4f:5a:0e:41:d5:1b:c0:6c:d7:16:a4:36:fc:5a:f9:
                    aa:ef:18:a8:db:33:be:c4:d6:f1:a0:0a:e2:92:1d:
                    0c:5b:37:ef:4c:da:bc:9a:4c:fb:77:a0:25:ac:1b:
                    dd:e3:e7:fc:9f:5a:ab:c9:95:49:f5:7f:28:78:1e:
                    80:a1:a4:45:ed:04:29:e0:ce:68:a8:2b:0c:ad:ed:
                    7d:de:07:03:1e:d6:c2:50:1c:cf:8f:d5:59:90:41:
                    a4:a6:51:13:37:67:c7:5b:fe:b5:11:29:e8:91:4b:
                    64:57:2c:0a:8d:18:4b:1c:eb:5d:97:b3:a8:30:42:
                    11:b6:e4:2e:10:0f:da:c6:77:33:63:9f:aa:cd:b6:
                    aa:9f:63:35:0d:f1:1f:3f:b3:d6:f0:ed:61:39:37:
                    24:23:86:be:03:14:f6:dd:fc:26:a4:f1:40:35:bd:
                    96:7e:d2:84:e0:91:3a:a4:33:9e:99:02:b4:c7:a5:
                    c5:16:81:99:e6:fc:0c:96:2f:7a:ac:8d:17:95:ed:
                    6d:8c:44:e7:53:7b:39:30:3b:26:60:e4:96:69:dd:
                    45:6a:ae:5b:bd:92:8d:c6:3b:6f:3e:3c:34:d6:23:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:71:D4:AC:A8:64:BE:B0:7C:6D:5D:D5:7D:5D:3F:7A:FC:79:6F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138382e3131362e31322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.116.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:b5:32:fa:24:85:fd:0c:ce:36:60:64:68:bf:50:6d:ec:1f:
         51:20:90:59:7f:63:55:b2:40:3f:6a:4b:b8:3b:2f:07:48:31:
         72:4d:d3:b6:78:e2:cf:d3:30:cd:9b:47:d3:35:7b:b1:6c:ac:
         c0:2e:87:65:95:ec:ad:f6:22:07:1c:d4:0e:ea:31:15:3c:fb:
         15:20:00:2a:b6:b9:bd:6b:c5:40:f6:cc:8e:fa:06:3a:4f:eb:
         90:e4:f0:d5:c1:86:b4:f0:a6:18:44:7b:b4:71:ac:15:80:c7:
         37:37:af:a0:3c:71:e2:46:6c:72:f6:0d:40:12:46:e5:8b:c2:
         15:b2:eb:be:2b:32:a4:14:cf:87:f9:e1:84:73:2d:dd:d6:83:
         89:7f:b3:dd:f5:84:bf:10:4d:46:3c:bf:60:8a:80:7d:20:93:
         d0:31:81:24:c8:e4:6f:25:0d:32:b7:30:25:99:e1:9e:6d:4c:
         35:c7:0f:eb:6f:ea:01:aa:dc:6c:cb:35:04:4b:7a:62:a1:f3:
         9b:6b:0d:0a:29:7e:50:6b:d4:0f:46:a7:60:31:af:7b:5f:73:
         03:97:46:06:93:c1:c4:99:a8:4f:ea:d5:f6:71:6b:a0:5f:2b:
         74:11:a8:8a:e6:16:b1:46:f4:c4:52:6d:9a:35:a2:ec:2e:6d:
         8a:fe:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org