Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa
File:                     3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          nVAQe6QH/kR5/GxvvZ2J1WgJaQsP+C/voedlluNI3wk=
Subject key identifier:   35:10:1C:79:C5:89:8C:1B:95:5A:72:07:CE:5E:0E:CC:2F:94:02:3E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       24ED4FFCE063655A5625EDFA9E556F35F18ECB43
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     19437
IP address blocks:        185.245.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ed:4f:fc:e0:63:65:5a:56:25:ed:fa:9e:55:6f:35:f1:8e:cb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=35101C79C5898C1B955A7207CE5E0ECC2F94023E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:3d:14:2a:b2:e4:fb:23:c8:02:9b:92:3e:
                    67:ed:73:a3:9f:c9:7c:15:96:00:5d:45:b4:8a:bc:
                    e4:26:f0:80:50:30:d1:11:82:e7:ca:16:67:42:d2:
                    06:c7:7c:af:a8:68:44:ca:84:d9:cb:8e:e2:43:4e:
                    21:cb:b5:88:7f:4c:d5:9d:22:ca:6b:d7:5b:56:72:
                    c1:e2:c4:f7:48:e4:f9:f2:58:3c:81:ef:d3:f3:c7:
                    15:28:e5:96:ea:ed:25:ed:db:bc:18:73:ee:53:b6:
                    85:ca:fe:53:71:4c:fe:1a:73:7e:3d:0f:50:8b:d3:
                    54:3b:74:bc:cc:61:f5:49:e5:15:cd:2a:ef:a8:60:
                    4b:bb:d9:9d:39:c9:88:7b:ce:85:3f:7d:ab:2d:4f:
                    43:75:68:e9:fa:4c:85:7e:06:a6:4d:c8:7c:ca:06:
                    c3:78:84:73:a5:3d:4d:21:e5:26:fe:14:7c:be:1b:
                    f3:d8:fd:55:c1:c2:a5:f0:49:a3:de:c8:fb:0d:e6:
                    9f:22:84:5c:44:a2:65:1a:82:4d:73:6a:07:87:a1:
                    91:9b:ee:9b:06:ca:8b:cf:bf:a4:85:5e:a3:22:02:
                    c4:d4:91:e9:8e:83:22:33:ef:16:10:3d:fe:42:ed:
                    e2:40:9a:91:09:6e:1a:2d:ca:d4:3c:e5:7f:dc:a4:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:10:1C:79:C5:89:8C:1B:95:5A:72:07:CE:5E:0E:CC:2F:94:02:3E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:91:fe:89:c9:9b:71:7d:d3:96:12:37:36:27:be:69:7a:f8:
         74:b5:94:e5:1a:f4:57:de:e6:2d:c5:10:d9:d7:68:a5:98:fa:
         bc:da:59:d5:de:be:c8:b5:2f:56:a1:50:ef:fb:9d:6b:cf:d7:
         00:bb:a3:4d:b9:56:2b:99:77:8b:33:2e:67:3c:09:7c:11:04:
         34:0e:f9:a2:07:c7:0e:e2:dc:6f:02:32:5a:5b:c0:77:dd:a3:
         28:c2:6f:ce:87:87:cb:4a:7e:77:2d:ad:b6:45:53:c3:4f:f5:
         36:89:44:de:16:e9:1b:db:c9:50:81:0b:b1:cf:62:c6:c0:fa:
         0c:09:35:ac:06:b7:d8:cd:25:75:b6:56:88:ba:d4:17:e1:66:
         f7:a0:72:79:09:1c:9e:64:77:66:52:59:36:9d:ba:9d:b3:37:
         59:a1:77:70:cb:84:b4:b0:1d:d2:f6:52:46:66:d8:53:c2:49:
         16:c8:a9:c7:ce:2e:87:73:40:b2:ee:45:9a:3e:ec:66:74:42:
         23:71:a3:01:5c:26:93:3a:35:0a:f5:3c:b7:e3:e1:e4:b9:8f:
         f2:57:e8:8d:e8:4e:0c:96:a0:37:70:36:f9:3f:d5:f9:a2:bb:
         21:07:1c:5a:85:61:74:a1:57:73:93:19:0c:06:d4:9b:46:66:
         bb:2d:c4:bf
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUJO1P/OBjZVpWJe36nlVvNfGOy0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MjNaFw0yMzEwMjEwNDMzMjNaMDMxMTAvBgNV
BAMTKDM1MTAxQzc5QzU4OThDMUI5NTVBNzIwN0NFNUUwRUNDMkY5NDAyM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uz0UKrLk+yPIApuSPmftc6Of
yXwVlgBdRbSKvOQm8IBQMNERgufKFmdC0gbHfK+oaETKhNnLjuJDTiHLtYh/TNWd
Ispr11tWcsHixPdI5PnyWDyB79PzxxUo5Zbq7SXt27wYc+5TtoXK/lNxTP4ac349
D1CL01Q7dLzMYfVJ5RXNKu+oYEu72Z05yYh7zoU/fastT0N1aOn6TIV+BqZNyHzK
BsN4hHOlPU0h5Sb+FHy+G/PY/VXBwqXwSaPeyPsN5p8ihFxEomUagk1zageHoZGb
7psGyovPv6SFXqMiAsTUkemOgyIz7xYQPf5C7eJAmpEJbhotytQ85X/cpGEhAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUNRAcecWJjBuVWnIHzl4OzC+UAj4wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzQzNTJlMzEzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzOTM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALn1tTANBgkqhkiG9w0BAQsFAAOCAQEAqZH+
icmbcX3TlhI3Nie+aXr4dLWU5Rr0V97mLcUQ2ddopZj6vNpZ1d6+yLUvVqFQ7/ud
a8/XALujTblWK5l3izMuZzwJfBEENA75ogfHDuLcbwIyWlvAd92jKMJvzoeHy0p+
dy2ttkVTw0/1NolE3hbpG9vJUIELsc9ixsD6DAk1rAa32M0ldbZWiLrUF+Fm96By
eQkcnmR3ZlJZNp26nbM3WaF3cMuEtLAd0vZSRmbYU8JJFsipx84uh3NAsu5Fmj7s
ZnRCI3GjAVwmkzo1CvU8t+Ph5LmP8lfojehODJagN3A2+T/V+aK7IQccWoVhdKFX
c5MZDAbUm0Zmuy3Evw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org