Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
File:                     3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          /O3MSF05xZ74IN6URoIk6xLsC47EtTROIw2vdFfHfoI=
Subject key identifier:   49:C1:57:BF:D8:8A:3C:02:E0:65:ED:0E:01:B9:B8:FF:91:15:C1:D3
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       262FAA4165CC8FBBBCDFC7FDC54CC8ABF47B956E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:16 +0000
ROA not before:           Sat 22 Oct 2022 04:28:16 +0000
ROA not after:            Sat 21 Oct 2023 04:33:16 +0000
asID:                     47583
IP address blocks:        185.245.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2f:aa:41:65:cc:8f:bb:bc:df:c7:fd:c5:4c:c8:ab:f4:7b:95:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:16 2022 GMT
            Not After : Oct 21 04:33:16 2023 GMT
        Subject: CN=49C157BFD88A3C02E065ED0E01B9B8FF9115C1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:50:56:f4:82:5a:42:87:b0:eb:60:57:77:
                    3d:f3:d3:c6:30:3d:86:8c:47:58:3a:be:c9:f9:21:
                    fe:54:05:c9:d6:30:53:79:53:b8:10:cf:09:3b:cf:
                    8f:d1:be:68:82:fd:d2:a9:67:34:ae:72:95:59:b9:
                    5f:64:1f:bc:a1:e2:d6:a2:ce:12:bc:a1:e4:00:ec:
                    f8:4d:93:9b:99:7e:c6:2f:52:88:64:93:36:64:de:
                    27:37:1a:f3:76:90:13:e5:a3:d0:b7:c0:42:07:dc:
                    2e:4a:99:78:6c:a0:5d:e6:eb:33:eb:1e:ad:c2:10:
                    1e:21:3b:15:78:9c:c9:bc:db:36:ca:b1:cd:56:3a:
                    e9:a0:97:1f:30:e1:7f:d1:1d:09:bc:61:95:a6:86:
                    3c:ce:85:4f:1d:dc:42:a2:ce:1e:ae:99:7a:ba:14:
                    23:e6:a5:2c:8b:8c:d0:64:d7:c5:a2:78:a5:ab:e3:
                    4b:dc:5f:63:39:0f:a8:6b:73:70:a3:7f:6c:03:09:
                    5d:94:e3:54:e8:4b:c3:23:1e:d7:9b:e8:6b:7b:a1:
                    d0:aa:9f:ab:d4:f6:02:70:c3:67:66:b0:a0:e6:69:
                    66:cb:49:1c:15:99:61:c3:ce:3f:97:9b:c1:e7:08:
                    4c:6e:65:79:9c:20:ab:89:2b:de:d5:58:86:75:0c:
                    7f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:57:BF:D8:8A:3C:02:E0:65:ED:0E:01:B9:B8:FF:91:15:C1:D3
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:28:61:29:a2:df:d7:39:3e:8c:24:24:b2:0e:12:49:94:28:
         57:4c:3e:0c:73:69:f3:90:b4:08:6d:54:e0:e6:ab:12:65:1f:
         65:ef:9d:5c:37:50:85:b0:0d:b7:d8:7c:9b:1b:d4:55:7b:26:
         79:64:d6:91:45:b5:04:f7:60:7d:f9:df:2d:f3:f1:c9:e3:ec:
         78:96:c2:88:1a:f1:61:f7:9e:e8:b5:55:5d:9c:a8:c0:a4:ea:
         a5:cd:ca:1c:f0:07:e8:4e:c1:51:02:1b:6c:f5:c3:db:fc:9f:
         cf:33:59:37:56:dc:33:f0:d1:62:2f:31:bf:ab:6e:8c:c6:1a:
         ff:88:bb:fb:4b:4f:6c:ab:8c:6b:51:f8:f8:39:23:63:fb:0c:
         f4:9b:ae:6b:f2:fa:55:9f:12:12:35:d3:2c:33:f4:0a:b0:2b:
         0e:c8:4f:bf:29:9c:b7:6e:a6:ae:c3:cd:15:60:f5:dd:5c:93:
         1b:e3:0a:a8:e5:18:bd:5b:34:fb:8e:fb:9f:02:a7:ae:84:43:
         ae:6c:8d:ed:5f:39:2b:69:d8:6d:8e:67:5d:92:fb:d6:74:da:
         99:1d:f4:b3:e8:3b:2f:99:59:bf:fe:3b:48:e8:eb:bc:b8:a8:
         07:70:e1:70:f2:e8:a9:13:43:41:94:8d:d5:13:ab:50:14:56:
         db:ef:83:97
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUJi+qQWXMj7u838f9xUzIq/R7lW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTZaFw0yMzEwMjEwNDMzMTZaMDMxMTAvBgNV
BAMTKDQ5QzE1N0JGRDg4QTNDMDJFMDY1RUQwRTAxQjlCOEZGOTExNUMxRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJVBW9IJaQoew62BXdz3z08Yw
PYaMR1g6vsn5If5UBcnWMFN5U7gQzwk7z4/RvmiC/dKpZzSucpVZuV9kH7yh4tai
zhK8oeQA7PhNk5uZfsYvUohkkzZk3ic3GvN2kBPlo9C3wEIH3C5KmXhsoF3m6zPr
Hq3CEB4hOxV4nMm82zbKsc1WOumglx8w4X/RHQm8YZWmhjzOhU8d3EKizh6umXq6
FCPmpSyLjNBk18WieKWr40vcX2M5D6hrc3Cjf2wDCV2U41ToS8MjHteb6Gt7odCq
n6vU9gJww2dmsKDmaWbLSRwVmWHDzj+Xm8HnCExuZXmcIKuJK97VWIZ1DH8zAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUScFXv9iKPALgZe0OAbm4/5EVwdMwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzQzNTJlMzEzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALn1tDANBgkqhkiG9w0BAQsFAAOCAQEAVihh
KaLf1zk+jCQksg4SSZQoV0w+DHNp85C0CG1U4OarEmUfZe+dXDdQhbANt9h8mxvU
VXsmeWTWkUW1BPdgffnfLfPxyePseJbCiBrxYfee6LVVXZyowKTqpc3KHPAH6E7B
UQIbbPXD2/yfzzNZN1bcM/DRYi8xv6tujMYa/4i7+0tPbKuMa1H4+DkjY/sM9Juu
a/L6VZ8SEjXTLDP0CrArDshPvymct26mrsPNFWD13VyTG+MKqOUYvVs0+477nwKn
roRDrmyN7V85K2nYbY5nXZL71nTamR30s+g7L5lZv/47SOjrvLioB3DhcPLoqRND
QZSN1ROrUBRW2++Dlw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org