Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32342d3234203d3e20333935303932.roa
File:                     3138352e3139372e3139322e302f32342d3234203d3e20333935303932.roa (raw, json)
Hash identifier:          TRLcKZ+IItcwyt83ZEdA6riIpWJmavGXvB3bqNVQUQQ=
Subject key identifier:   79:07:CE:2D:CE:2D:19:8A:51:A3:AE:45:4C:66:68:67:23:0D:A2:B3
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1641A765B94433F621B264B5098E8E9083B5CB6C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32342d3234203d3e20333935303932.roa
Signing time:             Tue 28 Jun 2022 04:40:22 +0000
ROA not before:           Tue 28 Jun 2022 04:35:22 +0000
ROA not after:            Tue 27 Jun 2023 04:40:22 +0000
asID:                     395092
IP address blocks:        185.197.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:41:a7:65:b9:44:33:f6:21:b2:64:b5:09:8e:8e:90:83:b5:cb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:22 2022 GMT
            Not After : Jun 27 04:40:22 2023 GMT
        Subject: CN=7907CE2DCE2D198A51A3AE454C666867230DA2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:25:d7:c4:c9:81:c3:13:48:be:b4:82:cf:
                    31:78:5d:8e:58:ea:85:98:c8:15:82:c4:b1:3e:1c:
                    9e:bb:aa:7a:73:27:01:2d:bf:ea:0d:71:47:f3:c3:
                    dd:bd:9b:17:ef:ba:d5:af:00:b2:b7:a9:78:23:52:
                    0f:92:91:b8:28:61:87:e4:c5:65:6c:06:17:e0:01:
                    63:b5:d4:89:92:bb:b1:ad:d7:1e:a0:96:84:52:28:
                    24:91:6c:8b:35:84:cc:2c:d8:9b:c9:80:f3:11:79:
                    31:79:b7:be:86:ad:d3:67:90:1b:0f:73:5d:d6:60:
                    71:a5:75:08:6e:98:d0:55:14:1e:ff:ca:db:79:97:
                    f5:b0:99:ae:83:98:09:a1:17:54:4f:98:8d:27:71:
                    3e:a2:f5:2e:77:05:6e:0a:92:7c:a5:b9:f8:2f:da:
                    1b:18:fc:4d:f5:f3:c2:68:ab:ec:0b:86:7d:d2:92:
                    95:cc:75:f0:ca:2a:50:e6:9a:31:a5:71:d6:08:47:
                    65:dc:42:1a:36:c2:8c:55:f3:18:30:33:9d:3f:9d:
                    28:c5:d3:2f:7f:33:88:ff:c8:d8:84:39:47:4c:ff:
                    30:6a:23:01:e0:24:41:a7:8f:d7:55:5e:8c:ea:b7:
                    20:3d:b4:ff:3d:72:69:23:01:e6:b4:a3:71:76:ec:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:CE:2D:CE:2D:19:8A:51:A3:AE:45:4C:66:68:67:23:0D:A2:B3
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32342d3234203d3e20333935303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:16:75:89:ab:b8:9d:a9:6a:fb:fa:79:7e:dd:ca:92:fa:3a:
         a6:d7:42:5b:25:26:84:c4:fb:be:0d:28:87:d5:b4:fb:ca:9b:
         08:da:a9:5f:84:3a:5a:6b:2e:11:c4:c5:04:7a:6d:55:e3:fb:
         93:c2:e5:38:31:f2:d5:6c:f0:2e:f4:a8:aa:a8:43:6a:a2:a2:
         08:78:3f:49:cb:86:30:39:86:33:ef:7b:89:de:8f:2c:8f:02:
         8a:81:16:bf:2b:8e:15:64:88:50:69:66:f2:2a:57:ee:7f:04:
         93:e8:77:fa:da:19:38:c4:18:9e:d4:84:86:6f:b4:78:63:3e:
         db:6e:8c:17:2f:a3:0d:07:c5:37:9f:32:e0:f2:5c:d0:5b:76:
         f9:01:71:54:3d:5a:fd:a6:bc:2f:aa:15:d0:9e:59:4f:98:62:
         05:4d:92:d9:ce:c5:5e:8a:60:3e:c2:5a:1e:d7:81:6b:f7:e3:
         2b:e9:69:b2:38:66:47:4c:a0:27:f5:66:4b:5a:33:76:01:f7:
         07:9f:00:20:18:cc:b4:b7:19:b6:5b:3f:f7:c0:a0:76:c9:fa:
         9d:22:67:d2:5e:b2:4d:2d:89:e9:b8:c5:9a:d5:56:5d:26:1b:
         42:31:3b:76:a2:f5:e4:02:18:d5:d3:f8:c8:bd:f2:76:f4:43:
         22:f5:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org