Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e2037393232.roa
File:                     3138352e3138372e3233352e302f32342d3234203d3e2037393232.roa (raw, json)
Hash identifier:          Dok5yM/gSpZOJQOAOlYSo+tZFvkF8BPjeffkV7V3+Yc=
Subject key identifier:   7B:26:42:71:DE:14:03:36:D9:A6:03:0B:F5:D5:EF:BC:AE:F1:37:79
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       345BE6134C6B8C8494F3F6D0176140F34C48E535
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e2037393232.roa
Signing time:             Fri 27 Nov 2020 15:10:16 +0000
ROA not before:           Fri 27 Nov 2020 15:05:16 +0000
ROA not after:            Fri 26 Nov 2021 15:10:16 +0000
asID:                     7922
IP address blocks:        185.187.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:e6:13:4c:6b:8c:84:94:f3:f6:d0:17:61:40:f3:4c:48:e5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:16 2020 GMT
            Not After : Nov 26 15:10:16 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:a2:b9:8d:90:c5:a9:f7:f9:39:3f:9a:75:
                    13:24:ba:9f:f0:94:20:6e:3b:1d:5d:b2:fa:7e:bb:
                    2c:13:ab:6e:97:8a:c6:f8:58:fc:4f:8e:9f:9f:62:
                    cb:3c:28:a6:bb:d6:0e:93:19:81:e1:2c:42:8e:c2:
                    8f:8c:3b:55:51:d8:f4:61:59:4e:af:48:f5:1d:ca:
                    a5:f3:a4:64:1c:51:06:39:8e:9c:be:1d:70:64:bb:
                    c7:7d:63:4a:97:1c:35:0c:30:88:00:41:d5:5e:a4:
                    b6:e3:55:97:72:2a:34:9e:9d:45:4d:d1:5b:a2:af:
                    b7:74:bf:f9:bc:c6:92:0b:77:76:51:d1:fe:f6:53:
                    6d:5d:48:79:76:04:04:47:f7:26:ef:10:f6:d9:61:
                    ac:06:22:21:37:06:47:6d:ab:61:d3:1d:10:9f:13:
                    ef:d3:1e:b4:02:39:5f:bf:27:a4:fc:56:4a:3f:35:
                    8f:66:02:7e:77:a6:9a:dd:20:37:5e:60:9f:5f:2c:
                    e0:b4:a5:4b:9c:69:07:c3:93:ca:1d:28:cb:76:4b:
                    9b:e6:2d:76:b2:46:2c:a5:ea:72:8f:c1:f4:ca:36:
                    84:6c:00:22:66:0e:f1:5b:38:66:e0:35:45:6c:61:
                    d9:5a:6a:67:b7:1a:59:49:0e:d1:f3:12:87:29:d7:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:42:71:DE:14:03:36:D9:A6:03:0B:F5:D5:EF:BC:AE:F1:37:79
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:40:a1:90:c7:e8:54:79:e0:ff:b4:e0:7e:d5:be:18:13:ae:
         4a:2d:ba:82:db:fb:bb:73:1e:ab:83:c8:f3:32:48:f3:ef:8f:
         ab:17:81:28:47:d8:6e:1b:50:5e:9e:a8:48:49:c2:df:c8:45:
         3b:ff:20:d7:3e:bb:43:e2:ec:e0:26:b0:43:7f:4d:e1:63:99:
         76:62:8e:b2:a3:65:37:e0:eb:45:ae:f1:ac:23:6a:68:bb:ff:
         81:dd:13:f4:7e:92:80:a7:dd:37:88:d7:67:10:42:f0:71:fe:
         ac:77:fd:7e:71:51:6a:f8:3a:14:c8:d9:45:0d:b9:c5:e8:a4:
         ca:c2:1c:29:a0:33:ea:f1:68:6d:c0:59:fd:87:13:f7:a4:51:
         f3:2c:ce:12:b5:e6:82:0a:ff:d5:51:0b:5c:9a:36:90:9f:8e:
         32:50:44:c5:87:b7:ac:4d:79:4b:26:43:37:48:c6:5b:d0:7a:
         1f:b9:22:3f:f8:e8:45:8a:f4:c8:fa:ae:fa:b8:de:01:0b:d4:
         7c:d9:83:62:ae:3f:71:49:69:cc:81:cd:73:6f:2c:78:f1:96:
         20:1f:14:6e:07:52:83:47:59:91:e5:91:25:de:74:2b:71:83:
         d2:f5:20:9e:77:af:b9:9a:13:fb:4b:55:93:39:b6:eb:56:a2:
         78:fa:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org