Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          9oyzZC3WI528EzfLh87gG3Mq66CVu84ttRLXgabXps4=
Subject key identifier:   74:C1:9B:ED:4E:94:E7:DE:E8:A0:F2:92:2A:B9:AE:FC:65:D7:4F:0E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       376E70027107599B6E08EAC28E4392FC159C9B71
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     136787
IP address blocks:        185.193.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6e:70:02:71:07:59:9b:6e:08:ea:c2:8e:43:92:fc:15:9c:9b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=74C19BED4E94E7DEE8A0F2922AB9AEFC65D74F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:c8:6f:d7:b9:09:9b:c0:9b:d3:82:ca:97:
                    13:6e:de:f5:98:f4:3e:a5:4a:f5:e4:26:65:05:87:
                    dd:29:6d:eb:53:92:34:0c:2a:50:3f:0f:45:cf:78:
                    3b:88:67:c2:55:93:8e:25:64:ab:cb:37:27:2b:14:
                    e9:aa:be:fd:bd:12:46:14:94:ee:92:db:cb:cc:0d:
                    a5:3a:e8:34:ce:39:7e:8f:5c:79:40:93:05:e5:9d:
                    fa:be:2c:b5:e0:d1:ab:06:fd:26:93:2d:29:83:f1:
                    20:50:f5:ff:2f:81:8c:90:52:0e:96:64:c1:2c:ef:
                    f1:c5:02:f9:30:68:b7:ea:85:1a:f3:f9:58:49:fe:
                    58:6d:d9:cb:fe:11:3b:b3:5b:df:1a:ec:15:ec:d2:
                    ef:2e:f4:81:d4:e9:32:58:d4:23:c2:df:a2:52:e4:
                    00:dc:1a:97:d0:ae:ed:19:b4:12:38:43:07:c2:c4:
                    fc:51:bb:1c:3d:06:bd:18:02:7c:f5:8d:8d:da:f8:
                    b0:db:d0:0c:02:79:3f:df:27:cc:ab:0f:21:6d:95:
                    15:d0:9b:ef:f8:f5:7d:b2:3c:d9:73:1d:c1:ec:e1:
                    09:ee:7e:76:1e:a8:64:7f:ff:68:85:94:d9:2b:38:
                    9b:b8:be:5d:01:f9:5f:48:66:02:bf:cc:96:2c:9e:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C1:9B:ED:4E:94:E7:DE:E8:A0:F2:92:2A:B9:AE:FC:65:D7:4F:0E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f2:50:ba:50:54:bb:48:59:ea:2f:5d:c4:9b:95:09:8f:82:a0:
         1b:d6:b9:60:ac:56:a5:82:8b:b6:ba:dd:27:f9:37:74:94:bf:
         02:fa:4e:20:20:da:c4:37:4c:2f:46:4c:48:36:00:8a:fe:d4:
         9f:6c:20:ec:04:f8:67:30:94:fe:43:cf:4e:fc:19:7f:30:8c:
         b8:95:7b:5c:30:7c:53:0b:af:10:c6:89:c0:1f:00:96:c0:ee:
         77:17:f2:75:c4:d3:66:84:60:e8:80:18:e7:87:dd:c6:ca:69:
         d7:aa:08:8c:06:09:33:39:df:5f:dc:ba:58:09:53:9f:a3:40:
         66:01:5c:08:02:94:7c:11:b1:a8:1e:2f:cb:97:15:0c:f9:22:
         27:c8:ba:bc:ef:8e:a7:c8:71:29:c4:5d:2c:3e:bc:e7:d0:0a:
         e7:cc:a1:87:d1:45:63:6f:c6:b1:8d:c0:fd:4d:94:ef:42:51:
         ad:cd:c9:06:06:82:96:aa:80:50:1b:39:41:a1:c1:be:9c:54:
         b8:88:90:1c:21:b2:45:8e:65:3a:69:df:8a:42:e8:09:59:9d:
         3f:06:7b:66:ba:ae:dc:d3:94:ed:cc:20:76:31:d5:9f:62:8e:
         e5:a4:3e:5b:8c:de:fa:2b:02:6c:aa:5f:ee:f0:52:1e:5a:7f:
         1a:2f:6e:d9
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUN25wAnEHWZtuCOrCjkOS/BWcm3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTNaFw0yMzEwMjEwNDMzMTNaMDMxMTAvBgNV
BAMTKDc0QzE5QkVENEU5NEU3REVFOEEwRjI5MjJBQjlBRUZDNjVENzRGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7chv17kJm8Cb04LKlxNu3vWY
9D6lSvXkJmUFh90pbetTkjQMKlA/D0XPeDuIZ8JVk44lZKvLNycrFOmqvv29EkYU
lO6S28vMDaU66DTOOX6PXHlAkwXlnfq+LLXg0asG/SaTLSmD8SBQ9f8vgYyQUg6W
ZMEs7/HFAvkwaLfqhRrz+VhJ/lht2cv+ETuzW98a7BXs0u8u9IHU6TJY1CPC36JS
5ADcGpfQru0ZtBI4QwfCxPxRuxw9Br0YAnz1jY3a+LDb0AwCeT/fJ8yrDyFtlRXQ
m+/49X2yPNlzHcHs4QnufnYeqGR//2iFlNkrOJu4vl0B+V9IZgK/zJYsnqH9AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUdMGb7U6U597ooPKSKrmu/GXXTw4wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMxMzkzMzJlMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnBQDANBgkqhkiG9w0BAQsFAAOCAQEA8lC6
UFS7SFnqL13Em5UJj4KgG9a5YKxWpYKLtrrdJ/k3dJS/AvpOICDaxDdML0ZMSDYA
iv7Un2wg7AT4ZzCU/kPPTvwZfzCMuJV7XDB8UwuvEMaJwB8AlsDudxfydcTTZoRg
6IAY54fdxspp16oIjAYJMznfX9y6WAlTn6NAZgFcCAKUfBGxqB4vy5cVDPkiJ8i6
vO+Op8hxKcRdLD6859AK58yhh9FFY2/GsY3A/U2U70JRrc3JBgaClqqAUBs5QaHB
vpxUuIiQHCGyRY5lOmnfikLoCVmdPwZ7Zrqu3NOU7cwgdjHVn2KO5aQ+W4ze+isC
bKpf7vBSHlp/Gi9u2Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org