Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232312e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3230392e3232312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          APwZx13prToK6HxOuTy9CDmTIJC8jT7YTUrR6tOQR00=
Subject key identifier:   63:12:DB:61:3C:5C:65:C0:4E:B9:DE:42:8E:78:77:8E:18:4F:D0:C0
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       40D16DB9EDD7BDC7A280848CFDEEDAB8BAC9359C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232312e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     136787
IP address blocks:        185.209.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d1:6d:b9:ed:d7:bd:c7:a2:80:84:8c:fd:ee:da:b8:ba:c9:35:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=6312DB613C5C65C04EB9DE428E78778E184FD0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:c9:cb:4f:e8:43:3c:22:ca:df:27:40:3b:
                    89:7e:44:56:d1:b7:59:2c:53:07:ad:85:2e:49:83:
                    cb:3c:6c:07:bb:13:ce:b0:f7:01:26:92:a1:5c:44:
                    67:d4:9b:c2:a9:07:18:b4:ac:9d:d7:0c:28:55:d8:
                    b7:38:ec:c8:13:b4:03:39:28:d9:bb:37:66:24:20:
                    40:a1:c4:68:02:47:e1:eb:f8:96:da:3e:f6:67:8f:
                    a4:0e:09:b9:4c:a9:84:a8:0b:a7:97:0d:da:61:6d:
                    02:ca:fe:05:1c:32:4b:23:0a:99:6d:a4:2d:fe:ed:
                    d3:3e:9d:7a:db:ba:8f:2f:c2:ae:ce:24:9c:e8:ab:
                    a5:a0:54:c5:72:15:52:86:61:29:92:60:43:14:7f:
                    6b:c1:c7:f8:c6:cf:e8:d7:1e:e1:31:5a:cb:3e:29:
                    a6:6c:3c:0e:5c:50:ff:5c:7a:b1:0d:91:9f:06:12:
                    ad:dc:f3:5e:6f:17:24:88:45:7d:94:ff:23:e5:a7:
                    5b:cd:7c:61:70:b3:57:f2:1e:53:c3:29:5c:20:0e:
                    02:8f:ca:8a:58:ca:d3:67:78:a4:29:6d:76:be:98:
                    ca:70:f1:e0:83:f4:63:9a:96:f4:fa:1d:6b:99:18:
                    37:96:11:b2:d6:ae:08:25:c1:98:71:2f:e2:8d:5e:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:DB:61:3C:5C:65:C0:4E:B9:DE:42:8E:78:77:8E:18:4F:D0:C0
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232312e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ba:96:c3:1c:20:3f:9a:9e:e0:91:da:cb:e9:eb:f8:57:69:
         53:d2:39:f9:e3:e2:68:55:12:10:70:2b:74:5f:50:2f:ad:d5:
         ee:11:2e:b6:4f:5d:4c:45:7a:34:a0:f5:0f:e6:3e:d6:2f:6c:
         06:e3:6d:d0:2d:e5:a4:cc:3f:ae:90:41:b5:c7:2e:a5:b8:ac:
         cd:76:6f:79:1f:6d:11:83:f8:64:85:7c:90:4c:4e:ea:bd:55:
         91:d5:83:83:aa:4a:13:6e:8c:34:42:4f:7c:49:0c:0c:aa:f0:
         e5:28:71:e4:2a:0a:7c:f4:ca:c6:b1:48:58:d2:9e:a4:05:4d:
         41:ab:28:d1:83:57:4a:a2:d0:f9:51:9d:82:ec:89:26:c8:b3:
         5c:3c:75:93:b5:61:ff:2e:ae:7d:ab:3c:77:55:7a:7c:c5:dc:
         76:b8:0b:cb:db:ef:5e:fd:35:b1:53:74:74:a2:8f:e4:01:af:
         16:28:dc:50:38:7c:fe:97:81:90:d0:d7:3c:3c:38:ed:d9:ba:
         97:9c:63:45:45:61:9b:8e:a9:19:d4:03:70:1a:6e:29:21:99:
         47:db:4a:7f:4a:94:eb:74:8d:c4:77:ab:f6:a5:44:fd:bf:bd:
         a1:81:cd:13:d7:f6:2b:c5:01:f0:f7:f4:c5:60:bb:1e:8c:66:
         94:1e:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org