Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa
File:                     34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          lmHxYGiyr36MC2t/yY+mBjKB8YlwTJju7YhmH6DE1rk=
Subject key identifier:   3A:61:15:C2:73:B5:D9:7A:94:75:0D:21:2A:F9:DE:81:E2:05:6A:BF
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       7BDF9404425383ED7DF98E98C0FDE6F86CE824A8
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:37 +0000
ROA not before:           Sat 22 Oct 2022 04:29:37 +0000
ROA not after:            Sat 21 Oct 2023 04:34:37 +0000
asID:                     201341
IP address blocks:        45.140.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:df:94:04:42:53:83:ed:7d:f9:8e:98:c0:fd:e6:f8:6c:e8:24:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Oct 22 04:29:37 2022 GMT
            Not After : Oct 21 04:34:37 2023 GMT
        Subject: CN=3A6115C273B5D97A94750D212AF9DE81E2056ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:f6:7b:5f:37:a8:e6:22:ec:5e:5a:65:f8:
                    0c:2c:64:e8:99:4e:7f:ee:ea:72:b5:60:12:98:e7:
                    97:ac:80:31:3d:3f:4a:20:76:be:c3:c3:79:e0:d6:
                    aa:f8:90:65:b5:3e:20:0b:42:95:27:5b:3e:82:b2:
                    89:33:e5:1d:80:6b:3d:dc:fc:8f:38:48:20:eb:5e:
                    a1:32:48:02:e0:58:38:ce:61:3a:14:f4:64:c2:71:
                    30:a6:84:63:3b:c3:9c:f6:90:15:84:c4:0f:3a:cb:
                    03:12:45:d8:8f:3a:e7:0d:fd:ef:6c:24:2c:84:f2:
                    69:41:8d:67:93:8a:0c:29:43:b8:de:9f:f1:fd:64:
                    41:26:7e:1b:df:35:14:56:c2:1f:30:7b:89:82:c9:
                    5e:6c:6c:75:bc:7e:f0:7f:6a:c3:70:8b:b7:f8:85:
                    6c:c2:02:d8:d0:6b:33:c4:74:b8:e3:8e:69:af:bc:
                    e7:be:fa:a2:27:e8:da:3c:1a:a4:03:f4:ca:53:0b:
                    f6:b5:8b:36:bc:66:9d:cf:47:a2:79:a2:1e:46:44:
                    77:fd:0f:95:93:9f:27:ae:fe:1c:86:ab:17:35:43:
                    c3:ef:ea:69:54:ba:3d:86:be:af:13:10:b4:ab:cf:
                    eb:fd:c3:fa:4a:f3:34:6c:18:58:ea:80:cd:9e:d2:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:15:C2:73:B5:D9:7A:94:75:0D:21:2A:F9:DE:81:E2:05:6A:BF
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:ee:07:6f:ab:4b:46:2e:e7:87:d3:47:31:b3:93:81:01:
         a9:46:49:52:30:d2:e6:c8:b0:00:70:2e:6a:c7:59:ee:02:dc:
         fb:33:b9:9c:55:de:a0:b1:1f:fe:a1:7d:9d:1f:43:f6:bb:3c:
         c1:b3:f5:40:34:2c:33:63:e1:e6:28:55:9a:80:37:57:01:06:
         de:ab:8a:cf:44:cc:1d:f0:38:99:d3:ab:12:98:fe:03:46:fa:
         93:1c:7f:65:f1:dc:d8:a5:c5:1b:ff:25:1f:6b:95:5a:f6:77:
         a0:ef:af:25:f7:d5:d5:a1:f2:7c:b4:7a:7f:35:c8:0e:0d:5f:
         a2:8e:32:5b:97:ad:77:4a:8a:f4:77:04:81:b7:cc:6b:08:bf:
         61:1e:e8:45:81:90:1e:2a:47:bf:25:14:76:47:a9:19:22:0a:
         71:f3:a3:ef:54:cc:5c:48:6c:88:80:c8:b4:e3:08:55:a5:aa:
         0c:7d:46:a6:fa:63:18:bc:84:61:70:1e:8f:53:c0:79:90:10:
         e8:18:e0:e8:83:aa:c5:7d:88:d6:9a:40:86:e3:15:8c:a3:7e:
         a0:8b:b0:9b:9d:0e:6d:67:f7:d8:f6:b1:60:9c:22:f3:72:c8:
         a5:06:88:db:bc:5d:ad:91:c4:cd:31:89:a0:6a:39:58:2b:91:
         91:d7:2b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net