Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32322d3234203d3e203631333137.roa
File:                     3138352e3139372e3139322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          7dqy3AEBjDGg0a/X1Lkvz3q/2tlCUss6oCXNVS44TxM=
Subject key identifier:   E8:49:0E:29:48:91:47:79:30:B4:EC:31:73:B0:44:23:CE:32:69:27
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1D2847031E58724BDD077CD93752ED81E4A99DDC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:23 +0000
ROA not before:           Tue 28 Jun 2022 04:35:23 +0000
ROA not after:            Tue 27 Jun 2023 04:40:23 +0000
asID:                     61317
IP address blocks:        185.197.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:28:47:03:1e:58:72:4b:dd:07:7c:d9:37:52:ed:81:e4:a9:9d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:23 2022 GMT
            Not After : Jun 27 04:40:23 2023 GMT
        Subject: CN=E8490E294891477930B4EC3173B04423CE326927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:6d:10:f0:dd:13:8d:02:3c:6f:10:4d:89:
                    e7:00:d3:29:db:f2:cb:81:3b:0f:1d:2a:ec:30:71:
                    ab:ee:a1:11:3c:4a:e5:b8:5e:bf:40:60:2f:7c:a5:
                    e2:94:df:97:77:16:5d:e6:fa:65:c7:11:67:3e:ec:
                    c7:40:06:ec:c1:55:7b:90:ae:5e:f4:af:93:1b:e8:
                    2b:44:4b:23:8f:ca:b3:84:d6:ed:4c:66:43:c3:59:
                    0f:0f:1f:9c:33:3e:8e:59:3c:bd:5c:63:1e:41:0e:
                    d9:d0:c4:f4:ad:88:e0:3d:4e:4b:87:30:0b:8c:33:
                    ee:2e:83:a0:86:84:88:d0:3d:ae:b7:65:30:e8:07:
                    76:14:2e:47:10:3e:66:bd:78:f6:07:68:63:d1:27:
                    d8:86:f8:2e:53:f9:3b:c2:cd:0a:8e:b0:c0:71:19:
                    69:8b:72:9d:2b:b7:fa:ec:01:cb:06:ef:dd:95:ee:
                    b7:73:20:85:dd:fa:09:ff:49:de:70:6f:f5:49:4d:
                    f6:e0:0e:2e:c9:71:ca:7f:c1:d3:2a:16:ff:56:79:
                    2d:a9:63:57:41:fc:c4:82:ba:95:ed:a9:d9:aa:06:
                    5a:78:26:c2:77:72:5b:10:5f:42:dc:2c:39:39:5e:
                    c6:9f:ce:78:42:10:63:ee:72:f7:14:3b:d1:ac:42:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:49:0E:29:48:91:47:79:30:B4:EC:31:73:B0:44:23:CE:32:69:27
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:29:b7:d8:9e:06:b4:49:c9:df:d1:12:4e:08:7a:2c:46:
         0d:5d:00:76:3e:02:77:1d:37:61:86:48:f9:1c:a2:3a:f6:ee:
         51:b3:11:ac:3c:56:ee:e7:de:25:e5:4a:42:3b:b1:c0:62:14:
         54:dc:4e:5e:12:10:d9:f0:23:50:50:82:58:35:2e:03:93:86:
         4f:47:6c:71:09:01:7a:a7:ba:bc:6e:e4:34:e5:10:07:54:3c:
         4b:cf:32:e5:9e:55:05:16:8f:7f:a4:2b:e1:30:54:68:59:ac:
         8c:49:08:d7:de:30:0a:5b:8d:1b:a1:ca:e8:3a:52:86:fe:19:
         b7:a4:6c:96:5b:c1:73:5e:d2:b7:80:2b:d1:28:7a:66:16:88:
         df:59:c8:02:f8:05:1e:fd:b0:a5:61:2a:22:d6:8b:5b:d2:9d:
         35:c5:92:21:8e:96:b5:4c:a1:2f:c4:aa:80:93:5a:d2:61:8e:
         e9:2d:4a:7d:5d:75:2d:bd:e5:ad:2f:29:20:9e:4a:53:92:2c:
         ff:b4:a1:83:34:10:d6:41:4b:b4:5e:eb:bd:8c:54:ec:8c:cc:
         e0:ab:48:96:59:7d:dc:e9:ec:14:bb:2e:7b:c7:4e:24:bb:ee:
         05:53:e7:0e:54:71:91:1a:15:5b:14:7d:b9:00:72:d7:0e:ae:
         89:e6:f9:f4
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUHShHAx5YckvdB3zZN1LtgeSpndwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjA2MjgwNDM1MjNaFw0yMzA2MjcwNDQwMjNaMDMxMTAvBgNV
BAMTKEU4NDkwRTI5NDg5MTQ3NzkzMEI0RUMzMTczQjA0NDIzQ0UzMjY5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGo20Q8N0TjQI8bxBNiecA0ynb
8suBOw8dKuwwcavuoRE8SuW4Xr9AYC98peKU35d3Fl3m+mXHEWc+7MdABuzBVXuQ
rl70r5Mb6CtESyOPyrOE1u1MZkPDWQ8PH5wzPo5ZPL1cYx5BDtnQxPStiOA9TkuH
MAuMM+4ug6CGhIjQPa63ZTDoB3YULkcQPma9ePYHaGPRJ9iG+C5T+TvCzQqOsMBx
GWmLcp0rt/rsAcsG792V7rdzIIXd+gn/Sd5wb/VJTfbgDi7Jccp/wdMqFv9WeS2p
Y1dB/MSCupXtqdmqBlp4JsJ3clsQX0LcLDk5XsafznhCEGPucvcUO9GsQtc9AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU6EkOKUiRR3kwtOwxc7BEI84yaScwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMxMzkzNzJlMzEzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIw
MzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArnFwDANBgkqhkiG9w0BAQsFAAOCAQEAWsYp
t9ieBrRJyd/REk4IeixGDV0Adj4Cdx03YYZI+RyiOvbuUbMRrDxW7ufeJeVKQjux
wGIUVNxOXhIQ2fAjUFCCWDUuA5OGT0dscQkBeqe6vG7kNOUQB1Q8S88y5Z5VBRaP
f6Qr4TBUaFmsjEkI194wCluNG6HK6DpShv4Zt6RsllvBc17St4Ar0Sh6ZhaI31nI
AvgFHv2wpWEqItaLW9KdNcWSIY6WtUyhL8SqgJNa0mGO6S1KfV11Lb3lrS8pIJ5K
U5Is/7ShgzQQ1kFLtF7rvYxU7IzM4KtIlll93OnsFLsue8dOJLvuBVPnDlRxkRoV
WxR9uQBy1w6uieb59A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org