Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38302e302f32342d3234203d3e2030.roa
File:                     3139322e3134352e38302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          NQasqcWiHPqIv5uI9sBKcjQpWZ6M+hKbe38DS0C5RJY=
Subject key identifier:   CD:23:27:2A:8B:05:AF:0A:30:10:45:C2:AD:EF:82:73:11:86:4B:42
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5E3413EA74395B6F2FFED39AC8FCAE7A39734557
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38302e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:19:56 +0000
ROA not before:           Fri 03 Mar 2023 16:14:56 +0000
ROA not after:            Fri 01 Mar 2024 16:19:56 +0000
asID:                     0
IP address blocks:        192.145.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:34:13:ea:74:39:5b:6f:2f:fe:d3:9a:c8:fc:ae:7a:39:73:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Mar  3 16:14:56 2023 GMT
            Not After : Mar  1 16:19:56 2024 GMT
        Subject: CN=CD23272A8B05AF0A301045C2ADEF827311864B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:bd:8b:88:ea:c3:71:83:27:92:ec:30:f7:
                    c7:8b:a0:59:0f:57:0f:32:80:d6:66:2b:d7:d6:d1:
                    c7:1d:8e:c6:54:0d:d5:40:2d:83:0e:63:1e:96:69:
                    5f:3a:61:e8:12:9a:ef:39:f9:86:27:81:de:14:a1:
                    37:4c:c7:35:1b:ff:4b:5a:26:15:d3:2a:98:bc:d8:
                    8a:ed:ef:6a:12:5e:e4:17:eb:8e:91:3c:a3:72:f6:
                    e9:02:4c:c8:df:a7:1e:df:df:a7:43:fa:6b:48:ae:
                    03:9a:12:7f:ba:5d:fc:4b:5b:42:16:10:d8:c1:37:
                    7e:25:d0:b5:97:02:3d:c1:c5:5a:2f:ae:a5:f2:7f:
                    da:52:08:a8:56:59:09:a9:a5:83:d7:6f:86:64:2b:
                    49:16:84:be:3f:6c:7e:48:3b:da:2d:8b:44:35:2c:
                    97:24:ea:55:20:80:4d:c0:3e:17:67:eb:68:bc:4a:
                    a8:20:21:e0:06:fd:c8:05:72:ea:d5:65:25:09:1a:
                    29:3b:02:72:bb:88:02:c9:3d:c9:5f:9b:41:1f:a2:
                    45:ea:da:8b:ac:b8:63:a0:b8:78:91:2e:ac:5c:0b:
                    41:08:ca:d1:27:97:1d:c9:86:57:a6:b3:01:e0:7a:
                    8d:e8:74:7b:c0:67:0b:6e:17:d4:69:61:7f:e2:8b:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:23:27:2A:8B:05:AF:0A:30:10:45:C2:AD:EF:82:73:11:86:4B:42
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:1a:ca:a6:2e:60:77:7b:f3:5a:d2:ae:0a:ab:d2:7b:77:
         a2:83:5b:cd:67:07:2f:4a:66:9f:d9:99:50:77:83:d1:c4:2f:
         9b:56:b3:52:10:75:1b:35:85:8f:cc:f1:7f:d8:07:c6:13:28:
         4c:68:31:14:46:b9:0b:96:8d:81:2d:38:75:4d:38:a0:00:7d:
         b5:f6:3b:01:d1:58:ec:e6:65:11:76:13:8a:9e:d4:de:44:9f:
         16:e2:4d:b9:cb:7e:20:76:05:cd:08:52:c8:8f:74:28:66:18:
         67:13:af:2b:fd:06:77:6e:13:49:9c:09:d8:dd:a0:42:f4:64:
         f8:13:a1:5c:d1:aa:67:20:e2:d9:d7:ad:0a:a0:e0:d4:e2:c6:
         74:e4:99:07:6f:13:80:81:37:0a:b3:e0:c4:67:74:d8:9a:fe:
         83:af:8d:ae:4b:b9:41:a8:95:ee:41:c9:eb:a6:06:74:fd:7c:
         c3:95:26:be:2e:10:4b:e5:19:2a:02:72:fc:50:44:72:55:06:
         59:b9:ae:d4:55:3b:4e:38:45:ca:f4:ca:f7:fc:7b:9c:1a:4f:
         62:7b:2f:6c:29:5a:60:38:7a:6c:2a:36:2b:b1:c4:28:9c:7f:
         50:ec:ba:31:a6:f2:0a:34:4b:2a:74:ff:f7:d7:c7:55:0f:e5:
         0f:eb:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org