Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37332e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3231362e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          PpzZUjaxAVnomqRJg82/yGFr3oMRzxfZVJmogtBWbzM=
Subject key identifier:   7C:9A:97:85:72:86:68:66:63:BF:1B:A6:55:1A:E0:99:E0:52:73:E6
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4D53657CCB3677652175D419B676C98C0A083867
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37332e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Oct 2022 11:39:20 +0000
ROA not before:           Fri 28 Oct 2022 11:34:20 +0000
ROA not after:            Fri 27 Oct 2023 11:39:20 +0000
asID:                     136787
IP address blocks:        185.216.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:53:65:7c:cb:36:77:65:21:75:d4:19:b6:76:c9:8c:0a:08:38:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 28 11:34:20 2022 GMT
            Not After : Oct 27 11:39:20 2023 GMT
        Subject: CN=7C9A97857286686663BF1BA6551AE099E05273E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:c9:0b:8a:02:c7:f3:b5:d6:e2:fc:3f:3e:
                    d4:72:72:5d:15:54:9e:28:95:3a:f0:6a:fd:a8:24:
                    08:9b:5b:b9:8a:d4:42:17:6d:8e:91:29:a2:0a:8a:
                    21:e9:19:1b:37:a7:48:b5:0e:6a:5d:d1:2c:d5:aa:
                    ed:c1:b7:0a:3f:ad:05:66:3e:ca:cc:c7:5f:2d:6c:
                    89:5d:ca:a3:93:65:5e:47:60:3b:e0:47:b8:46:37:
                    df:bf:9b:04:e7:a5:b7:59:96:60:38:18:35:b8:1a:
                    cc:e2:5a:00:c9:01:20:82:d7:6d:6d:e4:52:d7:2d:
                    8f:63:73:9a:fc:23:2d:50:77:b1:1e:c5:ed:fe:e0:
                    4b:e4:e1:51:57:6b:d3:d9:94:27:7c:4f:b9:a1:47:
                    b3:66:b6:0c:5b:5b:72:a4:bb:af:f5:41:37:3f:84:
                    b4:d9:ad:c9:fa:c2:7e:fe:85:6f:aa:83:03:ba:94:
                    91:32:80:0b:ff:6a:ad:c2:2f:60:d1:25:59:a4:11:
                    d6:50:1b:c5:9a:51:f4:f1:d4:25:b4:a4:11:82:c9:
                    29:8d:2e:1c:0f:33:c6:68:e1:c9:f6:44:2e:62:c7:
                    9f:02:bc:0a:47:e6:97:4b:6a:53:9e:2b:13:58:72:
                    92:4d:00:de:f6:fd:74:b5:73:61:e4:b3:43:0d:19:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9A:97:85:72:86:68:66:63:BF:1B:A6:55:1A:E0:99:E0:52:73:E6
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:3f:4d:2b:4e:f6:6a:c4:a5:37:57:85:18:20:40:4a:ee:
         12:74:07:73:8b:3f:fb:40:ce:13:12:22:e9:5e:92:a9:94:71:
         6a:08:41:8b:a0:b3:16:d0:d9:d6:e8:30:62:69:2a:11:43:3e:
         82:33:6b:45:c3:89:db:e0:31:a3:62:d2:61:06:61:33:1b:af:
         49:db:39:2e:cc:3b:b8:b5:b1:48:46:eb:85:6d:ac:87:48:27:
         aa:29:cb:9d:3d:46:4f:e1:44:b5:bd:de:9f:b7:74:4a:b8:d3:
         bc:aa:6c:f9:df:f2:08:19:76:59:21:07:9e:7b:c8:43:42:fb:
         1e:ef:a1:06:8d:3b:36:f3:c7:f3:48:0b:d1:6a:2e:dd:94:be:
         95:a9:9d:86:d9:7e:a4:0d:39:ae:00:51:47:f7:74:14:d9:a4:
         ab:5c:8e:92:68:94:17:6b:cb:d7:14:e4:58:f7:d6:ad:30:bc:
         4e:1d:f6:b7:b4:f1:cc:f4:09:ac:d1:62:e9:8e:89:97:66:66:
         5d:02:cf:b8:cf:33:26:40:8e:b9:50:56:69:b6:7c:08:7f:95:
         70:a7:ca:1a:cc:63:fb:08:09:fa:48:c2:ae:83:f0:f7:c5:f7:
         82:f0:8d:36:5d:da:3e:98:bf:0d:60:d8:1d:62:08:2e:00:85:
         c1:be:94:fa
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUTVNlfMs2d2UhddQZtnbJjAoIOGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjgxMTM0MjBaFw0yMzEwMjcxMTM5MjBaMDMxMTAvBgNV
BAMTKDdDOUE5Nzg1NzI4NjY4NjY2M0JGMUJBNjU1MUFFMDk5RTA1MjczRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UskLigLH87XW4vw/PtRycl0V
VJ4olTrwav2oJAibW7mK1EIXbY6RKaIKiiHpGRs3p0i1Dmpd0SzVqu3Btwo/rQVm
PsrMx18tbIldyqOTZV5HYDvgR7hGN9+/mwTnpbdZlmA4GDW4GsziWgDJASCC121t
5FLXLY9jc5r8Iy1Qd7Eexe3+4Evk4VFXa9PZlCd8T7mhR7NmtgxbW3Kku6/1QTc/
hLTZrcn6wn7+hW+qgwO6lJEygAv/aq3CL2DRJVmkEdZQG8WaUfTx1CW0pBGCySmN
LhwPM8Zo4cn2RC5ix58CvApH5pdLalOeKxNYcpJNAN72/XS1c2Hks0MNGX1jAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUfJqXhXKGaGZjvxumVRrgmeBSc+YwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzEzNjJlMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnYSTANBgkqhkiG9w0BAQsFAAOCAQEAWzc/
TStO9mrEpTdXhRggQEruEnQHc4s/+0DOExIi6V6SqZRxaghBi6CzFtDZ1ugwYmkq
EUM+gjNrRcOJ2+Axo2LSYQZhMxuvSds5Lsw7uLWxSEbrhW2sh0gnqinLnT1GT+FE
tb3en7d0SrjTvKps+d/yCBl2WSEHnnvIQ0L7Hu+hBo07NvPH80gL0Wou3ZS+lamd
htl+pA05rgBRR/d0FNmkq1yOkmiUF2vL1xTkWPfWrTC8Th32t7TxzPQJrNFi6Y6J
l2ZmXQLPuM8zJkCOuVBWabZ8CH+VcKfKGsxj+wgJ+kjCroPw98X3gvCNNl3aPpi/
DWDYHWIILgCFwb6U+g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org