Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
File:                     3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier:          fqdu2C+UTf5Uarps30IjkD/mx1S7c1hhkOaDOTg+TRc=
Subject key identifier:   4F:1E:22:F3:CD:07:3E:FC:E9:01:39:A5:C4:FA:D1:37:4D:C4:EE:29
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       01191B0D4EDE6F2CC23673907032CFB380B2DEC8
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
Signing time:             Sat 22 Oct 2022 04:33:21 +0000
ROA not before:           Sat 22 Oct 2022 04:28:21 +0000
ROA not after:            Sat 21 Oct 2023 04:33:21 +0000
asID:                     213122
IP address blocks:        185.216.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:19:1b:0d:4e:de:6f:2c:c2:36:73:90:70:32:cf:b3:80:b2:de:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:21 2022 GMT
            Not After : Oct 21 04:33:21 2023 GMT
        Subject: CN=4F1E22F3CD073EFCE90139A5C4FAD1374DC4EE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:33:b3:88:42:09:91:58:40:e4:1f:70:05:
                    0d:e1:57:33:b1:b9:68:e9:28:f1:79:e9:07:f1:d0:
                    c6:35:03:a3:19:6b:8a:52:74:10:02:ca:13:71:21:
                    32:03:23:4a:23:33:0c:86:95:f9:aa:75:2a:d3:3f:
                    27:15:56:ec:22:2f:0c:9d:40:a7:dc:9a:36:07:a3:
                    a9:c2:cd:1d:42:6e:c0:4d:36:96:23:c0:e2:7a:b3:
                    4c:2e:54:ce:5f:57:71:de:1a:67:73:09:66:48:1e:
                    2a:90:69:1e:6d:7b:92:30:9b:95:e7:df:10:27:76:
                    fc:fc:71:45:a1:46:70:2b:24:c4:c9:43:df:15:88:
                    9a:ba:4a:91:6c:08:ca:36:93:77:a5:9f:ba:5c:f8:
                    95:c0:15:8a:64:ea:22:73:cd:4b:05:bf:b1:fe:c9:
                    ec:83:d7:0a:6f:28:fd:17:09:7c:fd:5c:3d:2a:05:
                    9f:65:b0:3c:d5:da:28:2f:5c:38:4b:12:84:60:0f:
                    36:c6:e3:4c:51:09:03:73:ee:c9:d5:a1:db:bb:7c:
                    a3:4f:24:54:db:bf:bd:27:94:4b:61:e4:9e:5c:31:
                    1a:89:7d:69:d5:4d:a8:0a:3b:b0:2c:b9:a8:da:b2:
                    86:82:8c:23:cf:b9:92:68:85:76:a2:03:9e:58:b0:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1E:22:F3:CD:07:3E:FC:E9:01:39:A5:C4:FA:D1:37:4D:C4:EE:29
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:3e:89:b0:c2:20:b6:d7:34:f9:33:c9:2d:95:0c:6b:78:b1:
         c5:de:cd:7b:fd:5b:af:40:57:26:14:d8:f8:c8:a7:de:a2:33:
         90:c0:66:a4:61:c3:b7:a3:2f:65:49:3a:0b:6e:6b:58:8f:ee:
         fe:96:97:4f:8e:18:ae:a8:8f:a5:99:21:0c:e2:fa:de:94:1e:
         04:a4:5e:e2:de:d2:b4:f1:ab:49:ac:8e:68:62:7d:3c:b2:82:
         01:8c:cf:61:be:5c:bc:f2:32:2d:cb:c1:39:d1:71:38:cf:ac:
         a4:dd:25:5b:b2:0a:b4:8d:f4:ee:74:21:e8:5e:9d:21:34:b6:
         fe:26:ab:69:59:bb:90:5c:7a:a3:6f:c8:aa:33:b4:e7:89:5b:
         03:be:17:bb:b8:03:da:03:d5:a5:fe:6c:7e:9c:f5:5f:77:e5:
         95:b2:65:e4:1a:4c:8d:87:94:f8:6b:94:3e:bc:2e:21:48:6b:
         69:ba:cf:b6:19:6d:e3:1a:67:b7:62:71:53:3d:90:b9:b5:0f:
         cc:0f:95:04:bb:59:97:82:33:18:f3:30:f7:12:52:aa:31:a5:
         be:9c:b4:e7:fd:5c:66:dd:a6:a1:dd:80:35:e6:53:5f:91:95:
         e1:f4:82:2a:7f:52:ee:11:3d:08:57:98:40:80:d4:a0:52:af:
         6e:d5:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org