Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
File:                     3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          UsdZQoC88TAeFUGfW+bRrbdOMcXhsPk13gCQgYWu878=
Subject key identifier:   A2:07:62:6F:50:E3:24:4F:87:58:1F:B3:74:E1:1B:C7:E8:46:F7:47
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       550E46F86B0EAAA7261803D764AFD284AB13FF9B
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
Signing time:             Sat 22 Oct 2022 04:33:15 +0000
ROA not before:           Sat 22 Oct 2022 04:28:15 +0000
ROA not after:            Sat 21 Oct 2023 04:33:15 +0000
asID:                     60721
IP address blocks:        185.245.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0e:46:f8:6b:0e:aa:a7:26:18:03:d7:64:af:d2:84:ab:13:ff:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:15 2022 GMT
            Not After : Oct 21 04:33:15 2023 GMT
        Subject: CN=A207626F50E3244F87581FB374E11BC7E846F747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:6b:c2:77:bd:03:9e:ae:65:01:98:0e:0c:
                    d9:b9:eb:3c:4b:5e:cd:3c:b1:88:67:c1:a6:5c:a0:
                    6c:36:c6:a0:29:65:90:49:3a:99:a9:54:f7:1e:59:
                    18:13:a5:5d:41:fd:03:5c:d9:41:e3:b3:da:09:e5:
                    94:fa:18:0c:e7:97:df:ea:62:4c:4d:9f:5f:2a:a6:
                    ba:ac:87:52:7f:41:20:10:6b:af:5b:4f:c7:ae:af:
                    b0:94:f8:f3:de:0e:01:36:83:2a:ce:34:a8:c4:99:
                    f3:d7:d1:02:53:3d:06:26:4a:00:0d:e0:88:59:8c:
                    6a:2e:a1:c1:ba:54:8f:9a:f5:8b:d5:e2:a8:71:1d:
                    56:82:9b:31:fd:26:10:98:7d:48:ed:7b:09:74:95:
                    e8:c8:01:47:fa:46:30:e1:63:2a:65:82:47:20:b3:
                    3e:98:9f:6e:06:04:08:ab:63:80:63:6c:f9:23:2f:
                    40:ef:a5:c6:5f:22:64:a9:05:36:b8:86:c1:f7:92:
                    1b:9d:4d:f6:c5:f4:01:c8:1e:6f:fb:d5:6b:87:66:
                    ee:47:3d:7b:3d:31:8d:dd:ec:c5:76:21:69:3f:fe:
                    40:23:c9:64:33:76:e4:1e:03:dd:6a:9e:9b:17:fc:
                    d5:bb:bc:f1:c9:c2:2a:f0:f8:e6:64:cc:d4:95:f5:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:62:6F:50:E3:24:4F:87:58:1F:B3:74:E1:1B:C7:E8:46:F7:47
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:c2:ba:aa:c1:3a:1e:ae:2f:f4:e7:03:54:a7:82:02:db:
         7e:bb:ab:f5:09:2c:0c:51:99:5e:fd:da:67:06:0d:64:2e:c1:
         82:34:1d:d4:35:65:ff:31:7a:37:1c:4e:7f:cb:91:8b:6e:43:
         09:22:24:c9:76:b3:47:99:43:6c:3d:d5:17:a7:87:96:70:5e:
         33:19:98:a8:eb:66:18:2c:2e:6c:84:f2:aa:0a:4c:37:c6:e1:
         71:cf:41:3f:e8:4c:2c:a8:64:d2:26:3d:38:27:57:5f:b6:3d:
         0b:48:21:ad:70:93:bc:6f:24:d4:17:9d:c2:06:61:3b:49:fe:
         f6:ba:df:f1:51:b8:d5:bc:ae:3d:ec:c3:91:74:69:b7:33:e7:
         5e:a0:52:f6:03:db:b1:1c:cd:ee:75:bd:5c:ee:d1:41:31:9d:
         18:da:8b:fd:42:4d:f5:c7:2d:98:53:7e:04:1e:29:19:d1:e3:
         68:4a:af:db:2b:c8:b6:d6:7c:87:2b:a7:25:cf:50:aa:c1:4c:
         98:97:ee:4e:0c:61:b7:34:0f:be:32:f9:d8:73:12:eb:34:cd:
         bb:ed:4c:66:d6:64:b0:bb:1f:26:44:fc:8b:f9:5e:81:20:21:
         b8:5a:0f:aa:82:fe:2d:26:ff:99:06:9d:59:9c:c0:83:7c:9d:
         81:8a:a8:85
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUVQ5G+GsOqqcmGAPXZK/ShKsT/5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTVaFw0yMzEwMjEwNDMzMTVaMDMxMTAvBgNV
BAMTKEEyMDc2MjZGNTBFMzI0NEY4NzU4MUZCMzc0RTExQkM3RTg0NkY3NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWPWvCd70Dnq5lAZgODNm56zxL
Xs08sYhnwaZcoGw2xqApZZBJOpmpVPceWRgTpV1B/QNc2UHjs9oJ5ZT6GAznl9/q
YkxNn18qprqsh1J/QSAQa69bT8eur7CU+PPeDgE2gyrONKjEmfPX0QJTPQYmSgAN
4IhZjGouocG6VI+a9YvV4qhxHVaCmzH9JhCYfUjtewl0lejIAUf6RjDhYyplgkcg
sz6Yn24GBAirY4BjbPkjL0DvpcZfImSpBTa4hsH3khudTfbF9AHIHm/71WuHZu5H
PXs9MY3d7MV2IWk//kAjyWQzduQeA91qnpsX/NW7vPHJwirw+OZkzNSV9ctfAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUogdib1DjJE+HWB+zdOEbx+hG90cwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzQzNTJlMzEzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzYzMDM3MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALn1tTANBgkqhkiG9w0BAQsFAAOCAQEAD0/C
uqrBOh6uL/TnA1SnggLbfrur9QksDFGZXv3aZwYNZC7BgjQd1DVl/zF6NxxOf8uR
i25DCSIkyXazR5lDbD3VF6eHlnBeMxmYqOtmGCwubITyqgpMN8bhcc9BP+hMLKhk
0iY9OCdXX7Y9C0ghrXCTvG8k1BedwgZhO0n+9rrf8VG41byuPezDkXRptzPnXqBS
9gPbsRzN7nW9XO7RQTGdGNqL/UJN9cctmFN+BB4pGdHjaEqv2yvIttZ8hyunJc9Q
qsFMmJfuTgxhtzQPvjL52HMS6zTNu+1MZtZksLsfJkT8i/legSAhuFoPqoL+LSb/
mQadWZzAg3ydgYqohQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org