Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/81/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3139332e31362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          NTp3GeCdqLX3GHFUEaergNldWhgETtEh1hHpkCIybhU=
Subject key identifier:   3F:19:E3:7A:F9:63:F1:00:9C:DB:47:7D:6A:9C:9B:07:47:FB:CA:06
Certificate issuer:       /CN=ae99f7a676c12b1cebe350580b4c5cd4ab286b74
Certificate serial:       5EED8CFDD046A718302716282EF08129F2B1DFB5
Authority key identifier: AE:99:F7:A6:76:C1:2B:1C:EB:E3:50:58:0B:4C:5C:D4:AB:28:6B:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpn3pnbBKxzr41BYC0xc1Ksoa3Q.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/81/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:28:43 +0000
ROA not before:           Tue 01 Dec 2020 23:23:43 +0000
ROA not after:            Tue 30 Nov 2021 23:28:43 +0000
asID:                     61317
IP address blocks:        185.193.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ed:8c:fd:d0:46:a7:18:30:27:16:28:2e:f0:81:29:f2:b1:df:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae99f7a676c12b1cebe350580b4c5cd4ab286b74
        Validity
            Not Before: Dec  1 23:23:43 2020 GMT
            Not After : Nov 30 23:28:43 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:eb:6b:46:5e:ba:3f:63:52:16:6b:37:5d:
                    50:bb:b5:d8:b5:99:0a:80:c7:06:19:a4:af:b7:b7:
                    f7:42:d8:6e:ba:f8:4e:0f:ae:b6:52:65:7d:b8:7e:
                    04:50:6a:a2:37:76:ee:76:be:a8:1c:55:6d:eb:66:
                    9a:1a:31:c5:44:ae:1e:2a:04:d0:8f:02:14:76:e0:
                    32:2e:a7:3a:3e:52:a4:6e:a6:ac:df:10:41:92:bd:
                    f6:2c:57:26:27:9d:75:79:06:18:1d:4a:ef:fe:5e:
                    8a:c2:f1:aa:8e:cb:df:a4:ab:49:d7:66:a0:71:71:
                    cc:86:97:ba:4f:67:71:44:ae:11:e8:3e:69:75:51:
                    b5:33:ea:06:35:34:53:55:24:4c:ba:2a:83:55:82:
                    7c:26:16:0e:4a:4b:db:39:ea:70:54:f7:77:d4:0a:
                    81:38:e2:a1:ef:b1:b3:ae:07:db:22:80:38:28:af:
                    11:d8:d8:56:be:37:85:86:69:56:d5:b8:32:6a:33:
                    84:2a:45:21:d7:aa:18:29:28:e5:88:16:1a:27:a7:
                    5c:9b:ab:7d:65:20:02:25:d4:4e:f9:b3:36:b9:41:
                    fa:12:1b:db:c9:5b:7e:0b:d5:71:d6:01:ca:df:06:
                    c5:5d:fb:cf:ec:79:7f:1c:4b:9e:74:ce:14:64:55:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:19:E3:7A:F9:63:F1:00:9C:DB:47:7D:6A:9C:9B:07:47:FB:CA:06
            X509v3 Authority Key Identifier:
                keyid:AE:99:F7:A6:76:C1:2B:1C:EB:E3:50:58:0B:4C:5C:D4:AB:28:6B:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/81/AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpn3pnbBKxzr41BYC0xc1Ksoa3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/81/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:67:22:cd:b8:56:a8:20:69:5e:67:27:32:ab:98:3c:74:fd:
         19:51:f3:16:73:d1:d4:ac:43:91:37:63:d4:6c:dc:ab:9d:a2:
         f2:04:d9:b0:77:f4:a7:3d:e1:b5:17:d1:51:8c:a0:6d:eb:f4:
         28:c6:61:e2:7e:bb:f8:eb:c8:29:fd:ea:42:f5:32:96:0e:fb:
         1b:12:0b:7a:4b:9c:62:63:e2:ca:99:e5:55:3b:3c:d4:e0:3c:
         df:3e:62:9d:63:10:74:36:01:13:e2:3d:a9:38:43:a1:12:46:
         d0:df:31:82:b3:50:20:83:c9:47:4b:07:8a:12:3a:0b:82:b3:
         44:15:89:51:b4:a4:8c:be:ab:8d:25:2c:c0:98:cb:19:90:d1:
         7b:9f:7f:46:53:30:aa:9f:69:af:3a:db:cb:e8:f1:dd:ad:e9:
         61:e8:0d:9d:55:db:a7:b8:4c:45:5b:d0:ed:73:cd:47:c3:69:
         2e:6c:65:24:ab:9e:5e:aa:79:14:1c:85:45:92:f2:e6:07:a3:
         36:8c:2e:a5:2d:18:b3:7c:65:25:b9:52:3a:ef:f2:6b:e3:51:
         d2:6a:ff:65:b6:5e:04:1b:e7:b5:6c:c0:01:cb:37:9e:cb:cb:
         1a:43:d5:8f:73:f0:c5:fb:c1:7b:19:7b:c7:ee:6a:98:5b:df:
         0b:ba:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-fra.rpki-client.org