Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32342d3234203d3e20323132323139.roa
File:                     3139322e3134352e38322e302f32342d3234203d3e20323132323139.roa (raw, json)
Hash identifier:          vwA2ofRE46f0FdiPK5AarxJaBHkqyrS9MYnXZSXZJ04=
Subject key identifier:   19:64:51:75:03:DB:EE:BC:A4:0E:D6:04:46:48:44:09:4B:C6:7D:7F
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       37F02DE64B7CCDF1647FA2E050A1E249E42463BC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32342d3234203d3e20323132323139.roa
Signing time:             Sat 22 Oct 2022 04:33:11 +0000
ROA not before:           Sat 22 Oct 2022 04:28:11 +0000
ROA not after:            Sat 21 Oct 2023 04:33:11 +0000
asID:                     212219
IP address blocks:        192.145.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f0:2d:e6:4b:7c:cd:f1:64:7f:a2:e0:50:a1:e2:49:e4:24:63:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:11 2022 GMT
            Not After : Oct 21 04:33:11 2023 GMT
        Subject: CN=1964517503DBEEBCA40ED604464844094BC67D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:14:d5:ad:ab:b2:cb:09:3b:60:b7:1c:ff:
                    a1:f2:13:01:f5:65:db:6d:b5:cf:a7:84:55:41:7f:
                    29:ef:a8:61:2a:f9:3c:e0:53:b8:a0:f3:7f:d4:ec:
                    99:27:05:6f:5d:a4:13:1e:98:72:72:0a:cf:e8:5e:
                    55:e6:09:0b:01:b5:45:04:db:2d:a2:a6:d4:af:af:
                    53:78:5e:77:41:18:5f:aa:df:63:86:d1:74:34:80:
                    c3:4d:56:22:07:a9:dc:e4:81:87:cb:ae:25:25:d1:
                    3d:0e:5c:04:62:c8:79:ea:ff:9b:c4:51:cc:f2:37:
                    e5:be:02:c3:47:f3:ce:a7:8f:9d:41:47:be:64:be:
                    30:87:80:d4:fa:9c:93:14:b5:3d:7a:ec:da:63:0d:
                    70:2f:05:7e:85:7b:e6:40:78:1c:cc:12:2d:54:e0:
                    ef:84:8a:61:46:cd:b3:f7:9a:e7:ba:ee:ee:b9:15:
                    6e:ed:7b:13:ca:03:9a:39:cb:fc:86:49:90:35:34:
                    a4:13:28:ab:54:f7:af:b3:e5:38:97:4a:71:27:97:
                    76:e2:fb:36:a6:4c:8a:6d:d6:1c:ff:57:d6:db:aa:
                    08:d0:c4:3c:82:3f:13:bc:6b:9c:28:61:f4:26:63:
                    03:d1:33:05:91:b0:64:1c:92:02:fe:23:f4:1a:3d:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:51:75:03:DB:EE:BC:A4:0E:D6:04:46:48:44:09:4B:C6:7D:7F
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32342d3234203d3e20323132323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:16:db:b7:90:d6:f0:14:73:54:66:b9:ac:d8:d1:6e:3a:41:
         59:00:13:05:06:43:22:03:e4:55:b6:75:ef:67:a6:43:83:6d:
         ac:a5:e7:00:45:99:ec:47:73:70:25:a2:e6:62:27:e5:cb:02:
         72:44:e3:3d:5c:74:1f:d2:87:f8:84:07:e3:cb:4d:5c:8b:ec:
         40:32:aa:2a:77:d8:d7:81:5f:90:98:76:4e:b2:91:f4:53:29:
         92:54:18:d6:02:46:ae:22:d7:2a:4f:d6:7f:4b:e4:3a:b2:af:
         8a:b0:8e:73:95:60:e8:41:79:a8:1e:d9:48:c2:9d:ee:9e:ff:
         a3:64:20:1c:9a:f1:1a:c8:f4:d1:08:27:6f:f0:62:78:ce:32:
         f6:b5:27:51:e9:04:87:08:9f:66:7b:90:bd:4e:9e:ee:95:26:
         11:dd:8f:27:da:19:8d:c7:63:48:58:c6:ac:95:80:26:cf:56:
         31:a1:1f:f9:93:b6:11:0a:16:bb:c8:17:19:a6:61:4e:6e:c9:
         e5:bb:f5:80:f6:36:a4:1c:25:7a:66:7e:47:1c:df:57:ad:df:
         19:b8:59:49:bd:68:70:23:d1:ca:07:07:eb:0c:5a:46:40:7d:
         09:c5:05:20:36:a7:8f:29:e1:db:a7:59:2b:94:71:b1:88:66:
         66:26:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org