Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa
File:                     34352e3135322e3138382e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          vcy77tTm/AU7853EzgveWlmseMz5pq6TP5LngMedPwI=
Subject key identifier:   6F:2B:CE:DE:3F:FD:63:D4:9D:D1:60:14:30:F4:99:F7:DC:44:77:D7
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       910714CC81A344CB87F6784D2BFA8E99A5AA1C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa
Signing time:             Thu 26 Jan 2023 11:48:41 +0000
ROA not before:           Thu 26 Jan 2023 11:43:41 +0000
ROA not after:            Thu 25 Jan 2024 11:48:41 +0000
asID:                     3356
IP address blocks:        45.152.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            91:07:14:cc:81:a3:44:cb:87:f6:78:4d:2b:fa:8e:99:a5:aa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:41 2023 GMT
            Not After : Jan 25 11:48:41 2024 GMT
        Subject: CN=6F2BCEDE3FFD63D49DD1601430F499F7DC4477D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:7f:cd:f0:9f:6f:58:ee:28:30:fb:72:9f:
                    b5:05:9e:dd:07:f1:fd:e6:50:dd:0f:17:a3:40:a8:
                    e0:89:a9:88:06:6a:75:45:76:97:19:3a:61:50:c4:
                    4d:cf:e7:c2:ca:00:d7:63:79:67:ee:7c:96:b8:9e:
                    ed:4b:2f:e0:41:1e:ea:0f:4e:66:56:6f:b0:86:b0:
                    b4:e6:99:f0:40:65:b4:bf:7d:68:88:4c:24:f5:1a:
                    62:cc:1c:a0:a6:e1:6a:11:24:c3:67:cf:53:14:f8:
                    4e:ec:b4:86:41:e9:2d:6a:89:e9:5b:41:e2:fe:10:
                    f4:ff:9b:c3:77:02:46:36:41:2e:8b:6a:8d:b0:d5:
                    98:00:03:2b:5d:69:30:2e:7a:9e:27:bc:f6:39:9c:
                    97:5e:e0:c6:e7:c4:c8:4a:5b:48:77:97:94:5a:fa:
                    d7:d6:60:30:7d:59:4d:80:43:71:6e:85:33:f0:9c:
                    5f:09:a9:62:45:29:51:23:32:b6:3d:28:eb:2f:01:
                    8d:7b:00:2e:6c:b5:38:5a:c8:ba:f9:c8:2d:f7:56:
                    ef:9a:d5:6a:39:67:b5:f2:96:70:ff:64:ff:7d:b0:
                    7e:23:cb:a5:93:61:2b:f4:c0:3b:e1:13:18:4a:33:
                    bc:a2:16:d8:3a:d7:b8:2e:33:62:07:94:c4:cb:e4:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2B:CE:DE:3F:FD:63:D4:9D:D1:60:14:30:F4:99:F7:DC:44:77:D7
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:92:5e:5c:06:3e:63:23:0f:06:47:2c:ac:d1:ba:0c:de:
         b8:6e:d0:13:89:5e:f5:6c:37:a1:64:0e:e6:a4:f7:65:37:9a:
         fa:b8:79:65:f0:9f:88:a7:4c:ea:f9:50:74:71:75:ea:69:78:
         34:63:49:8c:d4:67:6a:ac:64:ac:1b:b5:1e:2d:08:35:00:6c:
         70:31:57:d8:89:eb:c1:57:35:5f:2e:16:e2:37:db:57:8f:10:
         79:71:a9:dc:78:28:0c:35:4a:ac:41:83:0b:ab:3c:86:12:e7:
         f3:1d:9f:fc:07:94:f8:58:3b:fe:09:fd:6d:59:bb:2e:6a:7c:
         5d:77:70:fd:c9:29:6d:89:95:18:e7:5f:e5:0b:ea:8e:c9:60:
         ae:25:86:c8:1c:c5:ca:24:a9:c2:8c:af:79:cb:46:fe:2c:fa:
         6f:65:d5:35:85:fe:15:01:33:1a:c2:5e:4b:c1:50:df:4b:f9:
         06:99:20:84:1e:50:e0:3c:b4:ba:52:b6:ec:b7:b6:96:a8:ed:
         64:fa:41:9e:20:18:11:ca:85:e0:fb:6b:66:16:6e:9a:c5:0c:
         42:21:28:fb:c9:b9:e0:35:18:96:44:1f:97:1a:20:32:98:ea:
         6e:11:37:98:44:85:e0:7c:e9:17:72:bc:0f:08:e7:9e:8d:a7:
         d0:4e:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net