Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
File:                     3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          lreqJ0UHrCfq/HC8N3EoOaXowi9pjrNo5a6J4fQ06Jo=
Subject key identifier:   34:BA:85:42:EB:7D:65:3F:55:8F:1E:B5:88:41:55:31:06:7F:E6:19
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       06CE441749BD1853803C1C8160F8EB393BFC5BD4
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 28 Oct 2022 06:28:27 +0000
ROA not before:           Fri 28 Oct 2022 06:23:27 +0000
ROA not after:            Fri 27 Oct 2023 06:28:27 +0000
asID:                     61317
IP address blocks:        185.241.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ce:44:17:49:bd:18:53:80:3c:1c:81:60:f8:eb:39:3b:fc:5b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 28 06:23:27 2022 GMT
            Not After : Oct 27 06:28:27 2023 GMT
        Subject: CN=34BA8542EB7D653F558F1EB588415531067FE619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:70:96:d0:1c:df:9a:f9:6d:34:57:aa:39:af:
                    a6:61:e1:1d:f5:79:a4:68:af:0f:ef:1e:9b:44:a0:
                    48:61:06:8a:c9:8a:7e:c6:8b:5a:cc:19:ed:86:5b:
                    6a:a4:01:4b:c4:d8:c9:60:94:54:a5:40:6d:00:a9:
                    bc:36:ca:40:73:fa:e3:f2:d1:c6:ab:51:70:b8:3a:
                    53:33:54:c7:c9:58:bb:98:bf:12:e6:b1:28:d2:1b:
                    1d:68:ab:25:ec:e1:80:e0:cf:83:94:00:7d:6f:2b:
                    57:cb:7f:e2:2c:9f:4f:8c:7f:89:71:1f:3c:a6:60:
                    75:46:63:00:f5:6a:bd:3f:7c:e4:8e:1f:ee:d2:9b:
                    38:36:c1:28:44:fa:bc:5b:71:52:8c:02:1b:14:ab:
                    0b:4e:5d:f5:c5:40:a4:93:59:db:b0:d7:6f:bb:9d:
                    ac:f4:f7:bd:c1:88:dd:7b:cf:1f:e3:06:cf:18:30:
                    c5:e4:d7:c8:1e:d2:bc:31:e7:8e:9e:c6:9f:cc:4f:
                    83:39:7d:16:fa:32:7b:ad:61:51:e7:d1:80:11:d2:
                    fc:78:3e:42:d4:ae:df:26:7d:68:a2:6d:e3:90:6a:
                    52:d7:0b:c2:6d:65:35:2b:a8:3e:d6:73:d7:8b:a6:
                    ee:a8:16:9d:aa:f9:78:5b:5d:00:19:db:7d:58:e6:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:85:42:EB:7D:65:3F:55:8F:1E:B5:88:41:55:31:06:7F:E6:19
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:55:57:94:0d:35:64:f2:0f:79:35:c4:d8:db:16:74:09:
         55:8c:d7:7a:bd:31:46:b6:e2:30:b9:a6:1e:64:24:91:68:f9:
         8a:96:9f:76:bb:05:b5:d4:4f:37:59:fb:cb:53:bf:88:87:76:
         d6:09:db:31:b6:57:e0:0b:23:75:44:d0:c5:02:4a:98:84:9b:
         31:88:50:01:b6:96:33:95:8f:7d:3b:b2:82:37:01:3f:84:7b:
         61:28:2b:a3:fc:98:a7:6f:fb:13:56:1c:18:6d:b8:3d:21:c3:
         15:a2:84:48:8a:94:df:0f:79:b2:b6:a2:d4:fd:8d:9a:c8:a9:
         b8:5b:8d:0a:76:06:3d:89:68:da:ec:ae:09:fd:f7:5a:7c:c1:
         ab:eb:68:2b:9d:d8:8a:9a:d4:83:01:a7:57:30:aa:34:2f:54:
         ee:55:aa:f5:36:ae:39:63:4c:6f:68:3e:a7:37:c1:10:33:81:
         f5:8d:12:a2:ab:69:9e:d2:47:91:74:90:ab:aa:70:01:10:28:
         9c:3b:57:4e:f4:0d:3f:f4:aa:3f:51:14:00:fa:9a:3e:a5:14:
         10:88:c1:3f:e8:98:f9:2b:9f:ea:50:05:3c:fc:c6:b3:4a:08:
         62:79:08:22:eb:44:e2:cf:b5:60:0e:33:9b:9f:51:e0:8e:a3:
         c1:0c:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org