Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e2031323339.roa
File:                     3138352e3231312e33322e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          tHhRjlW2+Xv7gN9LATe5jMzb74b3IZrqzdhvS9i1+cQ=
Subject key identifier:   3C:E4:AF:75:B9:F5:12:7B:77:7A:47:AF:94:10:0F:A7:09:92:3F:25
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       50D3A99EFB257D98F950248CD2AA1354A0B6EA0B
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e2031323339.roa
Signing time:             Tue 28 Jun 2022 04:41:00 +0000
ROA not before:           Tue 28 Jun 2022 04:36:00 +0000
ROA not after:            Tue 27 Jun 2023 04:41:00 +0000
asID:                     1239
IP address blocks:        185.211.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d3:a9:9e:fb:25:7d:98:f9:50:24:8c:d2:aa:13:54:a0:b6:ea:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:36:00 2022 GMT
            Not After : Jun 27 04:41:00 2023 GMT
        Subject: CN=3CE4AF75B9F5127B777A47AF94100FA709923F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:04:bd:80:39:01:72:4e:3f:ad:39:c5:c7:
                    56:db:25:03:18:06:1d:6a:18:88:14:59:fe:88:65:
                    92:c9:4b:85:d4:94:75:6a:ba:8f:ee:34:07:7a:7c:
                    f4:9b:de:5a:59:52:a4:9c:38:cb:9c:fd:79:5e:c0:
                    b0:ab:f5:48:5f:43:b0:2a:b2:fd:a1:a1:27:90:09:
                    1a:a5:ba:28:4c:5b:f1:c8:1b:08:ac:ab:c6:d7:9b:
                    a4:8a:0a:be:ae:2b:ce:32:d0:ab:18:ab:a1:de:c1:
                    66:5a:36:48:d8:af:2a:d6:b2:32:93:6a:a0:3e:2e:
                    b5:79:25:e4:be:9c:ce:0f:4e:46:af:4a:1c:2d:ba:
                    5f:a0:19:dd:b4:1d:c3:e3:ed:24:7d:35:60:10:d7:
                    da:45:d3:f7:3e:58:4c:c7:e8:e0:80:b7:59:3f:bf:
                    3b:54:01:fa:38:cf:33:22:97:c9:85:c0:d1:07:1a:
                    8d:9a:54:cf:2c:16:04:c5:fd:02:59:07:f2:e0:65:
                    d2:e5:0b:19:8b:32:8c:23:dd:c4:da:f3:85:91:e6:
                    56:3b:2d:82:6c:c5:94:21:17:7a:96:87:e9:9a:d3:
                    21:58:12:0c:8c:14:6f:d8:2a:31:44:66:03:70:02:
                    d3:34:16:eb:f4:73:a9:46:66:3c:dd:98:ef:c9:e3:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E4:AF:75:B9:F5:12:7B:77:7A:47:AF:94:10:0F:A7:09:92:3F:25
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:1e:e8:34:36:ca:84:8f:c3:55:2b:a9:a5:1f:b4:d2:d2:
         bc:0a:55:c8:39:01:73:05:ea:d8:91:ec:64:d6:83:a9:28:60:
         42:8f:8b:5a:78:7a:8c:06:a3:90:c5:da:99:22:e9:05:0c:8f:
         19:ff:9a:c6:c1:7d:73:60:3e:a9:5d:60:a3:52:85:71:40:22:
         b3:b8:b5:ba:cd:09:48:97:12:d1:c5:2d:67:33:0f:b0:25:77:
         3d:56:1d:54:65:4c:ca:58:a6:b0:88:86:ea:8e:5d:6b:55:83:
         cc:d1:82:b8:50:31:fe:db:be:63:0a:03:5c:af:3f:15:af:b8:
         d0:44:96:35:9d:ab:91:63:9e:52:a4:09:35:38:9b:0f:52:1d:
         36:50:94:9c:83:6c:ba:8b:7b:5f:1f:40:e8:28:fb:6e:75:d9:
         fb:34:a4:c5:e0:45:00:9a:54:43:75:27:ed:34:b6:e9:43:fb:
         ab:17:23:ce:a9:92:ce:5c:97:0f:cf:d6:c8:04:e5:eb:02:b6:
         c1:67:23:a2:c6:96:df:14:ce:d5:7f:6a:45:94:7c:71:3c:0a:
         f7:c7:df:6a:62:b7:cf:fd:b9:92:08:1b:58:a6:63:69:19:ef:
         aa:8c:b5:5d:21:89:10:e1:28:d9:fb:11:28:68:c2:d0:f4:6d:
         c7:d0:9c:2a
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUUNOpnvslfZj5UCSM0qoTVKC26gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMjA2MjgwNDM2MDBaFw0yMzA2MjcwNDQxMDBaMDMxMTAvBgNV
BAMTKDNDRTRBRjc1QjlGNTEyN0I3NzdBNDdBRjk0MTAwRkE3MDk5MjNGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+AS9gDkBck4/rTnFx1bbJQMY
Bh1qGIgUWf6IZZLJS4XUlHVquo/uNAd6fPSb3lpZUqScOMuc/XlewLCr9UhfQ7Aq
sv2hoSeQCRqluihMW/HIGwisq8bXm6SKCr6uK84y0KsYq6HewWZaNkjYryrWsjKT
aqA+LrV5JeS+nM4PTkavShwtul+gGd20HcPj7SR9NWAQ19pF0/c+WEzH6OCAt1k/
vztUAfo4zzMil8mFwNEHGo2aVM8sFgTF/QJZB/LgZdLlCxmLMowj3cTa84WR5lY7
LYJsxZQhF3qWh+ma0yFYEgyMFG/YKjFEZgNwAtM0Fuv0c6lGZjzdmO/J4wPpAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUPOSvdbn1Ent3ekevlBAPpwmSPyUwHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
My8zMTM4MzUyZTMyMzEzMTJlMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAudMgMA0GCSqGSIb3DQEBCwUAA4IBAQArZB7oNDbK
hI/DVSuppR+00tK8ClXIOQFzBerYkexk1oOpKGBCj4taeHqMBqOQxdqZIukFDI8Z
/5rGwX1zYD6pXWCjUoVxQCKzuLW6zQlIlxLRxS1nMw+wJXc9Vh1UZUzKWKawiIbq
jl1rVYPM0YK4UDH+275jCgNcrz8Vr7jQRJY1nauRY55SpAk1OJsPUh02UJScg2y6
i3tfH0DoKPtuddn7NKTF4EUAmlRDdSftNLbpQ/urFyPOqZLOXJcPz9bIBOXrArbB
ZyOixpbfFM7Vf2pFlHxxPAr3x99qYrfP/bmSCBtYpmNpGe+qjLVdIYkQ4SjZ+xEo
aMLQ9G3H0Jwq
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org