Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
File:                     3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier:          Dy05HPpd6Y55HC8Ethkg15jyRU1KrbpXOl6sL2Wm77s=
Subject key identifier:   65:1C:31:18:55:F0:46:9F:C8:56:68:5B:CA:75:B4:C3:6E:6D:AB:A7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5C64B19647D3B7131AE248F94EF84982A5E8A0A8
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
Signing time:             Sat 22 Oct 2022 04:33:24 +0000
ROA not before:           Sat 22 Oct 2022 04:28:24 +0000
ROA not after:            Sat 21 Oct 2023 04:33:24 +0000
asID:                     206804
IP address blocks:        185.221.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:64:b1:96:47:d3:b7:13:1a:e2:48:f9:4e:f8:49:82:a5:e8:a0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:24 2022 GMT
            Not After : Oct 21 04:33:24 2023 GMT
        Subject: CN=651C311855F0469FC856685BCA75B4C36E6DABA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:6d:2f:3d:84:bd:fe:55:9c:42:61:8a:5a:
                    0a:c2:f7:f4:a7:ff:f7:63:0a:1e:21:ef:35:46:c9:
                    ad:e4:a2:af:48:8b:9b:4e:79:43:b2:80:16:86:2c:
                    93:5a:05:cb:d5:06:59:cb:6f:5f:0b:af:c9:d6:ad:
                    d1:31:9a:42:9d:61:64:e9:99:25:69:0e:d4:8f:86:
                    7a:a2:df:ca:cc:98:06:26:96:c8:7c:de:d0:c1:d3:
                    a6:bd:9a:bb:f8:04:b6:29:d1:b5:a7:fd:3b:66:9e:
                    ca:7c:ed:3e:01:47:52:4a:1c:6e:c0:a9:e3:d7:7c:
                    2c:f1:de:5b:09:2d:c1:e0:aa:fe:b0:56:41:15:e3:
                    4d:6a:88:30:aa:b8:15:79:2c:da:e8:df:2b:d5:4d:
                    ec:1e:7f:2f:fd:6b:33:fe:ff:a5:34:a3:e6:28:dd:
                    b8:bc:f1:18:d3:c4:95:4f:b1:1a:a1:17:30:0b:c6:
                    25:d0:6c:e2:99:e1:be:d8:4d:ba:5f:86:15:8c:1d:
                    33:03:ff:f2:29:b1:bc:1b:a4:c1:02:b0:17:5d:e6:
                    ff:18:5d:68:45:43:0d:0d:d3:03:76:1f:b7:5f:63:
                    15:f9:35:d6:54:1f:8f:93:46:68:ab:0a:37:1e:87:
                    b5:da:82:4b:3c:b5:b3:ad:56:60:af:aa:43:91:2f:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1C:31:18:55:F0:46:9F:C8:56:68:5B:CA:75:B4:C3:6E:6D:AB:A7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:47:b9:55:a2:6a:e4:85:cd:a0:b3:fc:22:5f:63:59:52:0e:
         8e:95:94:7c:3d:9f:c1:7f:c0:04:cd:89:52:16:1f:db:3f:97:
         96:60:3e:a2:b0:ad:e1:c8:04:d8:11:8b:ad:4a:2c:9f:8f:56:
         92:89:cc:d7:55:70:6e:e2:23:20:f7:c7:e8:90:b2:33:75:f2:
         e1:da:e8:e7:77:b0:e9:8e:38:52:2c:81:09:ef:60:90:15:4c:
         71:de:5a:ea:c1:d3:f7:6d:c2:16:e6:c7:31:6f:da:b2:f9:50:
         75:b5:32:30:ff:78:04:2d:b4:f2:18:8e:4e:70:46:6a:23:a2:
         c2:c6:95:c0:e8:b2:58:83:c0:10:82:fc:4d:c0:10:fa:68:ae:
         82:57:d3:b0:03:f7:ad:4a:e7:1a:80:d2:22:ce:0a:b0:00:46:
         44:e2:48:a7:47:da:73:8c:92:91:37:42:b8:8a:e6:4e:07:f4:
         b0:31:5e:52:3f:8e:55:2a:e4:77:f3:a0:93:35:ae:ea:fc:8c:
         2c:8d:0a:13:da:d7:d2:05:09:2e:1b:30:c4:4f:bb:3b:95:21:
         9e:90:6e:c4:74:74:1a:85:c4:ff:02:90:cc:72:9d:ab:fb:79:
         22:60:87:8f:65:50:8c:f3:37:bc:3c:4b:81:42:91:99:51:97:
         3b:b8:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org