Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/35/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
File:                     34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier:          kvktgREcfi9IhqTeKMncNSQaXeiNa4BoB32GBPeyCkg=
Subject key identifier:   8E:2E:41:12:FC:89:86:BD:97:73:19:13:AE:09:EA:6D:27:71:1E:62
Certificate issuer:       /CN=635603bdb3a8c8222338d9eba0edf09d9fd81085
Certificate serial:       04B3665954EB00B7001EBADCE06C8BF452390F87
Authority key identifier: 63:56:03:BD:B3:A8:C8:22:23:38:D9:EB:A0:ED:F0:9D:9F:D8:10:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1YDvbOoyCIjONnroO3wnZ_YEIU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/35/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
Signing time:             Mon 30 Nov 2020 19:13:44 +0000
ROA not before:           Mon 30 Nov 2020 19:08:44 +0000
ROA not after:            Mon 29 Nov 2021 19:13:44 +0000
asID:                     208046
IP address blocks:        45.134.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b3:66:59:54:eb:00:b7:00:1e:ba:dc:e0:6c:8b:f4:52:39:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635603bdb3a8c8222338d9eba0edf09d9fd81085
        Validity
            Not Before: Nov 30 19:08:44 2020 GMT
            Not After : Nov 29 19:13:44 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:17:d0:00:b3:5a:f6:ae:1d:e0:69:08:bc:43:
                    2c:d0:72:56:cd:8c:2a:41:e6:59:f9:12:f0:b7:20:
                    1a:05:2d:a7:c8:60:fe:af:44:72:64:e2:dd:3d:6d:
                    fa:2c:d2:2d:c3:df:ed:e4:ff:93:07:88:d2:3b:80:
                    6d:0c:ff:d3:ca:5b:ae:c6:66:03:82:65:ec:e3:d8:
                    d7:bf:f4:5d:25:15:27:31:a1:de:41:b3:fd:b5:81:
                    a8:76:10:07:82:a3:07:b0:40:f6:fb:75:79:53:c7:
                    4f:a7:6d:62:2c:8e:39:ec:ed:83:26:3f:a6:a8:d7:
                    ec:e6:f3:13:68:39:a0:eb:a0:51:db:1b:68:28:20:
                    69:b0:ea:aa:09:2e:05:18:b6:02:f7:de:04:22:5e:
                    97:3b:54:cb:24:4d:5c:40:e0:24:de:1d:0a:27:9c:
                    d6:ae:b3:82:97:75:c0:5b:05:48:43:7c:b6:7e:f0:
                    fa:af:97:50:b5:42:34:3e:34:fd:a4:14:49:0b:6c:
                    3a:8a:19:d0:9f:93:e6:ee:2b:f8:8b:b5:d5:ee:ad:
                    f3:7d:57:50:6e:92:15:80:e2:c7:6a:c5:eb:0e:9e:
                    4f:f1:b9:bf:87:d3:1f:b1:41:98:75:0e:a7:f3:83:
                    2f:35:47:11:b7:ae:d1:b1:a1:29:d4:0d:ff:ce:c0:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2E:41:12:FC:89:86:BD:97:73:19:13:AE:09:EA:6D:27:71:1E:62
            X509v3 Authority Key Identifier:
                keyid:63:56:03:BD:B3:A8:C8:22:23:38:D9:EB:A0:ED:F0:9D:9F:D8:10:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/35/635603BDB3A8C8222338D9EBA0EDF09D9FD81085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1YDvbOoyCIjONnroO3wnZ_YEIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/35/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:7e:77:34:10:8e:78:10:71:97:35:81:11:65:1d:24:be:
         55:8a:f7:fb:35:73:59:d8:39:01:0d:f6:6f:bc:50:7b:d8:6e:
         82:b3:01:d0:a6:1b:8a:54:e4:40:77:ca:d4:5e:01:de:6a:43:
         c0:67:21:f0:bc:d8:35:21:5d:a4:d2:99:3a:56:41:ff:85:f1:
         26:07:b3:b5:4d:a4:0b:1a:e8:ae:47:0c:44:dc:c9:76:bc:0c:
         60:e2:e5:d3:83:50:0b:5f:6d:53:92:a8:83:0e:4a:1c:e3:ce:
         6f:90:38:2e:0a:4f:84:26:27:d8:85:ab:0a:6a:b3:91:94:29:
         2d:ba:4b:ab:78:d8:77:85:be:6c:7b:06:82:52:40:14:24:f5:
         20:2a:e4:3b:46:38:8e:9b:41:36:60:52:da:59:14:97:5d:ac:
         da:0d:e1:e0:4d:8f:25:d0:c0:e0:4a:ab:4d:e2:09:43:f8:9c:
         77:88:48:d1:0c:60:bb:76:2c:c1:a3:1d:0c:79:93:cb:54:c5:
         8f:66:61:35:ce:d4:55:c6:b6:af:7f:e8:45:9f:7d:05:2e:17:
         59:6b:a6:f9:24:e3:76:8f:88:65:1a:3b:3f:81:65:43:8b:5f:
         62:32:7d:10:8a:49:fb:cf:c6:37:8d:69:7b:b1:f0:54:22:7d:
         0e:1c:03:aa
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUBLNmWVTrALcAHrrc4GyL9FI5D4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM1NjAzYmRiM2E4YzgyMjIzMzhkOWViYTBlZGYwOWQ5
ZmQ4MTA4NTAeFw0yMDExMzAxOTA4NDRaFw0yMTExMjkxOTEzNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUQxN0QwMDBCMzVBRjZBRTFE
RTA2OTA4QkM0MzJDRDA3MjU2Q0Q4QzJBNDFFNjU5RjkxMkYwQjcyMDFBMDUyREE3
Qzg2MEZFQUY0NDcyNjRFMkREM0Q2REZBMkNEMjJEQzNERkVERTRGRjkzMDc4OEQy
M0I4MDZEMENGRkQzQ0E1QkFFQzY2NjAzODI2NUVDRTNEOEQ3QkZGNDVEMjUxNTI3
MzFBMURFNDFCM0ZEQjU4MUE4NzYxMDA3ODJBMzA3QjA0MEY2RkI3NTc5NTNDNzRG
QTc2RDYyMkM4RTM5RUNFRDgzMjYzRkE2QThEN0VDRTZGMzEzNjgzOUEwRUJBMDUx
REIxQjY4MjgyMDY5QjBFQUFBMDkyRTA1MThCNjAyRjdERTA0MjI1RTk3M0I1NENC
MjQ0RDVDNDBFMDI0REUxRDBBMjc5Q0Q2QUVCMzgyOTc3NUMwNUIwNTQ4NDM3Q0I2
N0VGMEZBQUY5NzUwQjU0MjM0M0UzNEZEQTQxNDQ5MEI2QzNBOEExOUQwOUY5M0U2
RUUyQkY4OEJCNUQ1RUVBREYzN0Q1NzUwNkU5MjE1ODBFMkM3NkFDNUVCMEU5RTRG
RjFCOUJGODdEMzFGQjE0MTk4NzUwRUE3RjM4MzJGMzU0NzExQjdBRUQxQjFBMTI5
RDQwREZGQ0VDMEI1MjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7RfQALNa9q4d4GkIvEMs0HJWzYwqQeZZ+RLwtyAaBS2nyGD+r0Ry
ZOLdPW36LNItw9/t5P+TB4jSO4BtDP/TyluuxmYDgmXs49jXv/RdJRUnMaHeQbP9
tYGodhAHgqMHsED2+3V5U8dPp21iLI457O2DJj+mqNfs5vMTaDmg66BR2xtoKCBp
sOqqCS4FGLYC994EIl6XO1TLJE1cQOAk3h0KJ5zWrrOCl3XAWwVIQ3y2fvD6r5dQ
tUI0PjT9pBRJC2w6ihnQn5Pm7iv4i7XV7q3zfVdQbpIVgOLHasXrDp5P8bm/h9Mf
sUGYdQ6n84MvNUcRt67RsaEp1A3/zsC1JwIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FI4uQRL8iYa9l3MZE64J6m0ncR5iMB8GA1UdIwQYMBaAFGNWA72zqMgiIzjZ66Dt
8J2f2BCFMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zNS82MzU2
MDNCREIzQThDODIyMjMzOEQ5RUJBMEVERjA5RDlGRDgxMDg1LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFZRHZiT295Q0lqT05ucm9PM3duWl9ZRUlVLmNlcjCB
iwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zNS8zNDM1MmUzMTMzMzQyZTMy
MzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODMwMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC2G4TANBgkqhkiG9w0BAQsFAAOCAQEAj9p+dzQQjngQcZc1gRFlHSS+VYr3
+zVzWdg5AQ32b7xQe9hugrMB0KYbilTkQHfK1F4B3mpDwGch8LzYNSFdpNKZOlZB
/4XxJgeztU2kCxrorkcMRNzJdrwMYOLl04NQC19tU5Kogw5KHOPOb5A4LgpPhCYn
2IWrCmqzkZQpLbpLq3jYd4W+bHsGglJAFCT1ICrkO0Y4jptBNmBS2lkUl12s2g3h
4E2PJdDA4EqrTeIJQ/icd4hI0Qxgu3YswaMdDHmTy1TFj2ZhNc7UVca2r3/oRZ99
BS4XWWum+STjdo+IZRo7P4FlQ4tfYjJ9EIpJ+8/GN41pe7HwVCJ9DhwDqg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net