Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e203631333137.roa
File:                     3138352e3234392e3232372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          3gz309sEgkM7aXTv0wm3k74fbUVc3KQ8UYOmaJ3t/AA=
Subject key identifier:   BD:40:0D:04:83:0C:2A:BA:63:1C:2F:C6:51:7A:EE:AF:BD:D5:6E:E5
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2CBB67A3F9DDCA7120DCFB054F3F81EAEBDD514A
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:04 +0000
ROA not before:           Tue 28 Jun 2022 04:36:04 +0000
ROA not after:            Tue 27 Jun 2023 04:41:04 +0000
asID:                     61317
IP address blocks:        185.249.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bb:67:a3:f9:dd:ca:71:20:dc:fb:05:4f:3f:81:ea:eb:dd:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:04 2022 GMT
            Not After : Jun 27 04:41:04 2023 GMT
        Subject: CN=BD400D04830C2ABA631C2FC6517AEEAFBDD56EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:49:a8:2c:7e:da:f0:b0:c0:52:c1:e8:f5:
                    44:ae:c6:57:a8:23:b1:d2:57:ce:dc:53:cf:19:42:
                    c1:58:d8:85:5f:37:eb:52:e8:69:28:e1:64:c8:4a:
                    18:14:43:a6:a0:96:0d:08:75:a2:da:6d:c9:cc:9a:
                    51:e3:81:f3:46:20:a5:a8:74:59:61:f6:7c:2d:c6:
                    8b:52:3e:ac:4a:c7:ac:55:8b:30:b0:6a:fd:28:81:
                    c6:fd:58:52:80:36:3e:44:6d:15:73:01:50:63:89:
                    fb:62:a7:66:b7:e4:9b:f3:b5:11:66:48:3c:61:f1:
                    b9:b3:12:87:63:aa:48:f2:b1:31:df:fe:59:27:97:
                    0e:5c:6a:ab:9b:3e:7e:10:ed:6a:12:b9:5d:18:1c:
                    e8:2f:14:c3:5e:c3:e1:2d:7d:a1:81:5f:a2:22:6c:
                    00:e4:7d:c4:68:08:2c:d1:67:ca:7f:c4:5c:6d:c0:
                    eb:64:d5:83:52:b9:06:48:df:ec:24:40:3b:24:91:
                    8a:e1:d3:dd:8b:70:b8:d2:33:39:9c:9a:b5:cf:16:
                    51:73:a6:f8:90:df:7d:81:21:d6:66:bd:47:6c:03:
                    b4:a3:91:f7:74:ac:9e:fd:4d:4c:ce:1d:fc:85:4d:
                    97:ef:b0:c9:99:0a:37:7e:61:bc:72:c1:0f:d0:88:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:40:0D:04:83:0C:2A:BA:63:1C:2F:C6:51:7A:EE:AF:BD:D5:6E:E5
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:9b:1f:c8:31:b7:27:22:40:5e:b9:58:b1:f6:37:8b:a5:67:
         5d:db:4f:56:80:f0:e1:47:de:57:f0:d2:7c:37:68:2e:3c:09:
         a5:86:74:9c:b4:92:bf:20:37:e4:4c:0e:2b:49:01:79:db:e9:
         39:5d:c0:c6:2d:6e:31:f8:cc:f4:53:56:fa:46:65:ee:49:f2:
         a3:55:fb:87:cd:00:a5:74:3c:b0:b5:b8:19:b5:0f:1e:86:6d:
         fa:c6:ca:47:43:11:13:55:a8:b3:68:a3:75:da:ca:fc:b6:48:
         03:33:46:19:54:01:5b:9c:db:59:68:98:cb:45:48:7f:96:ef:
         06:fb:05:6d:2e:0f:b1:bb:51:5c:f6:d4:58:1d:8a:9a:23:39:
         d0:b1:ad:a7:2a:2e:5d:1b:7e:fc:9b:29:c7:c2:3e:83:e6:9c:
         39:b5:f5:ed:12:75:1e:a4:b4:40:7b:db:8e:ee:f8:96:2a:98:
         50:4a:d8:43:87:2d:33:7b:77:48:e2:70:43:1f:ca:dc:99:aa:
         25:5f:9f:28:f9:67:46:9a:1b:7d:6b:b5:f7:2f:99:02:7b:fc:
         a4:de:68:91:8f:5f:2c:c0:db:0b:a0:55:3f:bd:38:f9:d0:41:
         23:db:55:2b:38:6f:5f:e6:bc:50:f8:be:e6:38:39:f7:50:cc:
         c0:65:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org