Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa
File:                     34352e39302e3232322e302f32342d3234203d3e20333936303733.roa (raw, json)
Hash identifier:          RmLp6thQGpHAspgOtvLL/gD8tI7vx5VfrQzjqvojvVg=
Subject key identifier:   08:DA:24:1C:54:A7:55:D5:06:7B:59:93:01:B8:5E:40:A6:03:C0:47
Certificate issuer:       /CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Certificate serial:       5F8A5978A05FA9D25ADD9F13977CDD29BDC4F3EE
Authority key identifier: 67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa
Signing time:             Mon 30 Nov 2020 19:12:28 +0000
ROA not before:           Mon 30 Nov 2020 19:07:28 +0000
ROA not after:            Mon 29 Nov 2021 19:12:28 +0000
asID:                     396073
IP address blocks:        45.90.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8a:59:78:a0:5f:a9:d2:5a:dd:9f:13:97:7c:dd:29:bd:c4:f3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
        Validity
            Not Before: Nov 30 19:07:28 2020 GMT
            Not After : Nov 29 19:12:28 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:f1:54:1f:3b:97:e4:f2:1a:e3:22:bc:55:
                    98:ed:ab:fd:23:94:04:49:dd:61:9d:07:d6:ae:23:
                    c5:ac:76:6e:b7:26:74:7e:5d:6e:da:ff:d9:49:cb:
                    ad:8f:41:34:b3:77:e3:f0:98:9d:56:1a:9c:08:6b:
                    df:59:33:5b:3d:f4:e4:d7:53:8a:36:46:59:78:ef:
                    f7:bd:fb:c5:71:2f:da:05:65:72:47:f3:fe:6c:10:
                    b7:e8:c4:a8:65:86:ff:50:48:30:d6:d1:78:d7:85:
                    74:9f:a9:b2:8b:9a:03:06:32:df:d2:f1:f7:88:b7:
                    ad:07:a6:1d:35:16:17:ac:05:9b:c2:25:34:82:0b:
                    aa:b5:b7:f5:3d:5b:fd:7a:63:9f:5c:8e:f5:7e:49:
                    ef:97:9b:c5:69:45:d8:5c:4c:11:47:bc:d1:b4:f3:
                    43:ac:1d:35:f3:03:ad:75:27:20:5a:47:b5:ed:39:
                    a6:82:f3:93:81:47:a0:b4:03:a9:28:e5:22:07:27:
                    42:a2:54:12:d0:3a:0d:2c:6a:d9:83:78:de:f3:86:
                    e5:18:5d:06:16:44:3c:0a:6e:ee:f4:22:c3:17:b2:
                    df:dc:9c:1c:44:58:f8:56:da:ae:f0:57:c8:ef:9f:
                    23:32:7c:bd:0f:ed:e9:7f:1e:0e:3c:f8:60:97:e9:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DA:24:1C:54:A7:55:D5:06:7B:59:93:01:B8:5E:40:A6:03:C0:47
            X509v3 Authority Key Identifier:
                keyid:67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/67596B6A4CD6BFE459E1A9C589B881FF37ABDA27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:e2:bd:05:aa:ca:36:06:d7:23:74:c2:ec:a5:6c:00:75:
         64:e4:9a:0d:26:a5:60:ff:d7:9b:74:f1:7a:40:d0:d4:c3:a5:
         14:60:ea:d3:38:97:98:b7:11:cd:5f:bb:0c:86:ee:cb:c0:4b:
         9c:6b:bf:83:a3:a8:d9:89:df:34:05:e3:4e:09:cf:34:9d:12:
         0f:7a:7d:b2:9e:14:0a:1a:4b:ec:b4:5e:62:a5:80:31:71:73:
         fb:c7:e4:6b:45:96:be:ed:ac:5a:be:f8:e9:ea:0d:f5:2b:c5:
         7d:90:fd:8d:24:39:b8:a7:6d:44:ad:64:a9:e7:af:70:a3:ef:
         98:84:c4:e0:d2:b9:ea:6b:b9:de:07:e9:c5:25:64:12:7d:67:
         34:2b:be:c8:c9:93:cb:3b:42:6e:0d:ea:58:03:f2:43:95:91:
         84:17:3e:50:09:94:7c:f2:69:a8:9e:43:98:68:64:cd:7a:d0:
         78:50:27:60:18:9a:e2:7f:c6:18:7c:15:58:04:5b:e5:f6:e7:
         e4:12:eb:c2:c4:f9:f3:72:ba:32:3e:d5:05:27:80:4b:b5:2f:
         7c:9f:c9:c7:cd:c4:96:78:ef:b9:3e:75:db:f4:5a:be:1b:f4:
         e4:cf:cd:46:23:d4:20:f3:7e:b1:83:e8:e1:cf:2f:51:9c:2b:
         fe:bb:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net