Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          cMSvYKeocRtlwcPkx1gYzAfvXOTI1+WKEdqCmi7jQMM=
Subject key identifier:   A8:9F:0B:79:ED:27:34:56:0F:B9:A0:21:2C:34:7D:2F:DA:9E:A0:F6
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6E1447C1186BBBD2676E5F819C0B99330983D85A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa
Signing time:             Thu 27 Oct 2022 12:27:35 +0000
ROA not before:           Thu 27 Oct 2022 12:22:35 +0000
ROA not after:            Thu 26 Oct 2023 12:27:35 +0000
asID:                     136787
IP address blocks:        185.219.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:14:47:c1:18:6b:bb:d2:67:6e:5f:81:9c:0b:99:33:09:83:d8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 27 12:22:35 2022 GMT
            Not After : Oct 26 12:27:35 2023 GMT
        Subject: CN=A89F0B79ED2734560FB9A0212C347D2FDA9EA0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:56:38:45:cf:93:e6:94:7a:39:91:94:79:
                    e0:e0:d8:d2:d2:01:21:8f:94:1f:dd:50:be:97:7a:
                    b5:6d:ec:bd:01:b0:2b:01:e4:34:fd:9a:6d:29:e4:
                    59:aa:76:4b:ab:d6:ca:05:1e:fb:fd:ba:38:46:fc:
                    80:1b:45:6c:1a:68:10:f1:1b:47:4c:e1:71:e3:30:
                    24:e9:96:d4:08:a3:a3:d8:1f:8c:5f:77:86:77:cf:
                    f2:e1:41:2f:2a:3f:fa:cf:e5:0b:7c:14:5b:0e:a9:
                    e9:a0:a9:1a:7d:67:58:cc:ee:2b:a3:22:b2:c6:29:
                    97:c6:92:13:75:25:7f:9d:1e:75:58:ce:b8:3a:3c:
                    52:8a:e9:66:ad:27:df:c1:83:ce:ec:eb:fe:75:ed:
                    a9:73:6a:d4:42:ed:fa:fa:f7:ea:51:1f:54:cb:28:
                    54:11:b0:e7:48:42:c2:6a:67:8e:8f:df:40:bf:4c:
                    f5:31:d8:5d:b7:c2:f4:94:dc:dd:81:95:86:45:7f:
                    85:e5:95:d6:4d:72:7b:a3:cc:25:28:47:4d:b2:e8:
                    95:64:72:4e:28:38:fa:10:48:29:91:ca:98:ec:84:
                    d1:50:d7:9b:aa:cb:92:32:2a:1d:44:70:f9:77:7e:
                    a3:f8:40:29:3d:5f:aa:8e:bd:c4:17:63:a9:ec:46:
                    c7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9F:0B:79:ED:27:34:56:0F:B9:A0:21:2C:34:7D:2F:DA:9E:A0:F6
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:6f:5b:0d:46:2a:53:4e:9a:77:9d:ad:dc:57:60:6c:1b:
         9a:c8:92:49:fc:f5:b4:ea:a0:b6:2e:f9:b3:5a:a8:c0:b7:43:
         3d:2f:ad:31:6b:32:f1:8c:fb:4f:20:58:bb:bf:8d:95:98:be:
         0a:48:66:b8:37:f2:1d:60:93:cd:8a:cd:ba:56:74:d4:cb:b8:
         9f:b4:66:03:a9:25:a4:8e:2c:a1:9b:ad:1c:a8:37:55:aa:23:
         48:ea:32:be:9b:86:4e:35:fd:3e:ad:de:02:15:25:64:eb:42:
         84:5a:37:b6:38:fc:71:1e:ba:e1:69:dd:64:77:70:67:00:29:
         1b:ab:56:83:ca:76:b8:ad:da:03:bc:42:0a:1d:ef:47:62:e2:
         9b:f7:15:0a:6b:43:2c:94:86:2d:37:8d:b4:5e:21:72:68:eb:
         ba:1b:29:a2:43:4d:c4:9e:9c:44:67:f5:4d:d0:3c:af:4a:29:
         5d:05:98:2b:9f:22:ef:c1:56:6d:06:2c:86:64:4d:10:e0:57:
         15:4b:25:2b:12:b4:96:89:77:1f:12:97:1b:a3:14:53:21:7a:
         80:61:04:61:d3:02:c5:8b:71:2c:c1:5b:26:5d:c3:fe:ca:5e:
         f1:4f:4a:d1:e4:82:6a:70:f5:01:17:9f:35:a8:7e:d8:24:dc:
         88:67:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org