Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
File:                     34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          Z7kHWfg5BjoeySt70N8poO+jfRT10itJohCkSTGlqfU=
Subject key identifier:   FB:C7:8A:59:E2:4A:03:5A:8E:C3:88:2D:FA:D7:49:C2:41:86:99:81
Certificate issuer:       /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial:       183F48ACD66468FD49DE876CA9E3CBEEC48BB327
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/164/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:10 +0000
ROA not before:           Sat 22 Oct 2022 04:28:10 +0000
ROA not after:            Sat 21 Oct 2023 04:33:10 +0000
asID:                     201341
IP address blocks:        45.138.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3f:48:ac:d6:64:68:fd:49:de:87:6c:a9:e3:cb:ee:c4:8b:b3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
        Validity
            Not Before: Oct 22 04:28:10 2022 GMT
            Not After : Oct 21 04:33:10 2023 GMT
        Subject: CN=FBC78A59E24A035A8EC3882DFAD749C241869981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:a3:15:ab:21:63:d6:38:8c:50:87:40:3f:
                    d9:a1:7d:cf:ef:3a:1e:0b:f4:af:45:e6:31:6c:04:
                    a5:51:0c:ef:87:71:73:26:c5:99:4a:c4:ed:8b:b3:
                    b6:4d:57:ea:8e:c1:43:28:7b:09:69:15:ca:9a:7e:
                    39:db:58:d3:fb:9a:1f:6a:af:0c:f1:29:21:3c:80:
                    6d:5f:bf:a1:0e:98:86:b0:0f:52:80:f1:ed:ba:78:
                    23:aa:97:f7:15:7b:f9:5c:50:4a:d6:dc:66:99:38:
                    3e:ed:a1:5d:76:e2:f3:6b:b3:5d:d5:56:e5:00:05:
                    12:b1:c7:f1:da:08:86:7a:fa:af:14:2f:15:6d:4a:
                    5a:9a:83:83:89:c8:fa:3f:a4:6c:d5:de:8c:08:82:
                    69:e3:18:0a:f4:64:3d:80:6b:74:f0:7e:f5:4d:79:
                    c0:6a:63:c6:6c:08:67:2a:ee:0e:6a:33:b8:c3:94:
                    42:a8:f3:ca:d1:d0:3d:9c:34:e6:7c:89:1b:ec:ca:
                    72:59:de:76:ba:8a:aa:cd:77:3f:03:a9:a3:75:e5:
                    1c:c9:51:7f:d8:d1:4e:c9:02:7d:2c:63:1a:fb:ed:
                    f2:1f:97:49:e5:58:90:b4:85:27:32:b7:f4:a8:9c:
                    25:8d:3b:21:7a:44:c0:2c:2d:35:36:72:dc:2b:8f:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C7:8A:59:E2:4A:03:5A:8E:C3:88:2D:FA:D7:49:C2:41:86:99:81
            X509v3 Authority Key Identifier:
                keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ab:01:20:6d:96:55:f0:1a:d8:ca:28:79:7b:07:ef:ff:e7:
         1e:2a:6e:54:99:13:62:91:c2:cb:76:49:4c:86:fc:51:2f:4e:
         09:dc:89:65:47:b7:51:f4:81:41:84:e5:2e:6c:89:78:36:2d:
         21:cc:c6:fe:f0:cc:42:68:88:3b:c6:03:c4:ba:92:0f:72:31:
         e9:ec:08:c3:69:22:36:d5:66:ad:d0:e8:0c:f3:10:73:76:d4:
         fa:79:a1:31:9a:5d:df:07:73:75:6c:a4:4f:de:0e:49:95:bf:
         80:0d:83:54:f9:a3:4a:9a:dc:16:4a:9d:63:52:2e:90:0e:c9:
         e6:1a:08:0f:f4:66:4a:60:0e:20:9e:eb:82:7e:ef:3a:bf:9b:
         d3:90:35:26:8d:7e:f9:7f:9f:ee:a8:fd:e0:0c:60:fd:ff:80:
         92:2e:61:a8:a4:cd:0f:0d:e2:2d:59:43:ee:f0:23:e8:87:4a:
         a7:9b:6a:1f:e8:a8:d4:a1:97:c1:f2:36:43:8f:0b:09:70:df:
         32:e7:4f:2b:7e:bb:b8:b1:b3:31:3b:ed:02:2a:30:f9:83:d6:
         f5:22:df:fd:c4:af:5c:c2:60:48:6b:79:a4:a4:75:bc:e8:ac:
         bb:d7:4b:7a:50:2b:08:99:3b:bb:a1:9f:5e:13:0e:66:f3:e9:
         9c:08:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net