Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3133352e302f32342d3234203d3e20313336373837.roa
File:                     3134352e31342e3133352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          KoYRSh5ObX6Ga2VABlxuTlmeyMrDDoHFub5EEEoq4jo=
Subject key identifier:   64:4A:EB:58:CA:09:C1:63:56:AA:1D:8C:52:76:DA:91:9C:5E:D2:D4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1769A99D331BF3E6BD25B7F2006A6F1BAF4E81D5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3133352e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:13 +0000
ROA not before:           Sat 22 Oct 2022 04:29:13 +0000
ROA not after:            Sat 21 Oct 2023 04:34:13 +0000
asID:                     136787
IP address blocks:        145.14.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:69:a9:9d:33:1b:f3:e6:bd:25:b7:f2:00:6a:6f:1b:af:4e:81:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:13 2022 GMT
            Not After : Oct 21 04:34:13 2023 GMT
        Subject: CN=644AEB58CA09C16356AA1D8C5276DA919C5ED2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:91:5b:40:03:63:3d:f1:b5:c5:a9:09:1f:
                    b4:83:d4:f3:a0:66:68:69:66:e8:87:e7:84:5e:41:
                    89:9f:7a:bd:24:b5:fe:c4:43:f9:1f:bb:ab:77:8f:
                    8f:4a:66:92:e8:24:5c:67:e9:63:d7:c8:90:ae:1b:
                    01:e7:ed:7a:e9:d7:5e:42:5e:4d:c9:78:ab:69:6c:
                    55:27:f6:8b:58:a8:46:52:d9:93:f4:d8:b1:8d:c1:
                    13:2c:01:b8:6b:3f:93:99:c4:79:fa:b0:0e:e9:5e:
                    3c:06:0e:e7:5b:47:74:68:e8:5e:45:11:d1:a3:b3:
                    02:97:f7:f1:e5:56:ea:75:a1:e7:70:78:92:28:cb:
                    73:c4:b7:2f:34:e1:e9:32:68:c5:be:39:51:f7:de:
                    a1:53:7f:e0:b2:e5:eb:ec:f6:c7:3e:97:aa:2d:62:
                    97:5d:6e:5c:d6:d4:c3:2e:e3:1a:8e:29:e3:cd:d6:
                    8a:b0:74:2d:ac:65:95:bb:41:2e:99:6c:e4:82:6d:
                    aa:d0:88:01:83:4a:ee:ee:dd:f3:b1:29:51:6f:aa:
                    63:a0:a0:0b:2b:8c:f0:56:19:b1:f9:1b:90:46:b6:
                    2c:bd:ef:e7:fa:7b:5b:fe:de:6a:3c:b2:f5:e4:da:
                    63:06:6f:3d:fe:ca:be:85:95:0b:b9:af:53:fc:52:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:EB:58:CA:09:C1:63:56:AA:1D:8C:52:76:DA:91:9C:5E:D2:D4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3134352e31342e3133352e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.14.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:26:4e:c1:6b:22:25:6a:6b:51:26:90:46:dd:66:46:a6:
         19:f5:f7:3f:cf:1f:22:1d:b0:61:c5:72:73:e6:a5:44:94:e0:
         70:98:f1:7d:74:38:18:35:19:42:35:28:b6:72:3c:8a:cd:74:
         50:6d:f6:de:2b:16:d2:c9:17:e4:88:0e:56:e2:30:69:b7:ea:
         d1:85:1c:40:d3:eb:41:43:8f:77:19:b2:40:ca:7b:44:27:e5:
         c8:5f:ca:29:12:e7:8b:bc:87:b6:8e:19:e4:8b:7e:53:4d:fb:
         26:64:53:3c:d7:d8:d8:8b:00:26:2f:29:f1:0a:d6:e1:5b:e1:
         4c:eb:18:ce:08:54:c1:df:63:ed:53:5e:73:42:86:9f:14:98:
         8a:5b:4d:65:72:43:3a:37:16:87:43:57:9d:6b:86:86:c1:e3:
         75:ed:ac:56:e9:39:f4:a2:5a:73:1b:4f:f9:eb:29:93:77:f6:
         bf:a7:7b:5a:cb:9c:04:74:85:b4:9f:0f:d4:61:0e:26:aa:4c:
         17:78:43:09:16:3b:4e:f9:35:86:a5:fc:ac:ae:89:12:3c:4d:
         2c:39:f7:32:8c:4c:d1:f4:01:32:79:4a:26:64:82:7b:e3:c6:
         a9:95:92:ac:22:8c:8a:05:71:3d:ec:b0:86:c9:89:9c:4e:5a:
         74:53:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net