Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          5II+LroarjExxRn6Z2Krs+SFYZ5Sz1Rr4kpyDdybAMs=
Subject key identifier:   72:49:42:A4:63:AE:CD:24:17:70:D4:10:B3:86:24:37:84:A9:D2:4B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5B35CC0FB298AE0F8F919C24EA4491E073A35F46
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:22 +0000
ROA not before:           Sat 22 Oct 2022 04:28:22 +0000
ROA not after:            Sat 21 Oct 2023 04:33:22 +0000
asID:                     147049
IP address blocks:        185.213.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:cc:0f:b2:98:ae:0f:8f:91:9c:24:ea:44:91:e0:73:a3:5f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:22 2022 GMT
            Not After : Oct 21 04:33:22 2023 GMT
        Subject: CN=724942A463AECD241770D410B386243784A9D24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:d1:f6:57:1d:2e:62:74:28:33:d2:4b:e6:
                    32:24:25:d5:d2:fd:ee:ab:cb:fe:dd:b9:a4:20:b2:
                    bb:4c:6e:5b:fc:82:22:d9:5c:4f:75:b4:9f:12:82:
                    55:03:d3:a1:fe:5d:64:b1:92:bc:c5:27:e7:7f:7a:
                    25:f2:94:bb:9f:ee:99:7a:a5:fa:2a:ba:9c:c1:ca:
                    77:f2:7c:2a:c8:69:e1:01:da:16:e9:33:60:dc:a8:
                    d8:72:07:5c:94:b3:86:9c:95:10:1a:05:a8:ae:49:
                    64:39:b1:8b:8f:ab:f2:44:bc:cf:0d:89:11:f7:1d:
                    d3:68:f7:2a:6e:73:53:ea:33:58:ee:0c:9a:15:a8:
                    ca:76:1b:bf:76:63:b9:79:b6:32:9a:c0:7b:a1:eb:
                    dd:4d:45:d6:98:e9:80:ad:b4:77:6a:6e:9f:bf:52:
                    2f:30:83:e7:b0:3f:c7:0d:8e:e1:1d:2b:74:5a:01:
                    8e:49:6a:4f:88:1e:c6:b8:a3:f2:e0:fa:32:c1:56:
                    a1:14:73:b5:f7:39:de:45:71:92:c0:95:9d:69:5d:
                    8d:0f:37:0b:bd:94:bf:54:49:46:07:e0:c7:5c:71:
                    5f:6a:40:d0:c8:42:fe:21:ef:08:d0:14:d4:a8:b9:
                    65:3f:0b:62:a1:88:5a:2b:83:ed:3e:e1:57:ff:30:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:42:A4:63:AE:CD:24:17:70:D4:10:B3:86:24:37:84:A9:D2:4B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:78:df:95:c7:8b:86:67:10:38:18:de:47:f4:02:db:c3:14:
         65:ff:e9:e0:b3:7d:3b:0d:c1:a6:84:88:98:2a:47:8b:bc:0f:
         22:2f:71:47:4b:ad:36:c8:b6:0b:d1:42:08:3b:3c:f9:d2:a3:
         0a:e1:1b:4e:fa:37:f0:7f:07:f9:2b:47:76:e7:36:ed:57:bf:
         2e:c4:92:aa:5a:15:d2:3d:60:a1:a4:ba:f6:02:ee:72:3c:7a:
         1a:c6:ee:dd:a8:74:9e:11:7a:db:8d:a3:6b:17:72:55:7d:cb:
         d5:41:f0:da:9a:5d:bf:69:c5:19:f6:b7:c8:60:b0:17:87:b2:
         aa:a1:5b:7b:b3:6a:fb:ec:5a:51:bf:ad:d1:04:56:21:b0:6b:
         ba:3f:a9:48:89:43:c0:95:c1:60:25:e8:9a:b2:57:59:7a:d5:
         a1:34:72:67:8b:9d:a8:a3:46:df:5e:08:88:4f:5d:2d:96:f5:
         4c:91:f2:a1:29:42:9a:08:cd:70:07:71:dd:38:fe:af:0b:0a:
         ec:bb:08:5c:c4:8b:03:d9:ec:27:f1:e8:df:19:99:c5:90:08:
         80:ac:3f:7e:32:06:e2:8f:9c:5e:06:a3:90:cb:18:03:cd:a9:
         e4:a5:e3:16:cc:7f:18:f7:5e:4e:7a:84:65:63:53:b9:a8:f6:
         fb:3d:10:e5
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUWzXMD7KYrg+PkZwk6kSR4HOjX0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MjJaFw0yMzEwMjEwNDMzMjJaMDMxMTAvBgNV
BAMTKDcyNDk0MkE0NjNBRUNEMjQxNzcwRDQxMEIzODYyNDM3ODRBOUQyNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBNH2Vx0uYnQoM9JL5jIkJdXS
/e6ry/7duaQgsrtMblv8giLZXE91tJ8SglUD06H+XWSxkrzFJ+d/eiXylLuf7pl6
pfoqupzBynfyfCrIaeEB2hbpM2DcqNhyB1yUs4aclRAaBaiuSWQ5sYuPq/JEvM8N
iRH3HdNo9ypuc1PqM1juDJoVqMp2G792Y7l5tjKawHuh691NRdaY6YCttHdqbp+/
Ui8wg+ewP8cNjuEdK3RaAY5Jak+IHsa4o/Lg+jLBVqEUc7X3Od5FcZLAlZ1pXY0P
Nwu9lL9USUYH4MdccV9qQNDIQv4h7wjQFNSouWU/C2KhiForg+0+4Vf/MKJbAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUcklCpGOuzSQXcNQQs4YkN4Sp0kswHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzEzMzJlMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzQzNzMwMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnVUzANBgkqhkiG9w0BAQsFAAOCAQEAg3jf
lceLhmcQOBjeR/QC28MUZf/p4LN9Ow3BpoSImCpHi7wPIi9xR0utNsi2C9FCCDs8
+dKjCuEbTvo38H8H+StHduc27Ve/LsSSqloV0j1goaS69gLucjx6Gsbu3ah0nhF6
242jaxdyVX3L1UHw2ppdv2nFGfa3yGCwF4eyqqFbe7Nq++xaUb+t0QRWIbBruj+p
SIlDwJXBYCXomrJXWXrVoTRyZ4udqKNG314IiE9dLZb1TJHyoSlCmgjNcAdx3Tj+
rwsK7LsIXMSLA9nsJ/Ho3xmZxZAIgKw/fjIG4o+cXgajkMsYA82p5KXjFsx/GPde
TnqEZWNTuaj2+z0Q5Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org