Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
File:                     34352e31312e38312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          OzuWiOVJrynXjAzS8Lby1x9O7ODAAsUIjVsMudF380Q=
Subject key identifier:   1C:14:73:77:EC:F4:5E:1E:D1:15:58:12:97:CB:58:B6:0D:B1:FB:A1
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       5FC513C911AA98455993CC835CA80A864B430837
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:41:46 +0000
ROA not before:           Wed 28 Dec 2022 09:36:46 +0000
ROA not after:            Wed 27 Dec 2023 09:41:46 +0000
asID:                     136787
IP address blocks:        45.11.81.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c5:13:c9:11:aa:98:45:59:93:cc:83:5c:a8:0a:86:4b:43:08:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Dec 28 09:36:46 2022 GMT
            Not After : Dec 27 09:41:46 2023 GMT
        Subject: CN=1C147377ECF45E1ED115581297CB58B60DB1FBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:17:83:39:ee:3b:17:8b:27:90:d5:cc:ae:
                    57:f8:0d:25:81:ce:7a:d0:a1:2c:c7:00:d8:1b:99:
                    ad:ac:c5:d7:da:45:b4:84:df:e1:84:0d:b1:5d:83:
                    ae:63:ad:ee:c1:39:0f:c2:d8:6a:9d:76:54:2c:85:
                    56:2f:f5:e9:a6:8f:2c:6d:90:bb:d0:63:aa:87:2f:
                    2b:86:b7:45:67:7e:64:88:62:4d:38:51:c5:d3:5f:
                    ac:95:ae:2c:76:55:ca:de:82:cc:79:37:c6:22:28:
                    4f:c2:45:ea:3c:f0:fc:82:2b:b6:d8:b1:01:99:09:
                    ff:c1:32:77:96:a8:a6:2b:9d:e1:9c:f3:26:06:31:
                    6a:21:91:a6:ac:78:c1:c6:7a:21:56:ca:3a:f4:10:
                    64:40:f6:ac:df:66:f1:e0:41:fd:66:39:4a:0d:90:
                    3b:44:7d:cc:0f:23:07:85:46:05:3d:5e:9d:ad:8e:
                    9d:41:bb:14:b7:4b:6c:33:71:f4:98:bc:3d:04:d1:
                    d2:8a:17:ea:66:db:01:eb:28:85:bd:76:95:aa:17:
                    a2:0c:0d:71:c3:fd:82:c8:19:64:2b:7a:84:2d:7e:
                    e0:6c:19:ce:2a:df:b3:43:04:df:11:aa:69:47:9e:
                    4f:30:16:4f:41:8f:4e:5c:fb:80:8a:51:66:d2:07:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:14:73:77:EC:F4:5E:1E:D1:15:58:12:97:CB:58:B6:0D:B1:FB:A1
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31312e38312e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:3a:74:70:1c:f6:cc:f3:37:1f:1f:15:ad:31:94:1e:80:73:
         12:72:82:de:50:54:12:4c:7d:37:56:08:cf:6e:d9:4d:83:7a:
         16:62:1d:09:56:94:3e:19:6c:38:b6:11:b7:0a:72:5a:4f:0d:
         1f:5a:06:5d:b0:bc:77:cb:69:ba:3f:e8:2d:3a:91:2c:65:29:
         f6:b1:0a:1d:0e:3e:fe:39:66:20:ee:ed:b0:48:c9:4b:a7:30:
         cd:34:a4:ce:69:0f:6f:e1:4e:1e:7d:06:58:0f:7c:57:09:3c:
         43:6a:8a:0d:e3:24:b5:5b:3b:58:46:b2:0a:0a:37:b3:1e:79:
         34:82:6a:a4:63:f6:1e:2c:9e:41:0b:dd:75:dc:ba:71:e1:35:
         3f:f8:d3:13:82:1b:5e:cb:c5:9d:06:91:26:f9:02:ab:a7:bd:
         fe:7a:12:86:a0:23:11:cf:28:d5:fa:be:d4:e4:77:4d:17:cf:
         84:6c:49:b3:68:d8:ba:82:63:34:37:96:80:bd:2d:3a:ee:a4:
         c1:fa:1b:75:98:0a:d9:b6:84:7b:dc:d2:c2:78:90:d2:19:61:
         0f:c1:9d:ca:4a:00:7c:a0:53:d9:7d:f3:6c:a6:0a:79:8e:eb:
         58:ef:c8:18:c9:6b:ce:fa:2b:c8:48:90:70:4d:f4:9d:6f:6a:
         c0:de:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net