Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa
File:                     3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier:          7KUn/Mzj5B2hTwbB0SjkL+6YwZ+xM2RgAo/1zccaJWM=
Subject key identifier:   B4:36:64:A3:98:B9:EB:0B:21:AE:3E:9C:1B:75:81:BF:74:C8:BA:C3
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       71A6190AD821E12916B67D398EBBBE2A6AD7C616
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa
Signing time:             Sat 22 Oct 2022 04:33:16 +0000
ROA not before:           Sat 22 Oct 2022 04:28:16 +0000
ROA not after:            Sat 21 Oct 2023 04:33:16 +0000
asID:                     206804
IP address blocks:        185.209.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a6:19:0a:d8:21:e1:29:16:b6:7d:39:8e:bb:be:2a:6a:d7:c6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:16 2022 GMT
            Not After : Oct 21 04:33:16 2023 GMT
        Subject: CN=B43664A398B9EB0B21AE3E9C1B7581BF74C8BAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:ab:96:b2:f4:f9:b0:17:6c:49:bb:01:79:
                    3e:8a:84:5e:38:48:e4:50:ba:19:37:6c:2f:76:be:
                    88:d2:11:c6:11:04:76:86:8f:3f:ae:b1:aa:f1:ad:
                    75:a3:2c:26:d6:46:6d:b3:87:97:23:32:3d:24:24:
                    29:19:e4:e8:02:c8:c1:b7:e0:b7:e8:f6:34:24:e4:
                    c9:db:b1:cb:6a:0e:9f:a1:ae:b8:9a:4e:ec:24:31:
                    d0:4e:c5:7c:ae:a7:7f:88:92:64:2b:a5:1e:2a:8b:
                    8d:4b:0a:fc:84:61:79:31:c3:76:55:a2:e3:1b:df:
                    08:4b:38:75:0e:95:48:9a:99:a5:ee:e3:7b:56:ec:
                    4e:02:1f:64:45:2f:98:f0:aa:a6:ce:0a:64:9f:e9:
                    d7:cc:e7:07:a0:e5:e4:df:85:8e:b5:5a:11:6b:c0:
                    eb:a6:ad:11:32:7c:7e:74:07:dc:ab:ec:06:51:b4:
                    d5:de:78:0c:12:c9:eb:dd:bd:cd:2e:80:ff:42:63:
                    88:ec:43:56:ef:eb:0d:a7:a6:7b:32:41:0b:e2:20:
                    3e:15:4d:a1:a1:86:8d:1e:e7:66:3e:9b:13:98:15:
                    76:5a:c0:b1:43:2f:98:f6:8f:59:69:ff:8a:eb:1e:
                    44:18:40:31:bd:bc:88:f5:9d:60:35:74:48:ed:60:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:64:A3:98:B9:EB:0B:21:AE:3E:9C:1B:75:81:BF:74:C8:BA:C3
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:c4:89:70:0d:b8:83:bf:8a:89:64:65:04:42:2e:58:42:
         3b:e5:95:00:77:85:e2:88:37:e6:28:da:ed:45:80:86:c7:bc:
         c4:97:a4:a7:a3:e8:1c:39:b1:df:12:b5:02:56:29:95:28:0d:
         bb:49:db:db:eb:18:e3:b2:ff:2c:c9:7b:a6:b7:3f:06:bc:dc:
         ed:a7:b4:58:34:5c:20:87:ca:e6:6f:7f:fc:61:10:df:7f:30:
         a7:d8:51:80:09:ca:a4:9d:02:4b:fb:ff:60:0e:42:bb:09:66:
         2c:82:e7:7c:46:4d:09:1a:d8:65:a5:af:13:e2:3e:9a:2d:82:
         49:09:2e:d7:bc:8c:70:63:b3:92:47:25:ed:3c:30:db:68:05:
         7f:ec:26:09:ce:5a:c7:90:20:37:98:68:48:41:dd:cd:56:d0:
         79:9a:bc:0b:88:45:da:0a:a4:84:e9:e8:db:e3:d6:73:64:d6:
         5c:25:e7:f8:98:9f:05:18:78:bd:cd:b2:66:20:59:3e:aa:1d:
         93:d8:3c:a0:01:7f:a6:d7:da:48:46:6a:63:0e:e6:5a:47:87:
         99:06:11:84:8c:2e:4b:e3:c8:b8:fa:54:6a:44:8f:09:09:09:
         32:c5:59:3b:b1:63:bf:24:aa:fd:1e:1b:6e:ff:a7:d6:87:1d:
         a2:02:93:29
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUcaYZCtgh4SkWtn05jru+KmrXxhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTZaFw0yMzEwMjEwNDMzMTZaMDMxMTAvBgNV
BAMTKEI0MzY2NEEzOThCOUVCMEIyMUFFM0U5QzFCNzU4MUJGNzRDOEJBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZ6uWsvT5sBdsSbsBeT6KhF44
SORQuhk3bC92vojSEcYRBHaGjz+usarxrXWjLCbWRm2zh5cjMj0kJCkZ5OgCyMG3
4Lfo9jQk5MnbsctqDp+hrriaTuwkMdBOxXyup3+IkmQrpR4qi41LCvyEYXkxw3ZV
ouMb3whLOHUOlUiamaXu43tW7E4CH2RFL5jwqqbOCmSf6dfM5weg5eTfhY61WhFr
wOumrREyfH50B9yr7AZRtNXeeAwSyevdvc0ugP9CY4jsQ1bv6w2npnsyQQviID4V
TaGhho0e52Y+mxOYFXZawLFDL5j2j1lp/4rrHkQYQDG9vIj1nWA1dEjtYD/pAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUtDZko5i56wshrj6cG3WBv3TIusMwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzYvMzEzODM1MmUzMjMwMzkyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMyMzAzNjM4MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnR3DANBgkqhkiG9w0BAQsFAAOCAQEA
RMvEiXANuIO/iolkZQRCLlhCO+WVAHeF4og35ija7UWAhse8xJekp6PoHDmx3xK1
AlYplSgNu0nb2+sY47L/LMl7prc/Brzc7ae0WDRcIIfK5m9//GEQ338wp9hRgAnK
pJ0CS/v/YA5CuwlmLILnfEZNCRrYZaWvE+I+mi2CSQku17yMcGOzkkcl7Tww22gF
f+wmCc5ax5AgN5hoSEHdzVbQeZq8C4hF2gqkhOno2+PWc2TWXCXn+JifBRh4vc2y
ZiBZPqodk9g8oAF/ptfaSEZqYw7mWkeHmQYRhIwuS+PIuPpUakSPCQkJMsVZO7Fj
vySq/R4bbv+n1ocdogKTKQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org