Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3139332e31362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          VTRW985rDzT36iiMJ5/9jNh2koZxOvq5mrsV7NYtSG8=
Subject key identifier:   42:23:92:EF:78:2C:0A:DF:61:3C:24:F0:C1:FB:0E:A6:B4:C6:A5:6A
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2B4D7BACDD6BA216CC2066603AEDD0ECCED9C656
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:05 +0000
ROA not before:           Sat 22 Oct 2022 04:29:05 +0000
ROA not after:            Sat 21 Oct 2023 04:34:05 +0000
asID:                     61317
IP address blocks:        185.193.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4d:7b:ac:dd:6b:a2:16:cc:20:66:60:3a:ed:d0:ec:ce:d9:c6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:05 2022 GMT
            Not After : Oct 21 04:34:05 2023 GMT
        Subject: CN=422392EF782C0ADF613C24F0C1FB0EA6B4C6A56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:02:fc:62:bb:a4:47:a8:e1:56:cc:dd:62:
                    9e:75:e5:8e:97:38:96:f9:43:31:49:ad:4b:e4:d8:
                    c2:af:b6:cb:22:9c:2b:b1:71:b9:40:cc:3b:54:48:
                    b9:7f:d5:54:01:7d:a1:6b:eb:17:e8:5e:77:3e:3c:
                    71:7c:b1:36:88:22:66:fc:39:80:3e:e1:b0:e5:f1:
                    b2:3c:97:39:a8:76:41:74:05:e1:8b:38:80:b5:4d:
                    0b:3b:d1:c3:be:9e:83:d2:54:64:a1:aa:3e:9a:de:
                    af:84:20:55:cc:2a:e2:b9:9e:c6:91:99:cd:be:0d:
                    8b:3d:e6:6a:5d:fb:86:d5:4f:53:c8:86:28:8d:60:
                    13:e6:65:f3:ae:b8:e6:a8:44:5c:5f:34:3f:eb:53:
                    37:ef:d2:f4:04:4d:ee:07:cc:19:4b:33:aa:96:b4:
                    d1:5b:ef:33:b1:bd:a3:18:2e:86:bb:ff:5c:26:16:
                    cc:c1:d2:4f:3f:ff:ce:76:be:d6:ec:a1:94:7b:1d:
                    f9:9c:0a:ce:1d:cd:d9:d5:3d:ca:4f:88:e3:d6:84:
                    60:ed:01:9d:01:d8:1c:a2:e6:ad:39:5d:dc:f4:43:
                    44:0a:74:20:a9:10:e8:da:43:03:ba:47:f3:c1:c2:
                    1a:41:a1:45:12:a7:ea:6c:b6:87:aa:5e:a2:9b:02:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:23:92:EF:78:2C:0A:DF:61:3C:24:F0:C1:FB:0E:A6:B4:C6:A5:6A
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:83:1a:be:e5:fb:dd:0e:64:c1:f7:89:40:6d:e7:c7:7e:56:
         df:c2:8b:13:a1:14:e5:60:92:eb:59:40:e6:ef:cc:b6:2d:7e:
         68:ba:53:73:c7:b8:7d:fc:b8:9e:f6:4f:a3:bd:9f:16:78:f3:
         53:14:1b:7b:3c:ee:0c:d5:b9:fe:02:0c:59:21:1f:d1:81:70:
         c6:dc:e6:c8:a0:d3:a8:35:05:c6:86:29:f4:c2:9d:bb:21:96:
         58:fb:b7:94:17:31:01:d4:7d:f5:02:37:f2:3f:28:8a:20:69:
         3b:43:ed:c8:e2:6b:30:b2:ac:bf:ef:71:3f:e4:aa:34:89:7a:
         a0:45:06:77:38:03:c4:d6:2f:4d:cb:05:01:e6:8d:4c:ee:09:
         48:e3:f0:62:7c:92:32:61:d6:4e:d3:93:ff:e5:98:97:66:1d:
         b0:9d:c0:8c:4b:6b:72:72:ae:ed:63:01:84:1b:03:e9:d0:64:
         cb:2e:c1:ec:57:2a:77:8a:4c:6f:5a:d4:47:5a:f6:44:f8:10:
         d7:e3:a6:60:20:6d:73:75:61:71:ce:1a:90:81:a2:4d:65:f5:
         81:cd:3f:72:7e:a9:07:54:87:0c:b6:e4:e4:e4:3b:d2:c1:8a:
         25:8f:d9:06:05:3c:5c:51:66:d9:22:c6:4c:68:dc:89:67:97:
         21:1b:16:1f
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUK017rN1rohbMIGZgOu3Q7M7ZxlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI5MDVaFw0yMzEwMjEwNDM0MDVaMDMxMTAvBgNV
BAMTKDQyMjM5MkVGNzgyQzBBREY2MTNDMjRGMEMxRkIwRUE2QjRDNkE1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoQL8YrukR6jhVszdYp515Y6X
OJb5QzFJrUvk2MKvtssinCuxcblAzDtUSLl/1VQBfaFr6xfoXnc+PHF8sTaIImb8
OYA+4bDl8bI8lzmodkF0BeGLOIC1TQs70cO+noPSVGShqj6a3q+EIFXMKuK5nsaR
mc2+DYs95mpd+4bVT1PIhiiNYBPmZfOuuOaoRFxfND/rUzfv0vQETe4HzBlLM6qW
tNFb7zOxvaMYLoa7/1wmFszB0k8//852vtbsoZR7HfmcCs4dzdnVPcpPiOPWhGDt
AZ0B2Byi5q05Xdz0Q0QKdCCpEOjaQwO6R/PBwhpBoUUSp+pstoeqXqKbAr9rAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUQiOS73gsCt9hPCTwwfsOprTGpWowHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zMTM4MzUyZTMxMzkzMzJlMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC5wRAwDQYJKoZIhvcNAQELBQADggEBAGODGr7l
+90OZMH3iUBt58d+Vt/CixOhFOVgkutZQObvzLYtfmi6U3PHuH38uJ72T6O9nxZ4
81MUG3s87gzVuf4CDFkhH9GBcMbc5sig06g1BcaGKfTCnbshllj7t5QXMQHUffUC
N/I/KIogaTtD7cjiazCyrL/vcT/kqjSJeqBFBnc4A8TWL03LBQHmjUzuCUjj8GJ8
kjJh1k7Tk//lmJdmHbCdwIxLa3Jyru1jAYQbA+nQZMsuwexXKneKTG9a1Eda9kT4
ENfjpmAgbXN1YXHOGpCBok1l9YHNP3J+qQdUhwy25OTkO9LBiiWP2QYFPFxRZtki
xkxo3IlnlyEbFh8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org