Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32332d3234203d3e203631333137.roa
File:                     33312e3138372e37322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Y2WPUsr5ayR010sAjNyy9so5xl5jUx4uZw4JRpygKYY=
Subject key identifier:   3C:3E:2A:02:C2:D1:5B:EF:B5:12:32:04:39:95:21:C2:F7:7F:B3:38
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1984390B6A7922DCFAFE46606C020920006DA453
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:34 +0000
ROA not before:           Fri 27 Nov 2020 15:05:34 +0000
ROA not after:            Fri 26 Nov 2021 15:10:34 +0000
asID:                     61317
IP address blocks:        31.187.72.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:84:39:0b:6a:79:22:dc:fa:fe:46:60:6c:02:09:20:00:6d:a4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:34 2020 GMT
            Not After : Nov 26 15:10:34 2021 GMT
        Subject: CN=3082010A0282010100B3F3A37D85A24C437F7495EB829DFFE5AA130D4A08759E0CC1BD189C826C580B73923588F71B6D1E789A41A374828A5495C9BD8DC0619C8512FA6E2EECA410CF6858A62A8DD9E22C3B9FE546113772388AFB388A29AC13B4413D907901A5524A22EA36C91FF2E677B13C233C2E9D34E7C101147B887A7EDCE835AAB1B4BD726249AF85AB7C9C3054BB809175A62C439C4ED5E37AB3A4161EC04E92E5D213DA4A08501079B9F87DDECDA93A46451ACF216BD1242C3197D2AD9A263F65EC44E50F2C6132C899E1FCE01E7DA667C44E4F2BA09D9E3A7F9D5FC46B71851DFA683AE3E409D3001E60E065516B3C5B63B32DEB562225469692DAADC13AA1472359A7CD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:a3:7d:85:a2:4c:43:7f:74:95:eb:82:9d:
                    ff:e5:aa:13:0d:4a:08:75:9e:0c:c1:bd:18:9c:82:
                    6c:58:0b:73:92:35:88:f7:1b:6d:1e:78:9a:41:a3:
                    74:82:8a:54:95:c9:bd:8d:c0:61:9c:85:12:fa:6e:
                    2e:ec:a4:10:cf:68:58:a6:2a:8d:d9:e2:2c:3b:9f:
                    e5:46:11:37:72:38:8a:fb:38:8a:29:ac:13:b4:41:
                    3d:90:79:01:a5:52:4a:22:ea:36:c9:1f:f2:e6:77:
                    b1:3c:23:3c:2e:9d:34:e7:c1:01:14:7b:88:7a:7e:
                    dc:e8:35:aa:b1:b4:bd:72:62:49:af:85:ab:7c:9c:
                    30:54:bb:80:91:75:a6:2c:43:9c:4e:d5:e3:7a:b3:
                    a4:16:1e:c0:4e:92:e5:d2:13:da:4a:08:50:10:79:
                    b9:f8:7d:de:cd:a9:3a:46:45:1a:cf:21:6b:d1:24:
                    2c:31:97:d2:ad:9a:26:3f:65:ec:44:e5:0f:2c:61:
                    32:c8:99:e1:fc:e0:1e:7d:a6:67:c4:4e:4f:2b:a0:
                    9d:9e:3a:7f:9d:5f:c4:6b:71:85:1d:fa:68:3a:e3:
                    e4:09:d3:00:1e:60:e0:65:51:6b:3c:5b:63:b3:2d:
                    eb:56:22:25:46:96:92:da:ad:c1:3a:a1:47:23:59:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:2A:02:C2:D1:5B:EF:B5:12:32:04:39:95:21:C2:F7:7F:B3:38
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:02:a3:e8:64:f9:6b:95:44:61:24:45:58:f1:53:7f:e1:
         c3:68:e8:6c:a5:f6:74:66:05:8e:ed:d5:7c:9d:a9:62:86:6e:
         fb:91:bf:98:0d:31:7d:02:16:7a:51:f1:4e:f4:a7:18:2d:0e:
         61:a4:07:f1:f4:7c:eb:75:ca:94:c7:c9:50:03:e8:b2:35:9f:
         4a:90:26:7a:a5:19:fc:12:21:5e:b3:d6:83:4c:71:b0:5d:1e:
         ed:3a:74:43:55:92:c5:de:5d:5d:b1:d2:cf:77:16:d7:02:b9:
         f8:e9:0e:be:1c:7a:f6:f2:93:81:de:ce:8e:ae:9a:99:ea:c9:
         d6:dc:50:20:75:ee:d3:27:f5:af:67:72:c0:77:db:d6:f8:a9:
         77:a4:e5:e1:2a:e7:fe:e1:2b:36:84:66:88:4d:b6:34:79:05:
         25:11:83:64:80:ca:f3:70:f5:44:79:04:79:7d:54:58:98:5c:
         04:d9:e6:2f:ae:ff:0e:49:e1:7b:1d:df:88:57:70:93:14:34:
         09:02:76:91:aa:f2:53:80:f2:e8:d9:85:53:8c:ce:55:78:c2:
         b9:7a:03:88:1a:0a:ae:c2:1c:d6:3b:bd:88:cf:cd:03:97:cc:
         d9:a9:ef:73:3e:bf:77:12:ab:cc:a9:89:12:7c:c5:a1:6f:ad:
         52:c8:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-fra.rpki-client.org