Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203330383233.roa
File:                     3138352e3234312e3135302e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier:          xs4abSaGmB+oC85nwoipGbcyxir2aPsdyJWs4aKDVh4=
Subject key identifier:   1F:9F:2C:10:DF:95:C2:3B:2A:4F:21:78:1B:84:1A:20:6E:89:3F:C6
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       78D701E0503E47A87AD1A6A6B6286B4BA1E384B3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203330383233.roa
Signing time:             Sat 22 Oct 2022 04:33:14 +0000
ROA not before:           Sat 22 Oct 2022 04:28:14 +0000
ROA not after:            Sat 21 Oct 2023 04:33:14 +0000
asID:                     30823
IP address blocks:        185.241.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d7:01:e0:50:3e:47:a8:7a:d1:a6:a6:b6:28:6b:4b:a1:e3:84:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:14 2022 GMT
            Not After : Oct 21 04:33:14 2023 GMT
        Subject: CN=1F9F2C10DF95C23B2A4F21781B841A206E893FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:50:5a:01:c0:ee:3e:07:1c:a8:f2:18:cf:
                    88:3e:9a:25:27:0a:27:80:d1:cf:1e:8e:47:83:a9:
                    07:c6:25:4b:e1:df:25:c2:4f:64:37:f9:a2:0c:34:
                    05:4c:de:88:11:8f:0b:fd:63:fc:cf:45:ff:79:91:
                    65:19:f0:d8:c5:5e:f0:4d:51:82:d8:bd:ad:af:f3:
                    d3:5e:43:61:1a:ac:ff:dc:ad:0d:38:35:22:5c:12:
                    96:61:20:a7:4e:ca:08:ab:be:6a:5a:4c:ae:7e:d4:
                    3d:34:9e:ff:32:2c:64:03:f9:51:26:05:2b:ae:be:
                    68:ee:c8:97:2e:89:50:6e:2d:01:10:05:28:f3:4e:
                    12:66:09:5a:d5:96:5f:0d:26:20:57:ea:d3:82:3d:
                    c5:cb:73:30:a1:6d:c2:d2:11:94:23:84:30:cd:1b:
                    bb:41:6a:62:4f:bd:43:f0:3c:1f:38:1b:4a:36:b1:
                    2c:36:44:2a:23:a7:45:54:0d:3b:8c:a6:e4:2a:9d:
                    91:50:6b:c4:7d:56:ac:f0:e5:1e:33:d4:8f:9b:fb:
                    eb:42:e5:3a:ac:cc:27:f8:c3:51:b6:fd:17:33:10:
                    c5:51:1b:6e:f8:b9:40:b3:dc:0c:2c:e2:30:fd:1f:
                    01:14:e6:d7:48:53:db:cc:25:0e:34:1a:57:3e:4f:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9F:2C:10:DF:95:C2:3B:2A:4F:21:78:1B:84:1A:20:6E:89:3F:C6
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203330383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:f7:6e:c3:a1:f3:1c:3d:12:43:4d:e0:c6:63:94:9a:39:
         5d:00:e6:12:b0:8b:ce:93:03:8d:b7:85:28:85:02:65:a4:17:
         3e:25:72:f2:b8:d4:1b:4b:0f:d7:4c:a0:e5:eb:f8:db:90:bb:
         6d:a7:d4:18:1c:cd:ee:14:09:3f:a5:0a:df:11:6b:dd:75:66:
         79:6f:89:42:c6:a9:2c:65:6d:97:16:3a:65:c7:77:61:4f:05:
         e9:ea:12:19:d8:a0:11:d0:6f:e1:21:3b:08:c9:d8:82:ff:7b:
         0e:3a:7c:eb:d6:b4:46:f7:2e:6f:37:fc:c7:40:c1:a4:0f:3a:
         53:eb:fd:16:59:a3:fe:c2:4d:8f:d9:9f:b1:95:c8:73:d7:c8:
         07:ea:50:62:4f:f0:b7:b0:e0:85:4b:6b:aa:f5:5c:5d:d3:a2:
         b0:83:3c:1d:d8:f6:e1:43:aa:25:c7:e9:d8:7b:d1:f4:91:50:
         7d:d7:34:1f:63:2e:af:de:15:63:ac:7d:f9:ce:49:e4:fb:68:
         fa:55:6d:e3:20:f7:5a:c6:60:27:1f:e9:82:a1:d8:eb:81:7c:
         4e:26:fc:7e:a2:71:ae:7c:96:3a:a3:0d:7c:24:71:13:22:19:
         92:d1:64:2f:27:c1:bd:9d:aa:f1:d4:5c:8f:ed:bf:68:84:87:
         81:c6:d5:49
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUeNcB4FA+R6h60aamtihrS6HjhLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTRaFw0yMzEwMjEwNDMzMTRaMDMxMTAvBgNV
BAMTKDFGOUYyQzEwREY5NUMyM0IyQTRGMjE3ODFCODQxQTIwNkU4OTNGQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaFBaAcDuPgccqPIYz4g+miUn
CieA0c8ejkeDqQfGJUvh3yXCT2Q3+aIMNAVM3ogRjwv9Y/zPRf95kWUZ8NjFXvBN
UYLYva2v89NeQ2EarP/crQ04NSJcEpZhIKdOygirvmpaTK5+1D00nv8yLGQD+VEm
BSuuvmjuyJcuiVBuLQEQBSjzThJmCVrVll8NJiBX6tOCPcXLczChbcLSEZQjhDDN
G7tBamJPvUPwPB84G0o2sSw2RCojp0VUDTuMpuQqnZFQa8R9Vqzw5R4z1I+b++tC
5TqszCf4w1G2/RczEMVRG274uUCz3Aws4jD9HwEU5tdIU9vMJQ40Glc+T2cxAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUH58sEN+VwjsqTyF4G4QaIG6JP8YwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzQzMTJlMzEzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzMzMDM4MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnxljANBgkqhkiG9w0BAQsFAAOCAQEAkK33
bsOh8xw9EkNN4MZjlJo5XQDmErCLzpMDjbeFKIUCZaQXPiVy8rjUG0sP10yg5ev4
25C7bafUGBzN7hQJP6UK3xFr3XVmeW+JQsapLGVtlxY6Zcd3YU8F6eoSGdigEdBv
4SE7CMnYgv97Djp869a0Rvcubzf8x0DBpA86U+v9Flmj/sJNj9mfsZXIc9fIB+pQ
Yk/wt7DghUtrqvVcXdOisIM8Hdj24UOqJcfp2HvR9JFQfdc0H2Mur94VY6x9+c5J
5Pto+lVt4yD3WsZgJx/pgqHY64F8Tib8fqJxrnyWOqMNfCRxEyIZktFkLyfBvZ2q
8dRcj+2/aISHgcbVSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org