Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e20333936393832.roa
File:                     34352e38352e3235302e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          JphulYpaQTeXZf4pkQ+6UGzvMHApUFX3o987aKzKJrs=
Subject key identifier:   82:02:30:2C:E7:99:20:D4:40:C7:3B:D1:97:B9:D2:BF:BC:39:96:9B
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       3EA50ED2E45ED61241A51AC8CB4C70E8220F22BE
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e20333936393832.roa
Signing time:             Tue 28 Jun 2022 04:41:21 +0000
ROA not before:           Tue 28 Jun 2022 04:36:21 +0000
ROA not after:            Tue 27 Jun 2023 04:41:21 +0000
asID:                     396982
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:0e:d2:e4:5e:d6:12:41:a5:1a:c8:cb:4c:70:e8:22:0f:22:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Jun 28 04:36:21 2022 GMT
            Not After : Jun 27 04:41:21 2023 GMT
        Subject: CN=8202302CE79920D440C73BD197B9D2BFBC39969B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:fc:84:05:11:55:7c:c2:84:d9:a6:d7:73:
                    47:13:a5:03:cc:d3:fd:e5:24:99:a6:ab:34:63:f3:
                    e5:aa:33:98:2a:a2:17:96:31:50:67:c2:32:83:85:
                    92:9f:e4:6c:44:38:1b:2a:05:12:c4:90:3a:30:56:
                    a0:42:73:91:b3:1d:fe:db:39:45:f7:b7:da:0b:29:
                    13:11:e7:70:f0:fa:4c:a3:45:c5:c8:be:89:47:ee:
                    e3:f5:be:fd:b1:b8:60:42:44:f4:50:8f:27:8e:b3:
                    a2:fe:1f:d3:2f:f8:05:04:b4:b7:af:fb:92:44:d5:
                    87:e7:8b:bc:f2:fd:8a:4d:d6:64:ce:e2:be:01:c9:
                    c0:6f:b9:c2:20:3c:bf:10:80:7f:a6:14:3a:38:cd:
                    2b:b9:e1:0f:2c:16:7a:6c:20:b4:5b:ee:96:fd:8e:
                    ff:37:03:d9:28:22:18:70:7f:76:94:08:5e:5b:a5:
                    ed:1b:c9:a1:ee:69:89:1b:88:5f:52:71:be:cb:3e:
                    0c:6a:d6:40:4c:24:41:86:c4:87:c2:2d:63:88:0a:
                    1f:d0:b4:cd:e9:6a:aa:42:1a:dc:53:d2:74:e7:09:
                    61:df:b0:9c:2f:d4:4c:7f:01:2d:f4:0a:d7:d1:9c:
                    7e:44:38:08:a3:cd:65:7b:10:a5:21:16:8a:ba:70:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:30:2C:E7:99:20:D4:40:C7:3B:D1:97:B9:D2:BF:BC:39:96:9B
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:8b:c0:e6:34:dd:d8:35:76:9d:d9:5b:68:74:b0:7d:ae:13:
         1b:50:1c:cf:61:ae:9f:42:cf:82:0a:6e:e3:3d:72:d0:79:d7:
         8f:bb:6e:4f:72:f6:57:34:07:d3:d5:c4:69:88:a9:6d:8e:0b:
         db:db:59:96:72:ea:91:e2:97:9c:d3:cb:68:e3:e9:26:1e:5b:
         03:48:e0:63:61:e0:79:e1:56:c5:ce:b5:5f:f2:88:ed:65:44:
         4e:34:f8:09:5c:ba:bf:71:e3:3c:11:05:25:df:f4:78:eb:87:
         8b:c9:b0:39:8e:19:4d:8f:b3:55:c0:d1:03:e3:ba:d3:47:81:
         68:59:6c:61:f4:ba:ff:0e:07:60:1a:24:6e:8f:d9:fc:fe:5a:
         53:14:d1:12:08:88:9c:d1:aa:ef:f4:b3:86:55:5a:66:3b:f8:
         76:38:35:9a:21:c9:da:ae:01:49:3c:7e:bb:e4:d6:a9:cf:ad:
         7b:83:e5:63:0b:8a:e1:64:0f:ad:eb:72:25:15:39:56:ec:69:
         69:a0:81:d9:62:44:ad:81:2d:3a:59:21:2b:d2:e5:2e:8b:99:
         ee:c4:33:d2:e4:6a:b7:00:2e:c9:84:fd:f7:30:ce:8e:c1:76:
         28:b2:1c:02:7f:5d:1b:68:4c:7a:f5:d4:3d:d2:7c:2e:4d:38:
         eb:4e:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net