Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa
File:                     3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa (raw, json)
Hash identifier:          VA+zz2LYwkjK7l2uQ/crFzSvvffYbmIIikOjmkIkInY=
Subject key identifier:   85:90:0B:9C:D6:5B:AC:1E:00:DC:EF:65:B3:E6:94:70:B5:FE:EF:35
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1FFD21AB18A359FB529FD82472F0F0F46968687E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa
Signing time:             Sat 22 Oct 2022 04:33:20 +0000
ROA not before:           Sat 22 Oct 2022 04:28:20 +0000
ROA not after:            Sat 21 Oct 2023 04:33:20 +0000
asID:                     41944
IP address blocks:        185.209.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fd:21:ab:18:a3:59:fb:52:9f:d8:24:72:f0:f0:f4:69:68:68:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:20 2022 GMT
            Not After : Oct 21 04:33:20 2023 GMT
        Subject: CN=85900B9CD65BAC1E00DCEF65B3E69470B5FEEF35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:06:75:de:c4:e7:13:98:a2:f6:25:c9:f2:
                    73:e7:18:69:51:4d:0b:41:a4:6a:04:e5:f3:88:4d:
                    0c:97:c7:10:d9:22:4b:f3:db:16:55:33:bb:16:d1:
                    56:2a:c0:cb:61:0f:07:93:ff:e2:e0:00:26:80:dd:
                    0e:49:dc:3a:2f:da:4a:39:5b:ab:fd:82:85:4e:7c:
                    ed:18:ba:d8:61:d9:c3:57:8d:77:c0:80:2a:1c:7f:
                    eb:de:11:c1:01:bd:92:f1:ac:e5:39:5d:7c:37:46:
                    6e:79:78:c8:85:dd:77:c6:8e:1a:b5:b5:a4:a3:7e:
                    55:8e:ab:0a:1c:0d:c3:b7:1b:98:b7:6d:fa:96:9a:
                    55:a1:02:33:09:50:9b:22:9c:8f:05:c5:22:7e:bd:
                    b7:25:66:c4:0e:7f:98:f0:3d:e1:1a:02:52:f8:b0:
                    fe:01:0b:1e:2e:5a:fc:cc:f9:4d:61:8e:1b:b9:2f:
                    74:79:44:56:af:79:7e:7e:7d:b4:e9:a9:5a:72:64:
                    f4:d8:30:b5:22:47:85:c7:6e:3c:9f:03:d2:55:58:
                    be:36:1b:75:23:02:f8:8d:4c:41:cc:41:d6:6c:37:
                    61:b0:5f:60:dd:79:67:9a:b2:00:ca:f8:bd:00:ad:
                    dc:6f:19:55:d0:ea:2e:49:e5:c7:be:8e:98:05:7f:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:0B:9C:D6:5B:AC:1E:00:DC:EF:65:B3:E6:94:70:B5:FE:EF:35
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d0:6b:32:a6:46:ed:41:e5:a3:bc:f3:2c:c0:1b:bf:7f:2d:
         4b:b6:23:45:49:d0:86:f7:93:45:93:19:75:96:1c:06:be:9f:
         89:18:99:44:72:78:99:30:6a:1c:d2:78:99:64:3d:d4:66:0b:
         dd:c0:46:04:e7:1b:aa:c3:b4:1c:91:74:c1:e1:fb:2b:f8:19:
         21:c8:46:1d:2e:45:8b:cc:d2:e7:28:20:a3:89:4e:72:e1:4e:
         28:b5:e1:10:54:36:bb:ea:81:7c:b1:5c:29:77:27:c2:d3:4a:
         4a:e7:12:f2:0d:ce:9d:72:56:24:96:8a:ed:9e:3e:69:d2:0f:
         85:3b:7d:6a:e2:76:c7:2e:b5:a6:70:81:ee:82:73:51:a4:1c:
         fe:a4:e6:87:a1:84:20:42:6f:48:2a:08:3c:40:46:51:d0:17:
         43:d6:3e:75:4d:0f:aa:ba:10:15:56:a1:43:24:21:fc:46:10:
         7d:ed:72:5b:88:78:9e:fe:bb:5f:1d:c8:f1:9d:de:47:f0:f6:
         d8:e3:9f:b0:dd:3c:a3:48:07:29:62:96:5f:ec:a7:0e:f9:e2:
         97:5d:f6:61:51:79:7d:f6:0a:78:55:f4:15:b0:a9:21:ce:a0:
         f3:8b:d7:60:8a:0a:a8:8c:fd:7e:44:19:56:3f:01:43:78:83:
         df:e7:1d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org