Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35362e302f32342d3234203d3e20323132373836.roa
File:                     34352e31332e35362e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          nxobB6GJi3ZIsf0/ldgadAa8hJ4F0sieA8WtiuVzSyw=
Subject key identifier:   41:35:A6:81:04:A2:E7:35:95:B3:3A:19:B7:7F:4D:55:DD:E2:F8:FD
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5516A804865F8413A1A99EDCBE0F970267F0CA6B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35362e302f32342d3234203d3e20323132373836.roa
Signing time:             Tue 28 Jun 2022 04:41:18 +0000
ROA not before:           Tue 28 Jun 2022 04:36:18 +0000
ROA not after:            Tue 27 Jun 2023 04:41:18 +0000
asID:                     212786
IP address blocks:        45.13.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:16:a8:04:86:5f:84:13:a1:a9:9e:dc:be:0f:97:02:67:f0:ca:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:18 2022 GMT
            Not After : Jun 27 04:41:18 2023 GMT
        Subject: CN=4135A68104A2E73595B33A19B77F4D55DDE2F8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:7b:c4:5b:70:2c:65:fa:90:a6:83:e4:87:
                    62:f2:d1:f4:fd:2d:40:4f:6f:d1:b2:12:b1:af:18:
                    07:bb:ca:ac:87:4b:e0:0c:1c:b4:84:1c:29:38:03:
                    aa:9d:cd:ed:e6:ba:56:ba:2c:57:85:ce:cd:e4:f6:
                    a8:c3:84:f8:e3:9c:3c:85:76:ff:27:41:88:9e:46:
                    f1:e3:9c:18:43:9c:fb:d6:3f:86:b7:2c:d0:41:41:
                    78:a0:69:6d:c7:09:6d:8e:f7:b2:13:3d:c2:55:d7:
                    46:dc:5b:f6:5f:61:ac:95:f1:43:b4:e0:31:71:74:
                    51:ee:f3:49:68:d3:ba:a3:cf:a4:22:32:23:a8:c0:
                    bb:ac:df:65:42:fb:9a:2c:94:df:61:3d:fc:6d:23:
                    70:af:c1:6f:78:b2:b0:e4:e0:ac:22:2a:70:14:7b:
                    f6:b0:e6:9b:d6:f8:7d:0c:b9:df:57:18:ec:8c:5b:
                    bb:ce:ac:f5:2b:1f:fb:49:9f:4d:58:f3:a7:0f:b0:
                    18:ce:22:c9:58:d6:f8:46:6f:04:28:48:3e:c2:1c:
                    ea:20:4b:a9:0b:29:fb:cf:22:fa:00:3e:0b:be:85:
                    de:70:bc:fb:2f:cc:52:29:8f:b0:09:dd:d6:8f:3d:
                    dd:5e:3a:b1:6d:36:9d:ed:10:38:64:b2:c8:19:7c:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:35:A6:81:04:A2:E7:35:95:B3:3A:19:B7:7F:4D:55:DD:E2:F8:FD
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35362e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:df:db:c2:42:9f:7d:07:70:9d:38:fa:6e:3e:68:74:d4:
         b9:b7:d7:a2:74:07:94:db:77:f2:bf:6c:f5:3b:f7:27:82:52:
         f0:a6:a6:e2:6a:91:b4:9c:82:fb:c7:c3:c5:3d:82:6c:80:57:
         35:42:2f:c1:42:79:1b:09:52:6f:cb:f1:ee:4c:3f:10:f8:f8:
         b5:9f:c5:ef:b1:54:1f:6e:60:90:5e:91:03:12:e1:45:b7:2e:
         f7:67:70:10:b7:24:27:ce:a3:2f:e3:a0:e4:66:5f:6b:70:d9:
         0f:b2:4f:1e:8f:99:42:c8:11:ef:e3:16:74:71:b3:cf:cc:78:
         a7:91:e0:f2:1c:e6:8e:66:d1:de:9d:5a:62:71:ea:7a:b6:2e:
         1e:1e:ed:23:da:c7:21:93:b6:ec:4b:a3:2c:5f:30:42:58:a5:
         c5:22:2e:7e:75:56:78:f9:83:b7:65:a1:a8:6a:e3:97:a5:1a:
         41:80:2c:27:01:aa:3d:02:88:9d:8c:3a:d1:dc:23:55:84:fe:
         8d:6d:78:71:a5:16:9b:e7:99:83:d3:92:b6:1e:3b:6e:ea:8e:
         df:ef:f8:a6:d9:ba:cb:5d:8d:03:15:a3:3a:f7:4d:fb:57:21:
         80:e6:d9:c3:fe:d8:ca:36:0b:97:5e:6b:0f:54:e4:24:1e:1d:
         61:9a:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net