Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/208/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
File:                     34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          1yOufqcjKgsMdSZJMTQUH8x2FlXApUYP65dXW+mtwkU=
Subject key identifier:   45:48:BF:BD:72:78:AE:97:E6:FE:19:54:7E:07:D3:57:44:32:82:C4
Certificate issuer:       /CN=382d1187a9e2ad4fdb744a920ddc515d11427a82
Certificate serial:       3F36BCC9E06EB296DEBE56077C5F382E79CFCB6A
Authority key identifier: 38:2D:11:87:A9:E2:AD:4F:DB:74:4A:92:0D:DC:51:5D:11:42:7A:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OC0Rh6nirU_bdEqSDdxRXRFCeoI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/208/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:46 +0000
ROA not before:           Sat 22 Oct 2022 04:28:46 +0000
ROA not after:            Sat 21 Oct 2023 04:33:46 +0000
asID:                     201341
IP address blocks:        46.253.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:bc:c9:e0:6e:b2:96:de:be:56:07:7c:5f:38:2e:79:cf:cb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382d1187a9e2ad4fdb744a920ddc515d11427a82
        Validity
            Not Before: Oct 22 04:28:46 2022 GMT
            Not After : Oct 21 04:33:46 2023 GMT
        Subject: CN=4548BFBD7278AE97E6FE19547E07D357443282C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:6f:9c:14:4d:5a:93:71:fe:6b:f7:60:9c:
                    ae:57:1c:4d:ad:6f:4f:de:84:12:51:66:f2:5c:a7:
                    f9:d6:5b:bd:41:5f:d8:66:9b:2a:3a:d6:21:ba:0c:
                    5e:64:6b:0f:c3:50:0b:df:ea:e8:5b:d0:97:d2:21:
                    eb:82:51:f1:59:77:ee:df:1e:69:65:e2:3a:ee:9f:
                    70:e5:31:10:02:50:ef:5d:6c:3f:39:15:33:2a:4a:
                    fc:d7:13:a0:8c:13:32:3d:d0:62:aa:6f:e0:11:b9:
                    9c:38:16:b2:2c:52:b0:a6:d2:1d:02:b3:f3:3b:69:
                    64:d2:ef:4f:2d:6b:97:c8:9c:d6:f0:4d:c2:56:b7:
                    56:85:34:da:96:31:74:50:ab:06:94:ba:0b:b2:dc:
                    d9:1e:08:00:a5:c0:d1:b1:e9:30:f0:0c:b5:b5:84:
                    77:92:49:78:80:35:2f:3a:26:c7:7c:05:59:4f:d1:
                    2c:0a:4c:80:ec:fb:37:5c:cb:53:b6:f9:4a:97:36:
                    b7:b1:b8:cc:e2:c9:fd:d9:fe:7c:f5:eb:b6:55:f6:
                    f5:b2:7f:53:d2:4b:85:ca:15:98:40:30:39:be:37:
                    ae:89:a8:d0:a5:3d:ff:1c:f2:29:06:23:32:bc:4c:
                    dd:73:f7:9b:66:f8:5f:8f:d1:6a:1d:44:a9:8f:71:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:BF:BD:72:78:AE:97:E6:FE:19:54:7E:07:D3:57:44:32:82:C4
            X509v3 Authority Key Identifier:
                keyid:38:2D:11:87:A9:E2:AD:4F:DB:74:4A:92:0D:DC:51:5D:11:42:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/208/382D1187A9E2AD4FDB744A920DDC515D11427A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC0Rh6nirU_bdEqSDdxRXRFCeoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/208/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9b:3d:6b:81:d7:de:6c:78:67:73:d1:bf:05:83:e0:0b:27:
         57:70:f2:9e:53:8c:21:89:30:f1:de:6e:3a:de:db:8d:94:a4:
         98:57:70:b2:4a:b7:48:95:8f:0e:00:b8:3a:f1:72:1c:92:1e:
         87:54:7e:b6:46:d3:2e:ad:e4:38:10:26:e4:d8:93:4a:15:89:
         17:fb:43:a5:65:7b:e8:08:90:59:97:07:05:bb:27:f0:e4:c9:
         07:b7:e6:54:64:24:07:3e:10:b4:1d:ac:04:8d:d5:73:dd:c2:
         49:d4:90:8a:cb:8e:f4:a2:cd:68:94:06:98:26:52:04:22:03:
         66:77:28:96:aa:51:1f:e5:8c:25:96:83:36:85:8a:85:2a:67:
         35:28:1f:bf:a4:d7:c0:77:9e:36:b0:ba:2c:da:9a:ff:45:3e:
         20:7b:ac:c3:7f:60:2b:a9:1e:30:79:78:3c:01:ba:ee:31:e6:
         43:67:f7:f3:52:99:86:73:b8:96:60:bc:10:5b:3b:89:5a:18:
         c0:cc:11:1f:dd:b1:3e:ce:48:11:ca:35:61:3f:bb:a0:13:17:
         87:36:5b:b9:43:dc:8a:53:bb:53:8f:35:f9:60:ee:d6:54:18:
         f4:60:aa:6a:37:58:59:e3:64:2b:15:81:99:3a:93:31:dd:fc:
         0d:3c:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net