Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e3133382e3230342e302f32322d3234203d3e20323033303631.roa
File:                     34352e3133382e3230342e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          9Qw9CtbMnE+VJbkZNQRS3n6Uu+8ROPe/QqGh+Y9eGMU=
Subject key identifier:   E8:5A:3B:73:8F:2E:C3:60:BC:F7:5A:16:F5:34:1A:AD:12:AB:D8:2C
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       3CD4888D59009A4095ED7D0DAE82387882F3DC08
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e3133382e3230342e302f32322d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:39 +0000
ROA not before:           Sat 22 Oct 2022 04:28:39 +0000
ROA not after:            Sat 21 Oct 2023 04:33:39 +0000
asID:                     203061
IP address blocks:        45.138.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d4:88:8d:59:00:9a:40:95:ed:7d:0d:ae:82:38:78:82:f3:dc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:39 2022 GMT
            Not After : Oct 21 04:33:39 2023 GMT
        Subject: CN=E85A3B738F2EC360BCF75A16F5341AAD12ABD82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:b3:23:3f:9b:73:b7:9e:6e:9e:ca:3c:b0:
                    1a:11:54:2b:92:09:c2:ed:00:74:a3:03:db:6d:25:
                    44:5d:cb:82:9f:9a:80:01:51:b1:75:57:aa:50:e0:
                    f7:bd:c3:dd:75:ff:ce:d2:2e:79:2e:d3:57:b1:d7:
                    9e:1d:98:6d:11:04:3d:54:67:49:58:b8:2c:ad:25:
                    a3:97:29:6c:87:f5:35:13:e2:5c:aa:eb:b0:62:5f:
                    9c:a9:ad:b8:a6:66:8d:3a:4f:e2:e1:44:de:52:42:
                    af:57:cb:36:78:8c:01:71:01:f0:45:62:06:e7:20:
                    dc:1b:19:03:1c:50:eb:b1:73:89:44:38:60:34:53:
                    70:80:bb:a1:c7:35:28:9b:58:5f:1a:75:c7:a6:07:
                    a4:a5:45:a9:32:7d:aa:42:6b:2d:18:f6:27:aa:99:
                    2b:cd:8b:c9:cf:e1:5e:3e:4f:65:4c:38:66:6b:1d:
                    12:60:a1:e0:81:ee:0d:0d:db:54:72:ec:fe:ba:46:
                    8d:ea:23:a1:38:73:cc:f5:00:f9:cf:e1:fe:9e:93:
                    72:4e:60:ae:b6:d2:11:ae:d3:ac:81:39:46:d8:7f:
                    01:21:40:2c:f3:bd:69:36:d9:bc:92:ca:53:c5:04:
                    be:da:fb:54:1e:43:4c:85:22:ea:e9:a8:6d:43:85:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5A:3B:73:8F:2E:C3:60:BC:F7:5A:16:F5:34:1A:AD:12:AB:D8:2C
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e3133382e3230342e302f32322d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:67:39:3c:bf:e6:9a:23:99:1a:a4:82:61:22:d3:d4:0d:d1:
         cf:4d:69:68:a7:a7:ee:8d:ca:18:e3:04:27:fe:d8:35:59:13:
         23:11:4a:32:d6:a5:0c:2d:ab:50:85:77:16:11:35:b7:f1:a6:
         8f:1c:19:31:df:e0:d7:9e:a5:68:4b:7d:a5:84:df:9e:b7:d1:
         95:40:c7:b1:39:97:c3:f7:66:4c:52:5f:3e:63:ac:49:1c:06:
         38:16:c6:d6:27:ef:7a:05:6a:54:d7:83:22:36:77:96:47:85:
         a4:68:27:be:29:16:c1:9b:16:60:0f:d4:f7:5d:a6:1b:02:8c:
         ba:88:53:bb:d1:2f:0d:af:97:3d:6c:e8:b0:6e:a2:ff:02:28:
         2b:4c:a2:1b:5c:ab:bf:77:84:7f:af:ca:e1:47:35:5a:1d:4d:
         fe:f1:47:fd:d4:ae:f6:a4:e4:43:86:23:60:4b:6c:bb:67:91:
         b9:dc:9a:4d:c4:4b:ad:fb:80:d5:17:59:95:ea:83:1a:94:e3:
         90:d2:a2:cf:07:dd:13:4a:c6:a2:c4:48:a9:69:05:62:59:ae:
         ac:64:e5:ff:ab:f0:1d:07:2e:ab:95:de:40:12:3e:6f:52:1f:
         f1:88:62:d4:ad:c9:e6:c4:ee:42:da:c8:3b:1f:2b:e5:22:89:
         92:3c:5b:f9
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUPNSIjVkAmkCV7X0NroI4eILz3AgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkxMzFhNGUzY2MwODUxYzJlZDEzNjNkNjk4MmU3NDM2
ZDNkZjlmOTAeFw0yMjEwMjIwNDI4MzlaFw0yMzEwMjEwNDMzMzlaMDMxMTAvBgNV
BAMTKEU4NUEzQjczOEYyRUMzNjBCQ0Y3NUExNkY1MzQxQUFEMTJBQkQ4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7bMjP5tzt55unso8sBoRVCuS
CcLtAHSjA9ttJURdy4KfmoABUbF1V6pQ4Pe9w911/87SLnku01ex154dmG0RBD1U
Z0lYuCytJaOXKWyH9TUT4lyq67BiX5yprbimZo06T+LhRN5SQq9XyzZ4jAFxAfBF
YgbnINwbGQMcUOuxc4lEOGA0U3CAu6HHNSibWF8adcemB6SlRakyfapCay0Y9ieq
mSvNi8nP4V4+T2VMOGZrHRJgoeCB7g0N21Ry7P66Ro3qI6E4c8z1APnP4f6ek3JO
YK620hGu06yBOUbYfwEhQCzzvWk22bySylPFBL7a+1QeQ0yFIurpqG1DhT/9AgMB
AAGjggH4MIIB9DAdBgNVHQ4EFgQU6Fo7c48uw2C891oW9TQarRKr2CwwHwYDVR0j
BBgwFoAUeRMaTjzAhRwu0TY9aYLnQ209+fkwDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzEwOC83OTEzMUE0RTNDQzA4NTFDMkVEMTM2M0Q2OTgyRTc0
MzZEM0RGOUY5LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZVJNYVRqekFoUnd1
MFRZOWFZTG5RMjA5LWZrLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcw
C4ZwcnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5z
aXQvMTA4LzM0MzUyZTMxMzMzODJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2Qz
ZTIwMzIzMDMzMzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYrMMA0GCSqGSIb3DQEBCwUAA4IB
AQBpZzk8v+aaI5kapIJhItPUDdHPTWlop6fujcoY4wQn/tg1WRMjEUoy1qUMLatQ
hXcWETW38aaPHBkx3+DXnqVoS32lhN+et9GVQMexOZfD92ZMUl8+Y6xJHAY4FsbW
J+96BWpU14MiNneWR4WkaCe+KRbBmxZgD9T3XaYbAoy6iFO70S8Nr5c9bOiwbqL/
AigrTKIbXKu/d4R/r8rhRzVaHU3+8Uf91K72pORDhiNgS2y7Z5G53JpNxEut+4DV
F1mV6oMalOOQ0qLPB90TSsaixEipaQViWa6sZOX/q/AdBy6rld5AEj5vUh/xiGLU
rcnmxO5C2sg7HyvlIomSPFv5
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net