Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa
File:                     3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier:          lJHa1XxS2ZxwjbIFmukgussWlBGj+1KNfpViu9FTesU=
Subject key identifier:   CE:A7:54:AB:FE:28:4E:84:92:90:F4:C4:9B:A1:EF:F8:FB:EE:69:49
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       203D8107E45868804C1B2300C32C356191B36C35
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa
Signing time:             Sat 22 Oct 2022 04:33:12 +0000
ROA not before:           Sat 22 Oct 2022 04:28:12 +0000
ROA not after:            Sat 21 Oct 2023 04:33:12 +0000
asID:                     213036
IP address blocks:        185.245.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3d:81:07:e4:58:68:80:4c:1b:23:00:c3:2c:35:61:91:b3:6c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:12 2022 GMT
            Not After : Oct 21 04:33:12 2023 GMT
        Subject: CN=CEA754ABFE284E849290F4C49BA1EFF8FBEE6949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:54:d5:a4:60:82:8b:c1:6c:28:e5:7b:18:
                    d5:3b:d4:29:67:06:54:a6:a6:7d:26:f4:dd:b0:6c:
                    45:a7:ab:de:0e:45:00:f6:49:0d:9d:f7:2e:f8:35:
                    90:2b:d0:f5:23:1c:42:a0:6d:3a:5a:75:10:90:97:
                    4d:d5:82:8c:0a:92:31:24:58:86:cb:67:ad:b3:38:
                    cb:ee:82:81:e0:61:10:1c:ec:55:06:76:bd:40:cb:
                    aa:a0:93:5d:25:6e:93:a1:31:37:38:cc:7a:d6:32:
                    1d:d8:76:99:b5:9d:3b:c7:86:60:7c:2e:2c:f5:d0:
                    a5:7a:24:bf:c6:79:8d:a6:f2:bd:e8:5b:bd:fe:63:
                    01:a5:a9:0b:aa:cb:cf:03:ff:ce:0d:4e:3e:7b:82:
                    f0:5e:21:06:1d:f2:54:90:d9:fb:10:c1:25:2e:80:
                    48:3b:01:29:33:fd:cd:d7:68:b8:fb:97:87:9e:61:
                    ac:7c:e1:f5:c1:92:10:fa:6c:0c:c6:1e:0c:25:b3:
                    18:e4:37:27:04:49:f4:24:3c:dc:48:ca:96:d8:f5:
                    c2:c5:21:d2:7b:bb:82:41:af:b0:79:7d:47:68:7d:
                    db:7e:6e:e3:88:a7:df:da:d6:9e:4b:8d:65:b9:a3:
                    6c:2c:19:60:4f:4a:3a:cc:33:ee:d6:5a:12:cc:d5:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A7:54:AB:FE:28:4E:84:92:90:F4:C4:9B:A1:EF:F8:FB:EE:69:49
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6a:4d:ef:07:cc:2a:d3:f1:06:0d:72:fc:8b:e0:9a:ac:e1:
         7c:c4:7f:1e:a8:81:da:3d:b0:f8:38:71:23:cb:eb:df:46:8a:
         b0:45:f5:a0:71:2a:2f:19:84:37:ac:bb:16:b8:b2:cb:93:4d:
         36:ff:72:4c:1d:46:bc:76:49:62:58:ed:d9:b4:28:cd:3d:33:
         6c:42:7d:4e:d2:7d:46:b6:49:24:d7:65:41:be:e0:7a:2f:85:
         92:62:51:d5:8f:e1:bf:12:87:f1:c0:f4:36:f8:e2:6f:7e:4f:
         c8:b2:03:c1:7b:54:0a:62:41:d3:3c:ca:54:84:16:bc:d0:b2:
         47:2f:94:c6:e3:e5:6c:ce:a2:e5:c7:52:cb:01:a8:c3:bf:6a:
         20:c2:30:ee:8a:9a:e5:25:0b:af:6b:d8:db:e0:95:56:9c:75:
         eb:0c:78:58:7f:56:eb:2b:7b:c4:c7:81:07:71:88:20:cf:76:
         c3:d1:9f:51:6c:c9:d0:98:f4:cd:5c:34:05:97:04:6d:43:73:
         9f:57:af:30:f5:f7:2c:d4:3a:13:00:3e:a9:0e:89:72:0a:a2:
         56:35:9c:48:fd:5c:ec:fa:66:f1:d1:6d:fd:96:2a:da:46:3b:
         b3:a0:db:40:98:3e:e0:f9:43:81:d1:d8:82:8e:e9:c9:4d:26:
         96:8b:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org