Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          RUVzAisAzXc4gJiapxio9cc6WWDS8aWQKTretCvLyeM=
Subject key identifier:   37:BB:47:79:28:25:DD:7C:7F:4C:C2:84:32:F0:98:E2:0F:0E:C0:6D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5A4C93D6E8FBE9FBF3764D9DEBB0DF11C38908E6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:17 +0000
ROA not before:           Sat 22 Oct 2022 04:28:17 +0000
ROA not after:            Sat 21 Oct 2023 04:33:17 +0000
asID:                     51167
IP address blocks:        185.219.142.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4c:93:d6:e8:fb:e9:fb:f3:76:4d:9d:eb:b0:df:11:c3:89:08:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:17 2022 GMT
            Not After : Oct 21 04:33:17 2023 GMT
        Subject: CN=37BB47792825DD7C7F4CC28432F098E20F0EC06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:11:d2:10:ba:3a:7c:a4:8f:6e:eb:c2:0a:
                    6a:4b:e6:d0:85:29:b4:d7:ad:01:7b:48:f5:24:35:
                    81:e6:4d:67:19:db:f6:53:de:30:f6:7b:d3:5a:00:
                    bc:9e:73:2a:a0:e7:e0:59:a6:a5:99:6b:b1:33:3b:
                    9e:8f:3e:85:f2:7e:8e:54:45:be:99:61:da:54:3d:
                    0f:05:bb:18:8f:95:2d:2f:22:6a:74:9d:dc:b6:78:
                    df:66:52:fc:f7:fe:c9:54:e4:c4:9f:61:85:2f:52:
                    f5:5d:47:45:25:80:d8:4f:97:19:a7:a0:b0:d9:4d:
                    5b:60:19:d5:b2:d3:51:fc:f1:5a:9e:0c:20:9f:29:
                    df:57:04:be:d8:46:52:5a:52:5a:b4:57:b2:3b:33:
                    83:68:f2:51:e8:a0:7a:53:ea:7f:4c:06:6f:87:97:
                    c2:dc:10:f5:aa:c4:2f:7d:af:8a:7f:e3:12:34:15:
                    3c:f7:74:22:cb:00:e3:16:13:76:1e:6c:2c:62:91:
                    a9:00:3a:3f:6b:0f:78:ac:71:f9:b7:13:d2:65:a3:
                    e7:82:ea:29:2e:ea:79:24:0b:b1:be:cc:77:f2:15:
                    36:28:57:9c:b5:16:ec:e0:cc:80:11:6b:e6:00:53:
                    d7:24:d0:8c:e0:77:c1:64:33:c6:ff:ae:8d:11:02:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BB:47:79:28:25:DD:7C:7F:4C:C2:84:32:F0:98:E2:0F:0E:C0:6D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:35:d6:33:47:ed:50:ec:e1:02:5a:76:29:bf:dc:13:6a:
         5c:80:ac:c6:a2:9a:d1:7e:bb:c9:aa:87:30:2d:db:28:9d:d6:
         a4:de:7a:79:ed:24:24:52:f3:54:fc:8a:d6:27:73:70:e2:a2:
         4b:b2:57:99:e3:14:ba:45:04:9d:9e:76:32:8d:57:43:46:1c:
         a3:79:a7:4f:f2:ce:e9:3c:6c:33:93:cc:ab:9a:27:da:ae:55:
         81:4c:7a:2f:ca:63:75:f6:d1:1d:42:f0:b8:29:54:40:7a:1e:
         d4:7f:45:91:7d:10:67:a5:b9:cc:d7:95:e7:4e:d2:22:57:c5:
         c8:9d:25:ba:21:b5:3f:f8:70:8b:31:f5:97:7c:cb:8d:9b:d9:
         cb:87:4f:bb:13:14:1a:41:53:d6:d1:58:55:7e:8e:e3:50:37:
         27:d3:ca:0e:39:ad:81:b0:18:aa:86:89:90:c8:2f:e3:8d:59:
         b2:16:03:ec:5f:5c:8d:5a:6e:15:15:42:3c:c1:da:5c:20:15:
         39:88:09:a6:1f:24:a8:1d:98:5d:ed:a9:0b:b7:36:53:58:83:
         24:29:42:3a:f8:70:c8:ec:f1:a3:7a:f6:53:33:47:d0:91:d5:
         fc:56:cc:8a:60:c7:22:ad:3e:1f:f1:1e:a6:d7:4c:86:3a:f5:
         c4:9a:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org