Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
File:                     3139322e3134352e38332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          bPBgdSqun6nHHvVCcY/IvZLVyFr5v7MyoWlUW1RTyMY=
Subject key identifier:   24:FF:80:FB:F3:18:52:3E:13:62:DC:75:9F:92:12:8D:67:F1:E5:53
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6328BCE9C531430EDC110173AEDC2AA085254457
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:24 +0000
ROA not before:           Sat 22 Oct 2022 04:28:24 +0000
ROA not after:            Sat 21 Oct 2023 04:33:24 +0000
asID:                     61317
IP address blocks:        192.145.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:bc:e9:c5:31:43:0e:dc:11:01:73:ae:dc:2a:a0:85:25:44:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:24 2022 GMT
            Not After : Oct 21 04:33:24 2023 GMT
        Subject: CN=24FF80FBF318523E1362DC759F92128D67F1E553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:bc:ea:29:a1:73:90:0c:64:77:79:75:d7:
                    37:d1:a6:4c:57:cd:ec:33:ef:7a:8a:3e:1b:48:d1:
                    66:93:66:3a:ee:52:a8:cc:e3:bf:97:74:24:f3:a8:
                    10:59:69:74:6c:df:20:32:25:38:41:c7:dc:54:0b:
                    8c:f0:b1:34:6d:59:1c:23:91:17:8a:4b:bc:01:72:
                    59:8d:a9:cf:fc:1a:a6:97:f9:ca:63:3a:08:43:f2:
                    7d:dc:b2:f4:f7:2e:79:52:c1:20:50:6d:d7:1c:e4:
                    e2:ec:f3:3a:a9:7a:ef:bc:23:6e:34:5e:8c:2f:25:
                    9f:44:d3:3a:19:65:a5:a1:2f:45:0c:e9:2b:56:40:
                    0f:4e:fe:fb:c0:7a:1d:ce:39:0f:bd:e1:a1:82:87:
                    21:39:6c:98:c1:9b:91:fa:b7:f9:bd:88:9f:aa:43:
                    3c:56:33:aa:ba:54:03:5d:11:1b:3c:34:8a:60:31:
                    77:66:aa:bb:ac:fd:4b:09:c8:34:07:94:ac:b3:e6:
                    73:07:c7:14:20:7d:fc:fc:9e:2d:9f:d3:73:49:40:
                    72:dc:04:73:c2:00:4a:58:60:e2:67:2b:f1:c9:8b:
                    f6:29:73:0f:c4:74:f8:00:e5:72:76:56:61:04:03:
                    0b:8f:2d:f3:00:5b:6c:ef:3a:a4:74:99:75:5f:8c:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FF:80:FB:F3:18:52:3E:13:62:DC:75:9F:92:12:8D:67:F1:E5:53
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:57:b5:51:98:4e:d4:dd:c4:13:cf:86:a3:9e:59:39:76:
         54:40:56:64:c2:e5:b3:d0:6b:ba:b5:83:15:19:22:b0:b3:ea:
         b9:cd:89:3a:ce:ff:ff:f0:6f:8c:a6:09:cd:0f:be:bf:3e:b3:
         7c:8f:0d:98:9b:ab:2f:a8:75:1d:de:d6:d2:78:2b:41:5e:42:
         4d:4a:c2:5e:57:b2:3c:80:2c:79:fb:e0:0c:e5:62:f4:b1:fc:
         5a:db:e0:c7:b5:d2:27:c8:89:dd:8d:54:54:12:95:8a:5f:89:
         85:85:04:f9:ae:b7:57:99:31:4a:09:ba:b3:9f:fc:b1:5b:47:
         0e:be:24:73:4b:c8:9a:91:b1:e9:68:af:69:5c:5c:30:2d:df:
         b8:ed:da:d0:ad:6c:ac:e2:ef:56:14:a8:66:5a:98:a5:db:23:
         03:3c:c3:3a:f0:b8:93:28:24:fb:51:eb:0f:04:27:5e:9e:a2:
         11:aa:90:b0:be:f4:07:96:e8:ed:54:54:ee:9e:8a:9c:53:21:
         34:b7:f8:54:2e:f2:55:c7:29:8f:fa:79:1c:97:78:64:5d:58:
         57:09:26:75:f8:fd:f5:5b:46:0a:ed:f1:1d:50:53:b0:25:04:
         16:92:0f:e7:f1:a6:7d:e8:b6:a3:4d:fb:0d:39:a4:53:11:c8:
         7a:7c:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org