Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e20313336373837.roa
File:                     34352e3133322e3135392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          3NFz7MGBOmFDEHmxkVwk6iAr6A1jwQFFKRQebZPw7Mo=
Subject key identifier:   50:E9:28:F0:33:F5:FB:47:26:12:0B:0A:D7:10:A8:98:2B:E4:24:39
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       198919B78B037C8BBE5770AC2102AF91E63C7D3D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 07 Nov 2022 11:22:20 +0000
ROA not before:           Mon 07 Nov 2022 11:17:20 +0000
ROA not after:            Mon 06 Nov 2023 11:22:20 +0000
asID:                     136787
IP address blocks:        45.132.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:19:b7:8b:03:7c:8b:be:57:70:ac:21:02:af:91:e6:3c:7d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov  7 11:17:20 2022 GMT
            Not After : Nov  6 11:22:20 2023 GMT
        Subject: CN=50E928F033F5FB4726120B0AD710A8982BE42439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:21:6d:2c:ee:bb:f2:91:49:47:8e:2c:59:
                    4f:71:79:21:56:ba:e8:16:04:6a:ce:03:9c:15:cd:
                    62:d2:e7:f0:91:38:ad:ca:34:3a:ba:14:b2:90:d6:
                    be:04:eb:eb:d4:c1:17:6f:9d:ce:37:96:43:24:6d:
                    0d:04:9d:f9:7a:e2:87:ba:95:7e:57:a0:37:22:b4:
                    7d:97:a4:0b:3b:8d:2b:2a:be:72:ce:54:5f:15:26:
                    4f:5a:fe:67:e8:a7:dd:f0:15:0a:0b:c0:5a:34:00:
                    db:cb:8f:ca:4f:63:bf:7f:58:20:6a:63:73:af:f5:
                    ca:d1:de:8f:9e:13:fd:54:7b:fd:d3:c1:b2:9a:5d:
                    21:65:cb:46:ea:22:85:26:43:76:f1:68:d6:33:82:
                    d9:8a:28:a7:fc:6e:b8:0c:66:1b:1e:61:6f:17:06:
                    9a:40:4e:0c:55:a1:c9:64:14:c3:63:9a:bf:b3:eb:
                    47:0d:60:e7:f1:b8:84:d4:19:54:78:40:3e:68:72:
                    1d:b6:b3:d4:a1:c6:e0:83:af:d4:2e:63:84:86:85:
                    01:c5:95:99:9b:67:1c:b7:fc:cc:e3:36:05:7b:19:
                    ec:73:22:49:14:86:5d:a6:5d:b3:3f:6d:6e:93:8b:
                    82:bd:78:fb:39:8f:ba:94:31:71:52:52:07:54:d2:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:28:F0:33:F5:FB:47:26:12:0B:0A:D7:10:A8:98:2B:E4:24:39
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:49:a0:c5:17:e5:95:ed:19:bb:97:2b:32:0c:8e:f7:59:e8:
         61:72:70:a7:16:69:06:1b:b6:66:db:8e:d4:2c:0d:c7:01:8c:
         34:48:f8:6e:23:f5:fe:eb:dc:f8:23:f8:00:3a:12:de:77:6a:
         92:0c:3b:e5:b7:5b:9c:8a:89:21:d3:66:09:69:ca:12:6e:4f:
         a4:cb:ed:2e:16:9d:38:78:18:f0:1c:19:c8:ff:0b:eb:07:ba:
         ac:60:76:25:42:c2:90:19:9e:1b:7d:fb:59:47:48:0a:a2:d3:
         e7:74:d9:5b:cc:f0:ee:f9:5f:8a:25:77:dc:c4:54:15:6c:16:
         7f:35:b6:25:d2:1b:90:cc:38:ec:ef:e9:5b:65:03:2a:29:bf:
         1d:88:e0:69:ed:a8:bd:82:3c:69:4e:0a:ae:7d:72:58:ba:be:
         e3:96:97:a3:28:1c:11:8e:3c:6f:6d:65:78:56:91:cf:38:3c:
         21:8b:85:25:dd:cb:b5:5a:4b:9c:3c:89:40:88:20:14:dd:cd:
         7b:dd:9b:0f:53:d8:71:c5:6b:5f:82:88:ae:ab:29:34:83:1a:
         54:78:f7:26:fd:03:fd:bd:5f:41:d2:7a:f5:bf:e5:14:e0:b9:
         7c:00:27:92:ef:10:7f:a1:4b:71:93:f1:62:a2:d4:ec:83:9c:
         75:e1:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net