Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa
File:                     3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          n9A1WyKuhwgxjgsqU37/Tv5T27HGVsFRfg16V3/kRyM=
Subject key identifier:   8B:81:ED:6D:CE:3D:5A:7B:72:67:CD:C2:96:70:9B:1F:EE:90:C0:50
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6926453D20A4F0D29C6E3A27A81F9202E807B57B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:31 +0000
ROA not before:           Sat 22 Oct 2022 04:28:31 +0000
ROA not after:            Sat 21 Oct 2023 04:33:31 +0000
asID:                     136787
IP address blocks:        194.110.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:26:45:3d:20:a4:f0:d2:9c:6e:3a:27:a8:1f:92:02:e8:07:b5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:31 2022 GMT
            Not After : Oct 21 04:33:31 2023 GMT
        Subject: CN=8B81ED6DCE3D5A7B7267CDC296709B1FEE90C050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:e0:e1:63:30:e5:1f:ba:d8:b7:66:90:97:
                    e8:7e:bc:4d:46:eb:eb:fe:3c:3d:90:ca:92:5d:b0:
                    95:dc:11:9f:fe:fd:49:52:a6:6e:5a:c3:cc:31:f2:
                    39:49:21:d8:ba:22:0c:47:f7:ec:43:d2:39:15:5c:
                    ba:3d:67:ff:2a:0f:ae:1d:4e:f1:5c:c0:ad:4e:1d:
                    31:9b:73:f3:a8:ee:72:b1:9b:0f:24:a7:cc:25:67:
                    f4:29:5f:99:f3:92:03:82:5f:d1:60:60:e7:6a:9e:
                    bb:db:8b:b8:42:2c:25:cc:6b:ad:c5:1c:cc:85:02:
                    5d:f4:7c:87:f1:e1:01:ce:e1:c5:65:eb:26:56:a5:
                    7c:3a:a8:6b:68:c9:5c:ff:62:e6:30:77:f5:d6:c4:
                    ba:fa:af:d9:ce:49:6b:25:f2:13:15:c1:67:79:bf:
                    95:1e:3f:79:93:69:88:b7:bc:96:b5:01:19:2e:3f:
                    ec:47:46:a5:a8:98:6a:58:05:fa:ec:51:3d:ab:63:
                    4d:5d:87:d1:dc:cc:f6:cc:e4:28:0b:14:34:63:f5:
                    6f:50:67:8a:40:94:47:45:4a:0e:44:80:11:ae:2b:
                    83:aa:fb:87:9f:e4:e4:df:42:c7:0a:52:90:9e:2b:
                    af:9f:90:0c:50:ef:46:97:5e:9b:69:2e:52:f8:a7:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:81:ED:6D:CE:3D:5A:7B:72:67:CD:C2:96:70:9B:1F:EE:90:C0:50
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8e:4a:d2:4e:74:48:90:bf:06:58:95:2a:e3:d2:5a:5a:d7:
         e1:85:97:53:bc:21:21:44:1a:72:25:7c:67:19:99:c5:84:dc:
         35:88:14:2c:02:59:3b:a1:1f:24:c2:f3:13:37:ae:7b:19:02:
         2d:df:a0:f8:30:ff:1e:b5:85:88:de:74:cc:27:e7:5c:b6:db:
         78:85:28:b4:63:8e:63:05:77:e9:29:20:ce:b0:7d:ea:8c:00:
         87:49:27:d5:ab:57:3f:07:e8:70:11:f1:3f:c3:06:03:21:c2:
         a2:ab:ee:d1:0d:a2:5a:b2:d2:e8:d5:17:cc:75:e9:72:e0:ad:
         2a:d1:a5:58:c1:3b:93:84:3c:ac:a6:f6:a7:c0:c6:fb:0c:1e:
         47:a1:4e:69:23:18:15:ca:0d:d6:52:5e:ac:ca:3a:12:f0:39:
         0c:10:b1:29:b4:ea:bb:d3:4a:a5:94:7a:3c:d5:d2:11:1e:a2:
         b2:c5:72:ae:96:f9:b6:88:9a:a4:b4:71:e2:32:32:62:ea:8d:
         2d:3a:08:4a:7a:2b:b3:93:3e:a3:1a:5a:93:3e:89:6d:8f:58:
         0a:20:f5:6d:c5:d3:dc:1f:0f:74:d3:9c:06:71:74:d9:78:1d:
         36:f0:e7:94:33:26:37:87:20:bc:84:36:d2:8c:64:05:8c:12:
         0c:cd:49:26
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUaSZFPSCk8NKcbjonqB+SAugHtXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzFaFw0yMzEwMjEwNDMzMzFaMDMxMTAvBgNV
BAMTKDhCODFFRDZEQ0UzRDVBN0I3MjY3Q0RDMjk2NzA5QjFGRUU5MEMwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0muDhYzDlH7rYt2aQl+h+vE1G
6+v+PD2QypJdsJXcEZ/+/UlSpm5aw8wx8jlJIdi6IgxH9+xD0jkVXLo9Z/8qD64d
TvFcwK1OHTGbc/Oo7nKxmw8kp8wlZ/QpX5nzkgOCX9FgYOdqnrvbi7hCLCXMa63F
HMyFAl30fIfx4QHO4cVl6yZWpXw6qGtoyVz/YuYwd/XWxLr6r9nOSWsl8hMVwWd5
v5UeP3mTaYi3vJa1ARkuP+xHRqWomGpYBfrsUT2rY01dh9HczPbM5CgLFDRj9W9Q
Z4pAlEdFSg5EgBGuK4Oq+4ef5OTfQscKUpCeK6+fkAxQ70aXXptpLlL4p3xNAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUi4Htbc49WntyZ83ClnCbH+6QwFAwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM5MzQyZTMxMzEzMDJlMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJuVTANBgkqhkiG9w0BAQsFAAOCAQEAgI5K
0k50SJC/BliVKuPSWlrX4YWXU7whIUQaciV8ZxmZxYTcNYgULAJZO6EfJMLzEzeu
exkCLd+g+DD/HrWFiN50zCfnXLbbeIUotGOOYwV36SkgzrB96owAh0kn1atXPwfo
cBHxP8MGAyHCoqvu0Q2iWrLS6NUXzHXpcuCtKtGlWME7k4Q8rKb2p8DG+wweR6FO
aSMYFcoN1lJerMo6EvA5DBCxKbTqu9NKpZR6PNXSER6issVyrpb5toiapLRx4jIy
YuqNLToISnors5M+oxpakz6JbY9YCiD1bcXT3B8PdNOcBnF02XgdNvDnlDMmN4cg
vIQ20oxkBYwSDM1JJg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org