Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
File:                     3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          ut4p3Ms1T2yN6A+ZbpujaD1X3cSQGFktUlThJuH8Cy8=
Subject key identifier:   41:49:36:4D:24:51:B8:40:16:A5:B0:3A:F2:8E:D3:A9:B4:F2:6B:BF
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       538B55A2D2CA8C506560BD8E144BEF1ED66EDD92
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:18 +0000
ROA not before:           Sat 22 Oct 2022 04:28:18 +0000
ROA not after:            Sat 21 Oct 2023 04:33:18 +0000
asID:                     47583
IP address blocks:        185.214.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8b:55:a2:d2:ca:8c:50:65:60:bd:8e:14:4b:ef:1e:d6:6e:dd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:18 2022 GMT
            Not After : Oct 21 04:33:18 2023 GMT
        Subject: CN=4149364D2451B84016A5B03AF28ED3A9B4F26BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:47:f1:0a:1d:25:18:c0:ab:2b:60:c7:1f:73:
                    02:b5:ba:56:a1:4f:be:b4:89:aa:3b:9e:13:3e:ac:
                    77:1c:6d:0a:9c:25:b8:89:8b:9e:fb:67:9b:12:9b:
                    f9:52:90:69:d8:9a:96:e0:3a:b1:8f:ad:86:a5:31:
                    4e:19:f0:8e:5f:f3:03:64:f0:32:26:29:92:ac:93:
                    58:90:84:8b:89:d6:aa:7c:c6:59:2c:2b:ab:05:8c:
                    5f:e5:ec:dd:09:5e:77:b3:4b:b9:c7:c8:55:bb:d5:
                    17:57:dc:92:33:9f:04:ea:5d:b6:f5:d2:48:6a:05:
                    64:af:90:a0:6c:60:6f:0b:f8:17:6c:52:36:82:79:
                    11:12:28:16:11:1b:f2:dc:a9:2a:c5:0b:f2:68:13:
                    51:82:a8:70:ed:6e:cd:0c:cb:de:58:3f:97:c4:30:
                    9d:4c:dc:af:f2:1a:19:48:1d:7d:88:06:27:48:1a:
                    08:d2:e9:8b:4b:c6:95:54:24:2b:2f:f1:cd:31:62:
                    82:37:21:c9:56:05:aa:e2:1c:5d:1a:fd:e6:12:ba:
                    12:42:3c:fc:af:74:68:55:70:f2:ba:e4:45:36:e6:
                    65:05:7d:24:01:35:c0:51:ae:78:d8:93:c9:4c:c3:
                    c8:74:26:a8:4d:09:3d:1b:85:86:83:9f:22:f6:c4:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:36:4D:24:51:B8:40:16:A5:B0:3A:F2:8E:D3:A9:B4:F2:6B:BF
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:b2:c4:b0:8c:95:0b:d0:c5:75:46:0e:8c:2c:f3:6c:57:
         e6:8f:74:76:ef:b3:e8:2a:85:87:66:e9:d3:8f:7c:c4:15:c9:
         0f:df:64:0b:60:ce:76:cf:be:fa:64:20:98:dd:b1:25:bd:71:
         75:77:83:7a:da:27:3c:d7:50:55:5a:cf:e4:4a:d3:62:44:63:
         bd:7d:2b:42:ca:c0:03:e1:f3:0a:c5:e4:ac:9b:b1:a5:73:a1:
         f9:33:e5:bf:03:4c:81:9d:c3:5b:57:f5:ad:c2:52:03:55:bc:
         9e:e1:df:16:d3:29:4a:e7:d7:c2:fe:d0:d3:b5:c7:15:63:81:
         e1:0b:5e:91:d6:c4:60:9a:df:c5:a0:9f:8d:0f:22:bb:43:8c:
         a7:f3:ce:94:6b:0c:c9:2d:88:0e:8d:da:1a:94:21:e0:de:18:
         b1:0d:f5:3c:8b:0c:b4:c6:c2:03:6c:0c:39:6a:8e:85:c5:dd:
         47:b2:1d:59:6e:6c:21:b1:b8:48:b6:6e:6c:d2:03:7e:63:70:
         ac:16:bf:72:13:1d:40:08:56:26:c0:b3:b8:9a:25:72:ee:5e:
         55:44:92:92:2c:28:26:6e:75:de:80:33:77:71:e7:0f:d7:26:
         e8:eb:1d:16:1d:4a:35:40:53:c9:8f:fa:4c:6d:36:62:4a:95:
         55:35:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org