Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e3133332e34302e302f32322d3234203d3e20323033303631.roa
File:                     34352e3133332e34302e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          UGLSoEDKdfbIXEJc7HOWfK9NyvjG+dMIwdF6IfCaD/8=
Subject key identifier:   1B:B6:83:F4:B4:21:C5:74:5C:88:55:65:26:E7:1F:4D:4F:49:DA:32
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       0F22FDACCDBACB138FEB4813CF99411638F917F9
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3133332e34302e302f32322d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     203061
IP address blocks:        45.133.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:22:fd:ac:cd:ba:cb:13:8f:eb:48:13:cf:99:41:16:38:f9:17:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=1BB683F4B421C5745C88556526E71F4D4F49DA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:d1:4e:42:40:68:ad:f3:15:20:66:5c:79:
                    ba:01:77:88:4d:11:2c:52:51:a8:3f:45:46:1e:ba:
                    66:ae:a9:eb:42:dc:a2:28:f8:f4:e3:3c:0e:84:62:
                    3c:5f:54:b1:e9:7c:1f:08:89:37:30:3b:56:60:64:
                    12:e6:a1:8a:58:ae:31:e0:e4:6b:d8:40:e0:93:26:
                    c9:d0:99:1f:50:f0:26:0a:66:a0:34:d0:a9:33:db:
                    77:b6:1d:5d:15:37:d4:cd:0e:1d:2f:1e:b0:30:8c:
                    82:3d:d8:7a:11:8c:75:56:48:ac:0d:96:15:30:e7:
                    68:a0:18:8b:07:c2:4a:e7:14:bd:6f:b1:24:74:fa:
                    8d:a0:c8:c2:66:b6:b0:b4:c6:84:29:38:76:27:95:
                    fc:56:c2:40:82:d8:18:16:e5:60:4f:72:55:9b:d6:
                    4c:e5:99:8d:b6:fd:f8:8d:2c:af:fd:a1:7c:d7:a3:
                    fb:46:80:9c:1b:bc:fd:bd:83:37:9c:3e:4d:fd:37:
                    63:73:44:58:b2:c0:49:41:ed:bf:be:90:38:55:21:
                    ee:1a:a4:ad:b5:15:a6:61:42:fc:7a:79:29:da:4a:
                    17:94:38:a0:09:45:7d:3d:7b:11:d1:5f:5e:f7:e5:
                    d2:bf:a6:8e:23:d8:f1:52:83:91:67:3a:a5:07:68:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:83:F4:B4:21:C5:74:5C:88:55:65:26:E7:1F:4D:4F:49:DA:32
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3133332e34302e302f32322d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:16:5e:62:cb:8a:ec:f3:77:5d:26:ba:c8:44:54:ac:bd:
         09:68:2f:81:cf:34:68:da:05:eb:42:47:60:59:c2:0e:1c:f3:
         ff:ee:e8:d2:6c:96:1f:51:66:df:c2:28:7e:fa:d3:95:be:2e:
         e1:6c:5b:7e:5f:23:d1:c3:dc:79:e7:6f:60:53:21:a3:27:e8:
         c0:b4:4c:a9:3f:f0:17:5c:36:a2:a4:cc:04:a7:d2:dc:c7:d9:
         1d:80:1b:a4:5b:82:47:fa:d9:06:e8:64:07:18:36:c7:7e:5c:
         79:ca:d1:c3:29:ac:15:00:f3:be:b3:da:2a:1f:1b:08:49:8e:
         11:f3:8c:d2:e8:ad:31:df:9f:27:cb:e6:ba:d5:dc:fc:e7:2b:
         28:88:dc:88:43:5a:88:cb:0a:00:73:4c:cf:ee:d3:94:dd:ea:
         5c:a4:73:02:bb:2f:4e:f5:da:a5:f5:44:25:7e:2b:d4:88:7b:
         c8:30:6b:d8:a0:51:b2:f8:bb:ea:90:1b:1e:7f:77:7e:f3:fc:
         ca:99:c7:e2:99:11:5e:25:f7:40:e9:e3:ac:32:6b:94:00:c2:
         90:e4:a4:c4:58:74:6c:b7:a2:e4:b6:47:df:18:8f:9c:0b:83:
         cc:60:b0:7c:e3:09:73:a0:da:0b:ed:4e:2e:ae:41:c2:64:75:
         c8:ac:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net