Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa
File:                     34352e3135322e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          SMGhIDk2NR3bQC2awXzHGnayjiiQ8fv2FqJUS4ljC54=
Subject key identifier:   BD:53:89:27:DC:3A:E3:13:53:83:5F:F7:F1:A2:13:8D:B6:E4:42:5B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5DB4EEA953C1CB85B7E8F6BF2C5ABA796C0C3101
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa
Signing time:             Thu 26 Jan 2023 11:48:40 +0000
ROA not before:           Thu 26 Jan 2023 11:43:40 +0000
ROA not after:            Thu 25 Jan 2024 11:48:40 +0000
asID:                     136787
IP address blocks:        45.152.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b4:ee:a9:53:c1:cb:85:b7:e8:f6:bf:2c:5a:ba:79:6c:0c:31:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:40 2023 GMT
            Not After : Jan 25 11:48:40 2024 GMT
        Subject: CN=BD538927DC3AE31353835FF7F1A2138DB6E4425B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:88:19:af:15:0c:0b:ef:6a:5e:df:36:b2:
                    5f:9b:51:15:ad:47:20:6d:d2:b9:b4:f8:1e:4d:ee:
                    7b:2e:c0:d7:96:bd:5c:dd:c1:2d:c5:a5:2d:59:b3:
                    d8:0e:74:ef:a4:f3:35:5e:d1:2c:4c:1d:84:cb:88:
                    4a:82:55:5a:6c:4d:00:ea:1e:0e:0d:c5:7c:d9:13:
                    7c:d1:b8:b1:fa:73:76:92:a2:d7:c1:e1:50:53:e0:
                    31:98:a7:ca:c1:d6:87:eb:6d:b4:42:e3:5d:82:fb:
                    79:08:73:44:bb:aa:dc:10:a6:da:e7:cc:50:34:e2:
                    e1:f2:37:a9:36:66:37:ce:77:c9:1d:9f:fb:97:31:
                    8c:4f:49:4a:d1:9d:bb:2e:f2:61:57:0d:5b:c2:60:
                    2e:54:63:ad:82:6d:54:db:db:71:60:b9:91:09:b6:
                    f2:7d:85:f8:0d:21:e4:5e:5b:73:60:bc:d5:c0:f9:
                    dc:25:2b:dd:e5:c4:70:2f:9e:2c:94:5f:0a:84:34:
                    e0:91:6a:b5:21:cc:3e:8d:9c:a9:8c:f8:10:eb:7b:
                    b7:6e:49:ee:0c:c8:5c:e3:c5:d2:a6:5f:27:02:1a:
                    33:d4:84:b9:9e:73:e2:69:06:6c:9b:2f:94:76:b9:
                    49:24:15:03:50:5c:87:5f:e0:10:84:39:61:e0:1b:
                    bd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:53:89:27:DC:3A:E3:13:53:83:5F:F7:F1:A2:13:8D:B6:E4:42:5B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:2a:b6:0a:0d:b2:7a:de:91:60:5b:ea:33:68:15:21:14:
         bf:81:00:85:1f:44:e6:02:cc:e2:ea:e9:de:20:d1:4b:d6:39:
         16:63:ee:10:bf:17:43:0d:6a:58:57:04:52:58:8d:fb:96:02:
         a0:33:f4:1c:dc:fc:ba:f0:b4:16:b2:66:ad:cf:36:8f:87:f3:
         44:5e:3d:fa:8f:f6:e0:23:96:aa:d1:24:d1:f7:e2:f8:b3:b1:
         f9:d4:84:83:c3:2e:34:69:67:b2:04:88:1d:d2:85:d4:35:7e:
         67:73:18:3a:9f:ae:38:64:dd:6f:c9:31:61:0b:09:6c:8e:49:
         d8:8d:72:3a:c6:55:a6:d4:99:95:64:bf:a5:a2:5e:54:0b:5a:
         c7:43:3d:87:71:06:5e:d8:9f:80:7a:45:5b:7e:8f:8f:b5:f2:
         b9:6b:46:04:7e:19:57:dd:52:0b:c9:5c:08:37:26:17:d3:85:
         46:1f:cc:67:55:4e:09:c8:12:81:58:c6:01:79:08:ed:50:3b:
         91:e4:33:63:63:9a:a6:83:cd:75:11:ce:ca:7c:e6:71:56:18:
         7f:76:d4:90:83:d6:80:7b:17:2a:72:4b:75:fd:03:e1:a0:79:
         c0:7e:4f:be:ab:74:c9:aa:e5:83:fe:87:23:f6:da:c1:6d:19:
         2c:d0:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net