Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e3134342e38302e302f32342d3332203d3e20313336373837.roa
File:                     34352e3134342e38302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          uIn8bHENgo2p8B17Y31Hc+UYr5t6Hdzwt7gxwaZ0SQY=
Subject key identifier:   69:D8:81:1B:8D:03:02:63:37:55:94:04:EC:C8:56:78:F1:AB:21:C1
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       44EBBC57556D0AEFA7E2C2E481CA72720A39BBCE
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3134342e38302e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:30:28 +0000
ROA not before:           Wed 28 Dec 2022 09:25:28 +0000
ROA not after:            Wed 27 Dec 2023 09:30:28 +0000
asID:                     136787
IP address blocks:        45.144.80.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:eb:bc:57:55:6d:0a:ef:a7:e2:c2:e4:81:ca:72:72:0a:39:bb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Dec 28 09:25:28 2022 GMT
            Not After : Dec 27 09:30:28 2023 GMT
        Subject: CN=69D8811B8D03026337559404ECC85678F1AB21C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:cb:ff:27:81:7a:53:f4:b1:0d:9a:dc:f9:
                    e8:54:96:7b:2d:8c:c8:57:23:96:b3:41:e8:89:b6:
                    b8:32:20:48:02:66:b3:f0:32:c0:c2:ac:a2:3e:de:
                    44:d5:f5:3b:4e:b4:60:c9:7e:71:0d:f2:da:53:74:
                    bf:19:40:b5:9c:9c:1f:50:ed:69:6a:c4:ec:7b:83:
                    51:23:42:b2:2a:0a:a4:ba:ce:98:0a:d7:33:82:b0:
                    77:a2:06:a7:32:c3:1d:00:20:f1:e0:b1:55:be:5a:
                    43:06:ed:79:fd:ea:7e:c4:d4:5f:d7:1e:79:df:ec:
                    9b:71:1b:bb:14:f3:b3:0a:cd:c1:81:7c:c1:df:a4:
                    57:3e:62:90:c8:fd:8e:51:a2:7f:55:fd:a6:98:8d:
                    d1:e9:26:24:bc:cf:39:37:53:16:8f:f6:be:cf:9f:
                    02:a4:38:b1:22:5c:9b:57:50:e8:e2:c6:cc:39:3c:
                    07:da:cf:12:2f:aa:5a:33:ab:18:b1:8e:e0:de:4e:
                    0d:e4:f0:13:ff:e8:39:bd:a8:3f:bc:34:5c:5b:2e:
                    68:1e:fd:3e:c8:22:78:da:4d:bb:3c:75:81:65:ec:
                    d2:13:02:c5:32:8a:e0:20:ac:5d:b1:38:56:ff:0a:
                    66:e0:bd:09:e1:b1:0b:f6:f0:d6:d4:bc:1c:34:b5:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:81:1B:8D:03:02:63:37:55:94:04:EC:C8:56:78:F1:AB:21:C1
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3134342e38302e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:83:3a:15:26:3b:1a:eb:1e:2a:7a:6c:80:8f:aa:30:b8:c6:
         a1:bf:5f:be:50:6f:c3:b7:5d:c8:10:9b:96:b4:88:85:be:a7:
         54:7c:f6:31:5c:7b:99:ec:65:9c:79:c1:dc:76:18:3f:cb:9f:
         17:96:a0:9c:f8:da:ed:f7:4e:38:2e:d6:35:58:61:b2:f9:bf:
         9d:66:68:50:55:09:e6:0d:67:50:ec:c4:61:c2:9e:c0:08:c6:
         8e:11:98:c0:b8:fc:30:9a:0e:f7:bc:9d:17:e5:f3:83:ae:03:
         fd:38:e8:b1:9d:be:73:7d:6e:b2:28:38:5d:22:35:1b:53:95:
         f0:06:06:85:6b:51:18:59:6d:f5:fb:59:e1:28:b5:1d:c4:08:
         f2:dc:dd:ae:09:5e:2f:85:ab:68:a6:16:88:c5:a6:9c:d4:f9:
         ee:20:48:f3:16:e0:fc:35:9a:4b:12:e0:4a:9f:dc:7c:34:81:
         4d:70:96:df:45:b5:31:7a:cd:89:db:d0:ed:32:58:f6:bd:28:
         a9:98:8b:39:03:a3:66:31:fa:0e:5a:fe:2d:b6:6c:70:d3:c6:
         54:0b:c7:b0:ff:b8:08:d2:33:95:7c:85:4d:d3:8c:e9:8c:b9:
         ae:63:a9:87:43:06:48:bc:f9:8c:c5:f2:50:6c:e2:0f:c1:f8:
         29:a2:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net