Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa
File:                     3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa (raw, json)
Hash identifier:          n1REeJvAbeGmwXQp1bzgTzPKyhXAIWYRHpGVpClBPSs=
Subject key identifier:   6D:A7:8E:D4:E5:99:48:D5:65:E0:AD:55:9B:CB:B5:B6:92:B1:BE:35
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       03A76B2FB62A022D0CC6AF9BC49CB0AFFEDD0764
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     2856
IP address blocks:        185.190.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:6b:2f:b6:2a:02:2d:0c:c6:af:9b:c4:9c:b0:af:fe:dd:07:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=6DA78ED4E59948D565E0AD559BCBB5B692B1BE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:84:4f:d1:3a:f7:64:a3:42:65:55:ac:12:
                    60:0f:bd:24:65:4f:18:e3:b6:8a:ae:3f:8b:34:34:
                    8e:ae:7a:73:47:00:b8:e3:7e:b7:2f:d0:87:bf:97:
                    17:fb:d7:3d:8e:89:89:32:eb:50:fb:16:18:22:3b:
                    0d:84:c9:84:39:8e:d6:b3:dd:a0:11:3f:8e:23:da:
                    f3:02:97:e8:0f:4c:de:5e:fe:f1:06:f7:5d:15:78:
                    16:90:40:3f:24:41:72:c6:58:4a:b9:ae:45:5a:4a:
                    2b:f5:25:b1:ff:9c:6d:98:58:cb:20:dc:49:d2:80:
                    cc:59:5a:a8:a7:d8:53:09:c9:d6:33:2b:57:54:3a:
                    f0:e1:1c:9a:7c:31:c0:e7:c0:5f:31:5b:25:00:2c:
                    11:b7:cb:8a:71:4f:e3:02:21:27:08:93:0a:c4:f8:
                    ed:ea:8f:a5:6b:2e:45:b4:36:bc:f8:66:c6:89:96:
                    8c:e9:57:8d:5d:70:17:69:e6:27:5b:fb:3f:ee:5f:
                    9b:4e:66:a0:aa:80:fa:81:9f:65:27:bb:fb:23:0e:
                    5c:1e:6c:23:22:23:00:69:91:0f:01:cf:32:96:46:
                    0a:ca:31:1f:31:cc:1a:4e:06:e9:09:b1:87:07:e7:
                    85:71:83:ba:11:4b:ad:fb:43:0b:c4:86:18:7e:01:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A7:8E:D4:E5:99:48:D5:65:E0:AD:55:9B:CB:B5:B6:92:B1:BE:35
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:21:55:61:17:a7:fa:8f:ea:8f:bc:d3:59:97:06:8d:ea:da:
         b5:9b:ca:b6:a0:91:3c:db:a9:8e:15:57:fc:1b:a0:2e:9e:90:
         76:65:ba:0f:f7:08:8f:c9:2b:b3:f8:7b:b3:2b:f1:88:84:7d:
         d7:eb:d1:51:a8:b6:2b:af:55:05:6a:2f:8b:c7:6b:8a:90:45:
         df:6c:90:cb:35:5d:ca:94:b4:24:7f:fc:a9:5b:16:15:2a:a2:
         02:7f:e7:75:f4:66:7b:6c:c2:42:43:1c:3d:a7:c5:76:33:19:
         8c:c1:9a:3d:55:75:8e:58:31:e8:67:e1:ad:ad:e0:c7:cf:f6:
         4d:c6:1b:cf:99:bb:82:7d:d6:d1:76:a1:f8:83:27:8a:e9:d9:
         f4:ab:8d:7b:3a:80:d5:ec:97:0a:f6:dd:66:a0:ad:63:2a:b1:
         69:2c:c5:af:65:fc:80:2a:54:26:cd:b8:31:a3:3a:fa:5d:bc:
         47:9b:a2:75:57:c6:93:06:03:10:60:03:3c:9b:a6:3d:b7:69:
         ad:d3:75:72:94:e9:6d:8a:41:40:bf:c9:51:33:39:29:ac:4b:
         17:47:24:28:dc:5b:2c:e5:db:07:33:8a:59:62:ac:a1:37:de:
         59:99:bb:cc:56:49:9f:ae:02:da:19:3b:ac:ea:18:4b:9a:72:
         93:84:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org