Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
File:                     3134392e36322e33382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          UCE9CA9sLaXpE40sOwTCbcDz8+G969hky/+SYvW3tWc=
Subject key identifier:   61:20:77:73:F2:51:6D:69:C4:D6:CD:E8:FD:58:7E:68:DB:2A:EC:C5
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3192CD95E0E42DD5F6870823A830A4FF1CF68FD7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     136787
IP address blocks:        149.62.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:92:cd:95:e0:e4:2d:d5:f6:87:08:23:a8:30:a4:ff:1c:f6:8f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=61207773F2516D69C4D6CDE8FD587E68DB2AECC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:a5:22:f9:26:e0:ef:2d:ad:08:2d:5c:48:
                    a9:ba:15:29:53:b7:da:24:6e:db:7d:b4:3b:31:f8:
                    5a:c0:dd:b6:c6:20:96:04:03:13:3a:a4:94:39:d8:
                    6d:e7:09:bb:33:07:33:74:10:6d:9a:f9:36:9f:d4:
                    69:f2:32:94:99:ce:1e:c8:22:ad:4e:dc:10:da:4f:
                    69:2f:0d:f6:f5:d0:8d:7a:07:3c:81:c1:5d:28:2b:
                    5f:ff:21:55:05:0d:a3:d5:ca:68:f8:02:25:f7:20:
                    0e:9c:ea:38:5d:1c:c6:3c:04:62:9c:af:04:a1:cd:
                    ef:08:e5:74:ee:2b:ff:a3:85:15:64:b6:dd:36:2b:
                    b8:a0:d1:b5:0a:cf:be:67:d4:ef:70:bd:25:e5:7d:
                    d2:4a:e6:99:68:78:36:f3:ad:eb:89:47:23:fa:f0:
                    fb:15:75:d2:d2:b3:9d:d8:cc:0a:30:07:c1:92:18:
                    63:74:78:12:f7:77:dd:0c:6c:f3:a4:d9:4e:6d:07:
                    69:fd:67:a3:f2:23:95:70:5f:e4:86:40:25:97:88:
                    dd:22:0b:28:e2:78:e6:4a:1b:f5:1f:fc:25:98:ab:
                    0e:3c:d3:5f:88:6b:c6:4b:6e:f6:5d:a9:ee:b8:35:
                    13:bb:31:10:dd:89:94:50:f2:fd:ea:26:77:5a:1d:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:20:77:73:F2:51:6D:69:C4:D6:CD:E8:FD:58:7E:68:DB:2A:EC:C5
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:ab:a0:ea:a1:52:3a:ad:41:f9:3f:10:d5:7f:bf:a7:c2:
         c8:0e:f3:24:96:0a:e9:71:25:3d:27:83:0f:56:de:5e:76:5c:
         58:48:27:81:71:23:05:4f:29:82:3c:e0:1f:3e:5c:11:59:f5:
         d7:d3:d0:67:e0:54:0c:14:2c:5f:c4:aa:10:6e:ff:f0:6b:43:
         b6:be:ea:39:b5:64:6e:8c:6a:e3:93:d2:8b:b1:8f:de:03:2c:
         83:ad:57:d1:0b:b9:65:6e:7c:e3:5b:2f:eb:2b:e4:8e:a2:82:
         d8:c9:aa:ce:0a:9a:63:cc:5c:98:f0:55:c0:77:12:20:1a:4a:
         90:5b:8d:59:24:71:72:1f:36:e0:91:6b:ef:c6:f5:22:f5:94:
         a8:c0:ea:ca:72:d3:d5:04:c0:24:5a:8f:42:c3:75:ef:5d:d7:
         81:08:4a:c6:d5:ae:4b:71:34:4e:82:5f:df:56:9a:13:9b:9f:
         6f:29:21:6a:02:fb:38:57:c3:6d:73:50:a8:99:4c:3f:3f:9f:
         eb:2e:4f:b7:da:97:18:4c:a0:7d:1c:0b:7c:f3:68:b1:ff:02:
         25:2e:68:7e:62:5d:f7:00:e6:0c:fd:1b:72:62:1b:26:5f:fe:
         b1:d8:41:f7:84:47:70:1b:9a:b2:14:98:0a:50:d8:61:b9:94:
         c3:90:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org