Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32342d3234203d3e203233343730.roa
File:                     3139322e3134352e38322e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          cep8YC+NqwI2uiO4ZDVPgGnV/d9xutBJjAd9PqgqtxE=
Subject key identifier:   8F:1E:2A:46:17:7D:CA:B1:C1:B4:79:AD:C4:5A:C3:11:98:6B:C2:13
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       01170C095ECFA96120AFE24473E49B68349E2C2E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32342d3234203d3e203233343730.roa
Signing time:             Sat 22 Oct 2022 04:33:20 +0000
ROA not before:           Sat 22 Oct 2022 04:28:20 +0000
ROA not after:            Sat 21 Oct 2023 04:33:20 +0000
asID:                     23470
IP address blocks:        192.145.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:17:0c:09:5e:cf:a9:61:20:af:e2:44:73:e4:9b:68:34:9e:2c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:20 2022 GMT
            Not After : Oct 21 04:33:20 2023 GMT
        Subject: CN=8F1E2A46177DCAB1C1B479ADC45AC311986BC213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:37:78:89:36:59:c9:78:a4:e0:74:ca:51:
                    c8:d9:db:ed:74:91:03:6c:3b:bd:4c:2b:1d:3e:26:
                    ca:15:98:4a:91:09:0e:11:21:0e:73:9e:d1:99:97:
                    81:f4:c4:61:65:93:7e:35:45:13:55:40:59:19:8c:
                    4a:52:31:f9:38:7a:7b:2b:2f:71:4a:69:82:1d:e2:
                    50:a5:9f:07:0e:65:3a:f2:7b:61:1b:8c:64:c1:fb:
                    c7:33:e6:9c:4b:2d:aa:e6:4d:d8:e6:e5:99:dc:41:
                    84:45:fd:36:0e:b9:59:f7:43:f0:8c:40:36:a5:42:
                    ff:84:e4:65:a5:f5:14:8c:88:a1:77:3b:db:04:80:
                    62:e5:0c:a7:79:94:03:ae:94:dd:02:e1:6b:a7:cd:
                    4f:ba:60:8e:c5:a9:ad:7e:b3:fd:41:62:33:6f:b8:
                    05:62:9e:ff:be:54:b6:52:27:26:d4:e7:22:be:f0:
                    f4:3f:0e:b6:ea:9a:4f:9c:89:35:79:97:21:53:51:
                    89:7c:02:4b:3a:f7:c5:99:6e:3c:46:be:02:7c:3e:
                    99:81:cf:57:5b:a0:d6:00:5f:91:a4:71:6f:93:93:
                    3a:5c:a3:26:a4:6a:e4:cd:d5:af:71:57:a8:74:4c:
                    2b:0e:56:2b:22:e2:22:b6:0d:c2:0d:3c:79:39:cd:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:2A:46:17:7D:CA:B1:C1:B4:79:AD:C4:5A:C3:11:98:6B:C2:13
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:36:e4:ad:fe:77:3e:c2:8d:cc:d1:b9:c3:1e:54:6e:d1:5b:
         74:be:85:34:98:b2:7a:85:5c:39:80:0c:73:56:2e:d4:b6:cf:
         11:36:24:d1:09:cc:ac:25:11:1e:b0:ec:1f:59:0c:1a:c7:49:
         70:fd:2f:d1:42:d6:b4:4e:41:6a:cf:77:ed:c6:30:39:53:6e:
         76:72:ad:c5:d0:8d:df:14:13:1b:c4:ba:51:5c:4d:8f:ce:ce:
         a5:f7:ce:fc:25:a3:e9:b7:17:a8:91:24:49:c8:39:8b:f1:a3:
         46:ad:8b:2d:e6:eb:b2:5b:61:59:31:41:39:cf:dc:7a:56:cb:
         d9:96:be:8e:3c:e0:92:ea:f0:8c:5b:24:dc:c1:83:36:a2:e4:
         95:df:0d:ea:b3:19:3f:77:2d:49:ef:be:83:bc:95:65:84:6c:
         75:28:2a:72:3d:9f:38:33:92:80:2e:70:9e:18:0e:91:a6:32:
         41:14:2a:ca:10:6c:70:78:56:29:77:9d:9e:f2:fc:d6:f1:65:
         a8:3a:60:d4:5f:d3:77:b4:9d:d4:dd:fa:5b:31:12:0f:a2:a8:
         b1:48:4b:c4:ab:09:e9:7a:64:51:d9:41:d1:1b:cf:e6:5c:a9:
         c6:d6:b5:72:72:fd:bc:49:ad:da:d8:c7:b9:d5:78:71:3d:1f:
         12:a9:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org