Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          0RH+viWbAqXcQWcjc5lsEyD3arTFvr9nIGi6q/d6+OA=
Subject key identifier:   90:0E:EC:51:17:C6:EB:2B:FF:07:EE:07:ED:DA:EE:41:59:9F:06:EF
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6C6EE19EF1C855B94095656F64F8073EF3CBC11B
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa
Signing time:             Fri 24 Feb 2023 07:48:05 +0000
ROA not before:           Fri 24 Feb 2023 07:43:05 +0000
ROA not after:            Fri 23 Feb 2024 07:48:05 +0000
asID:                     147049
IP address blocks:        185.213.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6e:e1:9e:f1:c8:55:b9:40:95:65:6f:64:f8:07:3e:f3:cb:c1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 24 07:43:05 2023 GMT
            Not After : Feb 23 07:48:05 2024 GMT
        Subject: CN=900EEC5117C6EB2BFF07EE07EDDAEE41599F06EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:2d:45:a3:b6:0d:f9:93:18:9b:86:85:5a:
                    90:61:59:2a:79:7b:4b:ed:d3:fd:a9:65:d3:ae:b7:
                    35:64:b2:55:c8:e9:ef:6e:24:79:e1:74:1e:6d:8f:
                    09:b4:a4:3a:9f:9a:9e:38:bf:37:88:38:b0:26:65:
                    e3:16:81:25:77:49:a6:9b:56:ea:28:7e:69:c7:66:
                    c5:fd:51:06:3d:e3:29:cc:e1:52:24:33:cf:b5:c2:
                    6b:5e:3b:be:e3:52:2f:e9:24:41:eb:de:15:17:43:
                    95:b3:5b:e2:90:ab:63:b5:0f:a2:f4:e9:46:4c:c8:
                    4d:bd:f5:2c:40:c4:10:4b:0a:af:21:fb:41:b2:d2:
                    9a:cf:33:b8:7e:90:39:7d:e1:a8:50:61:6f:79:22:
                    58:12:f1:7c:ca:28:be:f8:ed:dd:e8:3d:12:0b:1c:
                    0b:cc:20:c9:4e:c0:4c:05:8b:e9:fc:11:ab:ce:8a:
                    cb:0f:94:1b:8f:af:1a:30:7b:d3:56:c7:22:42:84:
                    03:66:fb:a0:1e:33:f9:cd:2d:48:96:0b:96:cd:b2:
                    03:f1:a2:9a:9f:3b:bc:4e:c0:f5:0d:36:83:16:95:
                    35:21:82:bc:39:c8:10:b5:77:40:a3:8c:85:03:6e:
                    a6:7f:d3:2f:02:97:af:50:dc:63:6b:57:76:f6:42:
                    bb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0E:EC:51:17:C6:EB:2B:FF:07:EE:07:ED:DA:EE:41:59:9F:06:EF
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:02:91:44:60:53:c4:4d:e8:cd:ba:28:13:ea:cc:86:6c:72:
         c8:b0:b7:26:06:50:4a:20:d9:47:68:c0:24:16:df:7c:a8:2a:
         68:06:e0:44:20:c4:b3:4a:00:85:07:be:c6:81:b4:73:d5:e5:
         60:92:be:9d:6a:9b:f5:0d:f2:73:dc:4a:a9:9a:64:9b:d8:9a:
         81:d6:66:48:41:09:e2:77:5c:c0:20:87:0d:0c:3d:e8:e9:b4:
         3b:27:c9:3d:e1:17:e5:b4:d2:1d:6d:fe:74:31:85:a9:73:48:
         2e:ce:06:fc:43:6c:71:ed:5b:0e:98:e3:3f:08:36:f0:e0:a9:
         bb:96:15:f0:d8:3a:b6:dc:4e:80:16:f6:29:8b:56:66:ab:f5:
         b0:eb:ee:c1:51:fd:b8:c1:99:b2:b4:93:70:0c:56:98:6a:ce:
         6f:55:7c:0d:2c:e2:30:0b:17:09:d8:40:6a:ac:53:f4:10:c2:
         96:09:0d:23:95:87:b5:10:fb:8a:e6:4f:cc:af:b8:26:1d:ef:
         0b:99:76:5a:36:f6:21:fd:c2:df:1d:25:a2:58:46:34:2a:e4:
         be:37:90:cd:03:39:63:54:32:be:8d:9a:64:69:b4:63:f9:29:
         d3:14:5f:ff:3f:77:d4:a4:40:77:ef:d6:dd:85:2f:3c:fe:0a:
         c9:83:9f:c0
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUbG7hnvHIVblAlWVvZPgHPvPLwRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMzAyMjQwNzQzMDVaFw0yNDAyMjMwNzQ4MDVaMDMxMTAvBgNV
BAMTKDkwMEVFQzUxMTdDNkVCMkJGRjA3RUUwN0VEREFFRTQxNTk5RjA2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7i1Fo7YN+ZMYm4aFWpBhWSp5
e0vt0/2pZdOutzVkslXI6e9uJHnhdB5tjwm0pDqfmp44vzeIOLAmZeMWgSV3Saab
VuoofmnHZsX9UQY94ynM4VIkM8+1wmteO77jUi/pJEHr3hUXQ5WzW+KQq2O1D6L0
6UZMyE299SxAxBBLCq8h+0Gy0prPM7h+kDl94ahQYW95IlgS8XzKKL747d3oPRIL
HAvMIMlOwEwFi+n8EavOissPlBuPrxowe9NWxyJChANm+6AeM/nNLUiWC5bNsgPx
opqfO7xOwPUNNoMWlTUhgrw5yBC1d0CjjIUDbqZ/0y8Cl69Q3GNrV3b2QrtnAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUkA7sURfG6yv/B+4H7druQVmfBu8wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzEzMzJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzQzNzMwMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnVUDANBgkqhkiG9w0BAQsFAAOCAQEAwAKR
RGBTxE3ozbooE+rMhmxyyLC3JgZQSiDZR2jAJBbffKgqaAbgRCDEs0oAhQe+xoG0
c9XlYJK+nWqb9Q3yc9xKqZpkm9iagdZmSEEJ4ndcwCCHDQw96Om0OyfJPeEX5bTS
HW3+dDGFqXNILs4G/ENsce1bDpjjPwg28OCpu5YV8Ng6ttxOgBb2KYtWZqv1sOvu
wVH9uMGZsrSTcAxWmGrOb1V8DSziMAsXCdhAaqxT9BDClgkNI5WHtRD7iuZPzK+4
Jh3vC5l2Wjb2If3C3x0lolhGNCrkvjeQzQM5Y1Qyvo2aZGm0Y/kp0xRf/z931KRA
d+/W3YUvPP4KyYOfwA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org