Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138392e302f32342d3234203d3e20323037373837.roa
File:                     34352e3135322e3138392e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          nVA/yBtsfYjwTBIyaiNbtV85guHZq5wKkUk//J7tGjk=
Subject key identifier:   F1:CE:B0:44:09:32:FF:2F:9C:78:6A:C4:9E:A6:BF:EE:A0:5B:E4:A5
Certificate issuer:       /CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Certificate serial:       12087E7EC7E28CDB5A54E2B35E4586866F52911C
Authority key identifier: 7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138392e302f32342d3234203d3e20323037373837.roa
Signing time:             Tue 01 Dec 2020 23:28:22 +0000
ROA not before:           Tue 01 Dec 2020 23:23:22 +0000
ROA not after:            Tue 30 Nov 2021 23:28:22 +0000
asID:                     207787
IP address blocks:        45.152.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:08:7e:7e:c7:e2:8c:db:5a:54:e2:b3:5e:45:86:86:6f:52:91:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
        Validity
            Not Before: Dec  1 23:23:22 2020 GMT
            Not After : Nov 30 23:28:22 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:09:68:11:a0:89:bf:df:9b:99:1f:04:02:
                    5b:e5:ea:22:2d:97:61:30:84:ef:00:73:74:9b:de:
                    1a:d1:20:6e:78:b7:fa:06:c6:77:2a:4c:03:ab:c7:
                    df:9b:38:b7:ef:c6:e5:49:50:0e:3e:09:81:19:6c:
                    18:78:09:dc:93:04:46:ef:2e:be:b8:35:86:0f:36:
                    bd:0d:ed:ee:4b:6b:9e:30:d4:8f:27:a8:01:c3:a1:
                    bb:f9:7b:c5:13:6f:bd:c6:be:c4:0d:da:10:c1:30:
                    cc:39:08:a9:4a:58:19:0c:97:77:9a:46:00:7a:2d:
                    19:b0:d9:39:58:19:e1:ea:81:0b:04:ad:10:72:9b:
                    37:dc:9a:41:5a:57:65:57:cf:80:e4:5f:6d:ce:8a:
                    63:16:2a:4b:7c:34:a8:92:a4:48:b6:bb:cb:a8:f5:
                    aa:23:8e:81:c5:e0:60:1c:c7:10:b7:3d:9a:47:73:
                    45:99:4c:15:ef:ad:69:0e:70:f1:5f:0f:e4:13:9e:
                    f9:0f:cb:a6:bb:a2:c3:50:90:c2:55:47:bb:48:09:
                    8c:8f:be:b1:1d:a0:ea:fc:34:9b:29:9d:04:1c:88:
                    df:f7:43:2f:d1:30:bc:d1:66:a3:f2:1e:cd:f8:06:
                    d6:be:2b:fd:01:37:d2:25:b5:24:b4:90:88:73:34:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CE:B0:44:09:32:FF:2F:9C:78:6A:C4:9E:A6:BF:EE:A0:5B:E4:A5
            X509v3 Authority Key Identifier:
                keyid:7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138392e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:4f:fd:6e:66:16:54:95:ba:9b:73:f2:4e:de:49:48:38:8c:
         42:ce:2e:84:c1:77:0c:41:27:ca:0d:35:dd:92:7a:93:0e:06:
         bf:e6:23:75:7d:0e:a4:ae:a9:8b:1c:f5:d4:68:12:d1:c7:ac:
         53:2c:9c:53:1e:87:64:5b:e7:17:14:2a:a6:1d:29:a6:12:09:
         3b:32:7a:a0:20:e6:b2:10:a6:f0:6a:9c:0a:b0:fd:d9:bf:f4:
         2d:07:b9:8a:ab:ac:1f:e7:52:42:71:6c:ef:e3:b0:6c:40:49:
         c7:08:60:dc:b8:54:f8:70:24:ec:6f:77:c7:13:37:48:eb:04:
         de:53:61:64:8d:b6:cf:3a:30:6a:a9:2d:23:f8:46:3d:a3:a7:
         ea:b1:90:f6:c9:54:0f:15:13:36:7e:b7:19:6f:96:28:dc:7b:
         39:4f:34:58:72:8b:b2:04:c3:c4:9f:5c:95:fe:5b:3a:52:6c:
         57:b1:19:4b:a0:b7:9d:ae:33:e6:68:d9:e7:a8:17:9c:0a:9c:
         0a:10:83:ab:77:0d:0a:26:03:1e:c3:31:7d:8a:df:08:6c:6b:
         2e:58:f6:53:e0:8a:29:c7:ed:72:05:5a:0f:86:4b:81:aa:ec:
         6c:c3:db:ce:d6:0b:4e:b6:b0:f8:99:a1:88:d8:e9:46:1f:2e:
         0f:29:13:44
-----BEGIN CERTIFICATE-----
MIIG6jCCBdKgAwIBAgIUEgh+fsfijNtaVOKzXkWGhm9SkRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U3YjRiNDAxMDU0MWY4ZTk1ZGI3ZWJkMjhkNzNlYTky
NzJjODZjYTAeFw0yMDEyMDEyMzIzMjJaFw0yMTExMzAyMzI4MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y3NDA5NjgxMUEwODlCRkRG
OUI5OTFGMDQwMjVCRTVFQTIyMkQ5NzYxMzA4NEVGMDA3Mzc0OUJERTFBRDEyMDZF
NzhCN0ZBMDZDNjc3MkE0QzAzQUJDN0RGOUIzOEI3RUZDNkU1NDk1MDBFM0UwOTgx
MTk2QzE4NzgwOURDOTMwNDQ2RUYyRUJFQjgzNTg2MEYzNkJEMERFREVFNEI2QjlF
MzBENDhGMjdBODAxQzNBMUJCRjk3QkM1MTM2RkJEQzZCRUM0MEREQTEwQzEzMEND
MzkwOEE5NEE1ODE5MEM5Nzc3OUE0NjAwN0EyRDE5QjBEOTM5NTgxOUUxRUE4MTBC
MDRBRDEwNzI5QjM3REM5QTQxNUE1NzY1NTdDRjgwRTQ1RjZEQ0U4QTYzMTYyQTRC
N0MzNEE4OTJBNDQ4QjZCQkNCQThGNUFBMjM4RTgxQzVFMDYwMUNDNzEwQjczRDlB
NDc3MzQ1OTk0QzE1RUZBRDY5MEU3MEYxNUYwRkU0MTM5RUY5MEZDQkE2QkJBMkMz
NTA5MEMyNTU0N0JCNDgwOThDOEZCRUIxMURBMEVBRkMzNDlCMjk5RDA0MUM4OERG
Rjc0MzJGRDEzMEJDRDE2NkEzRjIxRUNERjgwNkQ2QkUyQkZEMDEzN0QyMjVCNTI0
QjQ5MDg4NzMzNEYwRTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz3QJaBGgib/fm5kfBAJb5eoiLZdhMITvAHN0m94a0SBueLf6BsZ3
KkwDq8ffmzi378blSVAOPgmBGWwYeAnckwRG7y6+uDWGDza9De3uS2ueMNSPJ6gB
w6G7+XvFE2+9xr7EDdoQwTDMOQipSlgZDJd3mkYAei0ZsNk5WBnh6oELBK0Qcps3
3JpBWldlV8+A5F9tzopjFipLfDSokqRItrvLqPWqI46BxeBgHMcQtz2aR3NFmUwV
761pDnDxXw/kE575D8umu6LDUJDCVUe7SAmMj76xHaDq/DSbKZ0EHIjf90Mv0TC8
0Waj8h7N+AbWviv9ATfSJbUktJCIczTw6QIDAQABo4IB+DCCAfQwHQYDVR0OBBYE
FPHOsEQJMv8vnHhqxJ6mv+6gW+SlMB8GA1UdIwQYMBaAFH57S0AQVB+Oldt+vSjX
PqknLIbKMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMjIvN0U3
QjRCNDAxMDU0MUY4RTk1REI3RUJEMjhENzNFQTkyNzJDODZDQS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL2ZudExRQkJVSDQ2VjIzNjlLTmMtcVNjc2hzby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraTEudGVy
cmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzEyMi8zNDM1MmUzMTM1MzIy
ZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC2YvTANBgkqhkiG9w0BAQsFAAOCAQEAyU/9bmYWVJW6m3PyTt5JSDiM
Qs4uhMF3DEEnyg013ZJ6kw4Gv+YjdX0OpK6pixz11GgS0cesUyycUx6HZFvnFxQq
ph0pphIJOzJ6oCDmshCm8GqcCrD92b/0LQe5iqusH+dSQnFs7+OwbEBJxwhg3LhU
+HAk7G93xxM3SOsE3lNhZI22zzowaqktI/hGPaOn6rGQ9slUDxUTNn63GW+WKNx7
OU80WHKLsgTDxJ9clf5bOlJsV7EZS6C3na4z5mjZ56gXnAqcChCDq3cNCiYDHsMx
fYrfCGxrLlj2U+CKKcftcgVaD4ZLgarsbMPbztYLTraw+JmhiNjpRh8uDykTRA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net