Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3234203d3e20333936303733.roa
File:                     3138352e3235302e33382e302f32342d3234203d3e20333936303733.roa (raw, json)
Hash identifier:          RE4l9lTvPlA6YOl738pEcrXx+rAui+aNPyA9btpWAZk=
Subject key identifier:   ED:EB:A6:5F:B1:87:AC:89:62:A3:F9:BE:09:E0:8F:32:A1:AA:76:B7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5F1E4CD8984AD044CD73FEDB24C61B87DB227F5C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3234203d3e20333936303733.roa
Signing time:             Tue 28 Jun 2022 04:40:29 +0000
ROA not before:           Tue 28 Jun 2022 04:35:29 +0000
ROA not after:            Tue 27 Jun 2023 04:40:29 +0000
asID:                     396073
IP address blocks:        185.250.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1e:4c:d8:98:4a:d0:44:cd:73:fe:db:24:c6:1b:87:db:22:7f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:29 2022 GMT
            Not After : Jun 27 04:40:29 2023 GMT
        Subject: CN=EDEBA65FB187AC8962A3F9BE09E08F32A1AA76B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:b2:b0:e4:f3:1d:cf:50:b5:65:80:8a:b1:
                    ac:cb:62:eb:70:87:e1:57:41:e0:40:74:0c:7f:93:
                    e6:d5:c2:6c:0e:b6:bc:14:88:48:41:a0:6c:d0:eb:
                    72:ab:51:9a:a3:02:0b:38:95:1b:21:06:7c:3c:b2:
                    47:60:fa:ca:e1:8d:8f:f2:34:f8:0b:d5:aa:84:68:
                    6c:a6:d2:50:f6:2d:cc:bf:71:4e:90:7f:ed:16:df:
                    ad:0d:bd:02:35:71:d8:cf:37:13:0d:6d:ef:8b:40:
                    73:7c:77:73:0b:e1:92:79:37:84:a2:8d:8b:60:87:
                    fb:53:fb:5a:19:40:e1:09:fe:0e:66:0c:bf:79:d3:
                    9d:06:82:9c:db:0b:1d:34:e2:e4:cc:f7:83:d2:da:
                    37:13:9b:49:74:c9:44:64:a4:a9:5f:c8:33:12:f9:
                    28:6b:a3:68:50:e2:49:77:96:2e:42:bf:bf:7e:b7:
                    67:6a:03:de:ac:ca:28:46:be:45:e5:55:17:d1:a0:
                    f7:09:e2:d5:d8:db:e7:dc:e4:5e:63:b1:b3:ef:f7:
                    e2:6e:c3:cd:08:6d:e3:b2:b6:1a:37:0d:ca:18:0b:
                    7e:9a:50:63:25:85:d4:e2:3a:6b:82:1a:eb:78:b2:
                    c4:0f:d8:de:a5:a8:24:23:2e:09:aa:7b:b1:a6:8f:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:A6:5F:B1:87:AC:89:62:A3:F9:BE:09:E0:8F:32:A1:AA:76:B7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3234203d3e20333936303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:19:95:ae:a1:f4:8a:27:22:89:dd:49:30:da:49:61:7c:f8:
         fe:d7:6a:77:ce:99:f8:e0:7b:ec:af:6a:75:3e:a0:80:62:7a:
         c4:41:32:d1:64:d6:4f:b5:2d:f5:10:9b:90:f5:bf:51:84:d0:
         61:ff:64:2d:00:16:6b:ce:72:e9:05:9a:ca:c0:20:e1:ba:92:
         28:53:98:87:1e:15:b7:16:ca:43:ba:66:5d:53:85:62:b0:c7:
         4d:65:54:0d:37:d9:e9:1e:a0:d2:bc:85:80:88:3b:6f:2c:14:
         de:af:0f:91:51:c9:07:79:55:97:6b:00:3a:e0:2c:54:33:98:
         27:14:78:12:bb:58:79:06:3e:d4:98:a3:52:d0:d3:b2:4c:f4:
         de:13:c9:49:42:e5:ee:85:1a:b6:c2:26:99:27:94:57:8a:07:
         33:46:da:ab:3b:ff:4b:17:a8:45:92:d3:20:ac:bd:ee:76:77:
         25:78:6d:db:6b:9d:2a:df:a0:bc:36:39:80:82:e2:11:07:4c:
         e4:7b:29:0e:b2:2a:bd:d9:ca:48:b6:b0:fd:20:58:0b:a1:a2:
         a2:c9:24:03:8e:18:d7:59:4f:b5:9e:d4:ec:5e:68:10:38:41:
         fe:45:22:a1:90:9b:39:cf:57:4e:1a:c4:14:d8:fd:57:0c:75:
         a6:79:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org