Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132303737.roa
File:                     34352e3134312e32312e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          X1pRxHzDNsp7p/rLwvMnKcDtu8HMG4bx93FWvrUFk44=
Subject key identifier:   28:A3:05:37:A9:7B:FE:76:49:C8:8E:94:45:D1:37:A7:63:0E:E8:FE
Certificate issuer:       /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial:       3D8E25B1D8C02B3AFDDF9E37698AEDB06EE52C86
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:37 +0000
ROA not before:           Thu 31 Dec 2020 18:46:37 +0000
ROA not after:            Thu 30 Dec 2021 18:51:37 +0000
asID:                     212077
IP address blocks:        45.141.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8e:25:b1:d8:c0:2b:3a:fd:df:9e:37:69:8a:ed:b0:6e:e5:2c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
        Validity
            Not Before: Dec 31 18:46:37 2020 GMT
            Not After : Dec 30 18:51:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:cd:d1:eb:cc:b0:1f:08:3b:b9:94:f7:f1:
                    33:8a:9e:a1:31:1f:70:bf:fe:91:16:40:45:29:04:
                    b5:47:d7:88:04:9a:5f:52:3a:80:ae:63:29:ac:f5:
                    53:c1:9f:e4:f0:a6:cf:d3:50:6a:47:5e:10:d4:c0:
                    25:e1:b4:9f:e5:1d:0f:9e:2a:49:61:91:93:e1:61:
                    a3:88:e9:c1:17:94:dd:8b:6c:4b:4c:c3:1e:12:ef:
                    c9:1b:18:e4:dd:5e:36:1b:f6:3a:fe:a6:ab:40:ba:
                    b2:69:c6:d7:3b:1c:fb:89:29:b7:12:a5:89:25:22:
                    92:f7:a6:33:4a:db:9a:cb:88:03:c5:45:a9:2c:8d:
                    67:c0:1d:6a:88:b5:33:1b:0b:12:4d:16:ad:dc:99:
                    5e:95:66:f5:cc:26:b6:bc:52:9f:1b:2e:8d:67:a7:
                    1c:7f:39:6a:2b:1b:6d:f6:14:ba:86:0e:da:e3:de:
                    94:bd:c8:07:7e:06:dc:8e:91:87:ef:5e:aa:cd:c4:
                    e0:ab:14:37:4f:54:0b:fd:26:f7:6b:c0:5c:49:47:
                    37:5e:a6:f6:6b:23:2f:8b:37:2b:51:32:b5:53:a3:
                    fb:27:7d:53:c9:d1:aa:96:26:f2:34:8e:93:ba:d5:
                    de:3a:8b:d9:ef:5f:9e:dd:19:64:a0:06:a5:78:5c:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:05:37:A9:7B:FE:76:49:C8:8E:94:45:D1:37:A7:63:0E:E8:FE
            X509v3 Authority Key Identifier:
                keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:1d:83:9a:8c:5a:c9:2a:04:a2:d2:bf:fe:6e:a0:66:c6:5f:
         76:67:bf:a9:02:54:b0:97:ef:17:44:03:1a:f6:aa:b3:90:fd:
         71:51:b1:67:8f:6d:bd:c9:ea:82:62:7f:30:ec:87:f0:42:98:
         cf:e3:29:ee:67:44:7c:36:a9:c4:fd:b7:e9:9c:16:5e:73:0f:
         22:7d:75:c0:17:ef:4a:00:10:64:6c:ee:a5:54:1e:4e:2c:2f:
         59:08:26:8e:32:9b:f4:90:52:fc:2b:b4:95:f1:20:e0:ab:51:
         74:eb:74:53:f8:e7:71:b0:8f:d9:c4:a0:67:79:82:57:37:ca:
         8e:b5:a7:5f:5d:a3:84:20:dc:fc:5b:23:6c:23:98:26:7e:40:
         d9:4b:94:c7:a1:d5:dc:70:fe:9b:bd:b4:70:f9:5c:54:9d:d0:
         e0:cf:56:30:22:bd:29:36:5b:48:7e:0f:25:5f:a3:56:e4:3f:
         11:54:ca:2e:cf:46:57:a7:11:04:bb:bc:cb:a9:f2:00:82:a4:
         2d:16:59:bf:82:e1:a8:54:b9:c3:b9:ae:62:ce:38:12:22:1c:
         b5:5b:53:4a:f9:65:d8:fc:ab:05:84:54:45:8a:3e:b9:be:05:
         45:25:0a:c9:c8:fe:72:6f:af:87:0c:73:cc:1b:b3:9a:1a:3e:
         5d:7f:94:f8
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUPY4lsdjAKzr93543aYrtsG7lLIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRlZDQ2MDUzODVkNWVkYjBkZDVjM2VhMDQ5YzUyYTUx
NTliN2NmMjAeFw0yMDEyMzExODQ2MzdaFw0yMTEyMzAxODUxMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhCM0NERDFFQkNDQjAxRjA4
M0JCOTk0RjdGMTMzOEE5RUExMzExRjcwQkZGRTkxMTY0MDQ1MjkwNEI1NDdENzg4
MDQ5QTVGNTIzQTgwQUU2MzI5QUNGNTUzQzE5RkU0RjBBNkNGRDM1MDZBNDc1RTEw
RDRDMDI1RTFCNDlGRTUxRDBGOUUyQTQ5NjE5MTkzRTE2MUEzODhFOUMxMTc5NERE
OEI2QzRCNENDMzFFMTJFRkM5MUIxOEU0REQ1RTM2MUJGNjNBRkVBNkFCNDBCQUIy
NjlDNkQ3M0IxQ0ZCODkyOUI3MTJBNTg5MjUyMjkyRjdBNjMzNEFEQjlBQ0I4ODAz
QzU0NUE5MkM4RDY3QzAxRDZBODhCNTMzMUIwQjEyNEQxNkFEREM5OTVFOTU2NkY1
Q0MyNkI2QkM1MjlGMUIyRThENjdBNzFDN0YzOTZBMkIxQjZERjYxNEJBODYwRURB
RTNERTk0QkRDODA3N0UwNkRDOEU5MTg3RUY1RUFBQ0RDNEUwQUIxNDM3NEY1NDBC
RkQyNkY3NkJDMDVDNDk0NzM3NUVBNkY2NkIyMzJGOEIzNzJCNTEzMkI1NTNBM0ZC
Mjc3RDUzQzlEMUFBOTYyNkYyMzQ4RTkzQkFENURFM0E4QkQ5RUY1RjlFREQxOTY0
QTAwNkE1Nzg1Q0I1NUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyLPN0evMsB8IO7mU9/Ezip6hMR9wv/6RFkBFKQS1R9eIBJpfUjqA
rmMprPVTwZ/k8KbP01BqR14Q1MAl4bSf5R0PnipJYZGT4WGjiOnBF5Tdi2xLTMMe
Eu/JGxjk3V42G/Y6/qarQLqyacbXOxz7iSm3EqWJJSKS96YzStuay4gDxUWpLI1n
wB1qiLUzGwsSTRat3JlelWb1zCa2vFKfGy6NZ6ccfzlqKxtt9hS6hg7a496UvcgH
fgbcjpGH716qzcTgqxQ3T1QL/Sb3a8BcSUc3Xqb2ayMvizcrUTK1U6P7J31TydGq
libyNI6TutXeOovZ71+e3RlkoAaleFy1XQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FCijBTepe/52SciOlEXRN6djDuj+MB8GA1UdIwQYMBaAFFTtRgU4XV7bDdXD6gSc
UqUVm3zyMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMS81NEVE
NDYwNTM4NUQ1RURCMERENUMzRUEwNDlDNTJBNTE1OUI3Q0YyLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk8xR0JUaGRYdHNOMWNQcUJKeFNwUldiZlBJLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMS8zNDM1MmUzMTM0MzEyZTMy
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMDM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtjRUwDQYJKoZIhvcNAQELBQADggEBAGkdg5qMWskqBKLSv/5uoGbGX3Znv6kC
VLCX7xdEAxr2qrOQ/XFRsWePbb3J6oJifzDsh/BCmM/jKe5nRHw2qcT9t+mcFl5z
DyJ9dcAX70oAEGRs7qVUHk4sL1kIJo4ym/SQUvwrtJXxIOCrUXTrdFP453Gwj9nE
oGd5glc3yo61p19do4Qg3PxbI2wjmCZ+QNlLlMeh1dxw/pu9tHD5XFSd0ODPVjAi
vSk2W0h+DyVfo1bkPxFUyi7PRlenEQS7vMup8gCCpC0WWb+C4ahUucO5rmLOOBIi
HLVbU0r5Zdj8qwWEVEWKPrm+BUUlCsnI/nJvr4cMc8wbs5oaPl1/lPg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net