Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
File:                     3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          En+BfSoXTewCHK75bR6IR9pLfL5Z20WKG0GXZBQoU1I=
Subject key identifier:   7E:5B:AC:1C:9D:CC:56:4E:AB:40:7D:64:6E:0C:06:21:69:84:94:9B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5C9F2FADAD3AAF6437E9D0559855918A3AC0E889
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 24 Feb 2023 07:45:37 +0000
ROA not before:           Fri 24 Feb 2023 07:40:37 +0000
ROA not after:            Fri 23 Feb 2024 07:45:37 +0000
asID:                     141039
IP address blocks:        185.202.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9f:2f:ad:ad:3a:af:64:37:e9:d0:55:98:55:91:8a:3a:c0:e8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 24 07:40:37 2023 GMT
            Not After : Feb 23 07:45:37 2024 GMT
        Subject: CN=7E5BAC1C9DCC564EAB407D646E0C06216984949B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:32:f5:48:0e:b2:6a:57:4b:bc:1e:87:50:82:
                    f6:46:f0:5c:f5:0d:bc:3d:90:24:ea:9a:64:a0:e0:
                    ba:1f:3c:60:14:99:17:51:b6:f3:40:7b:2a:96:d3:
                    af:3f:22:9e:a0:cf:fa:4f:19:26:1e:7c:f9:83:52:
                    a4:d3:a9:8d:fc:a6:fd:6a:1c:51:f3:8d:ec:4b:a1:
                    a2:b8:6f:7a:46:5d:fd:6b:af:fe:64:47:76:7d:49:
                    cf:3b:06:ea:77:af:34:23:21:9b:0d:9d:b2:8b:40:
                    25:e3:57:11:f5:1c:0c:4b:ea:ec:89:d0:6b:ad:b5:
                    e4:28:a9:08:66:d2:48:d6:97:12:83:66:f1:af:76:
                    10:ff:cd:83:1f:fa:33:74:2c:7d:bd:3f:04:ce:f1:
                    d2:64:76:07:7f:d4:df:b0:30:1b:df:83:b3:27:50:
                    7c:55:0d:63:7c:01:6d:30:89:50:13:39:6a:aa:b4:
                    b5:86:e1:9b:68:30:27:71:b9:e6:2d:f4:b5:e9:ce:
                    cb:d6:a6:d4:52:77:eb:d6:17:f0:57:f1:0e:79:32:
                    90:5b:e8:28:6b:77:6e:ea:76:b7:26:be:cb:2d:b4:
                    67:3f:77:08:78:36:1f:56:5f:9c:82:39:69:3a:95:
                    55:91:69:1d:1e:2c:00:8c:9f:d7:b9:04:62:af:ff:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5B:AC:1C:9D:CC:56:4E:AB:40:7D:64:6E:0C:06:21:69:84:94:9B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:cd:e3:f5:7b:82:05:87:fa:e6:aa:9e:6e:dc:b6:34:cf:
         1d:95:11:20:ff:32:f7:dc:22:10:46:e3:ee:51:8c:5b:00:2b:
         b8:fe:e5:9f:95:6e:52:5d:3c:62:45:e6:b1:b6:46:91:46:18:
         5d:07:b8:f6:7d:94:01:78:10:79:d2:ec:ae:b8:04:93:05:eb:
         39:e3:36:a7:cb:4c:b4:f4:5c:64:e7:f9:f1:17:7a:ab:4a:7e:
         d4:97:8c:cc:9f:4c:7d:96:e6:93:50:20:cb:55:74:9a:61:05:
         83:97:5b:1e:24:3e:06:2c:ff:8c:ba:a1:5e:ff:b2:61:35:8c:
         44:23:b1:87:c5:17:94:32:a5:94:4c:4f:bb:a3:32:fe:ac:73:
         e0:ad:b7:12:5b:98:66:55:52:38:45:08:17:c6:b1:de:4f:e7:
         9f:fe:15:86:a9:a7:43:cf:ab:ad:62:25:73:8e:b7:b2:11:a9:
         b4:06:ee:f6:2d:72:2b:86:20:b0:b9:4b:f3:97:cd:84:8c:74:
         8f:cc:a0:8f:06:29:61:88:7d:d8:f8:8b:47:1b:6d:3c:2b:95:
         b3:01:10:f2:fe:e3:6a:aa:3e:3a:f5:f9:a9:ab:03:7e:d9:89:
         bf:50:f3:09:69:09:96:7a:99:df:b9:a9:24:f2:e2:1e:5b:b9:
         f8:ff:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org