Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38382e3139302e302f32342d3234203d3e203631333137.roa
File:                     34352e38382e3139302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          W9t1ft0EAUi3eW+QTR8vctFY5F47vmU59GPKF0PJEJA=
Subject key identifier:   6D:D7:8D:B4:87:D3:65:69:D7:9B:A4:EC:A6:AE:A5:89:13:9C:2A:4F
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6A878C6E071FA8C2B14C202D9CA946DBC2840B60
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38382e3139302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:14 +0000
ROA not before:           Tue 28 Jun 2022 04:36:14 +0000
ROA not after:            Tue 27 Jun 2023 04:41:14 +0000
asID:                     61317
IP address blocks:        45.88.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:87:8c:6e:07:1f:a8:c2:b1:4c:20:2d:9c:a9:46:db:c2:84:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:14 2022 GMT
            Not After : Jun 27 04:41:14 2023 GMT
        Subject: CN=6DD78DB487D36569D79BA4ECA6AEA589139C2A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:71:e1:cd:3b:64:33:26:d5:c2:bf:74:60:
                    cf:7c:20:ed:17:e3:71:6d:d4:1d:c6:6a:4c:b9:ce:
                    90:8a:b1:ca:c5:31:ba:80:81:5f:8d:a4:57:e0:b5:
                    ca:2e:97:66:61:df:e5:56:9c:e4:37:70:44:5d:ce:
                    34:c7:36:cd:6c:9f:b4:57:98:31:04:0b:81:bc:b5:
                    60:a3:37:f1:df:d9:8e:83:c0:92:b6:45:00:30:6f:
                    f2:0d:63:42:67:d1:8f:36:43:78:69:ba:79:17:df:
                    26:b5:0e:81:0b:a3:ca:57:41:24:90:e0:07:b5:b2:
                    c4:cb:d3:cd:cb:8f:fe:69:8a:09:e7:cf:22:a8:72:
                    b9:52:e3:67:1d:5e:f6:71:b8:7f:9b:89:84:56:9a:
                    06:80:a4:2d:1d:53:c7:3f:22:07:88:32:6b:9a:01:
                    bd:a9:1c:f8:25:59:50:32:e8:b9:96:f1:78:29:14:
                    51:1b:e3:42:86:7a:42:e4:13:7e:ab:2d:6c:c7:af:
                    65:c7:55:8d:c3:d6:4b:06:9d:09:eb:89:a8:6b:c5:
                    4a:ec:f5:f4:3b:97:14:34:09:1c:28:3f:4f:63:9d:
                    05:82:94:0b:af:37:74:b8:f5:70:59:bd:d3:c2:96:
                    fe:b0:71:47:92:aa:05:8c:0a:d2:0b:ff:34:85:7e:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:8D:B4:87:D3:65:69:D7:9B:A4:EC:A6:AE:A5:89:13:9C:2A:4F
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38382e3139302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:86:d5:a5:3a:67:1e:0e:24:55:cd:b1:87:19:84:fd:7e:
         88:80:ba:2c:d2:0e:c9:36:05:43:71:1d:de:41:9d:79:05:76:
         de:c2:45:42:35:5e:c7:47:23:99:18:b0:75:c1:dd:83:d3:f8:
         e1:13:e4:6c:01:66:27:07:53:21:61:eb:9c:de:7b:6f:af:9f:
         03:72:1f:69:5c:5a:11:8d:b3:fd:43:19:6c:80:cb:72:ba:f6:
         58:a9:70:c6:02:9d:ff:a7:92:9c:68:66:7c:15:57:7e:f3:dc:
         3d:16:b8:b7:a1:43:25:3d:ca:10:ac:63:80:dc:44:d8:f1:ed:
         bd:6d:11:b5:d6:72:1f:95:98:0e:e3:bf:7e:2f:62:a0:1b:44:
         e3:b1:47:27:6e:eb:b2:a0:8e:5a:14:99:8a:e7:1a:48:79:87:
         85:2d:71:be:79:e0:12:1b:22:02:36:3a:b5:e4:d7:2c:e0:13:
         03:a1:a3:6b:4b:8f:c4:fb:9c:47:ce:b7:1b:d7:0a:71:ec:51:
         ad:01:12:a0:11:ff:82:5f:31:bb:10:f9:a1:4f:a5:7e:81:4a:
         08:b3:6a:1e:ef:17:2e:bb:be:55:cd:e6:78:0b:34:99:94:28:
         9f:d6:91:c4:48:05:21:82:29:1e:3b:55:38:ee:a3:2f:81:9b:
         44:94:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net