Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e3134342e38332e302f32342d3332203d3e20313336373837.roa
File:                     34352e3134342e38332e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          G8Q3k8FLDcLtHv0TItHAk5z/3L1lA02sUO19QE8TYG8=
Subject key identifier:   59:B1:DC:37:B0:B3:B8:97:AD:8C:FB:67:FB:C4:74:00:91:A5:5C:19
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       49C73712B538581C919B508BBD9BDD3C7F8A521D
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3134342e38332e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:31:45 +0000
ROA not before:           Wed 28 Dec 2022 09:26:45 +0000
ROA not after:            Wed 27 Dec 2023 09:31:45 +0000
asID:                     136787
IP address blocks:        45.144.83.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c7:37:12:b5:38:58:1c:91:9b:50:8b:bd:9b:dd:3c:7f:8a:52:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Dec 28 09:26:45 2022 GMT
            Not After : Dec 27 09:31:45 2023 GMT
        Subject: CN=59B1DC37B0B3B897AD8CFB67FBC4740091A55C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:4f:46:9a:b0:16:34:26:cd:6b:4a:19:7d:
                    4b:7c:82:d3:e4:69:c1:3c:ef:b2:f4:8a:dc:11:a5:
                    57:6a:15:0d:0c:6d:88:fe:21:4a:11:cd:a3:74:c6:
                    19:cc:33:9e:40:e2:10:1c:2e:ab:bd:77:cd:b0:3a:
                    a3:31:7e:aa:a8:4b:eb:f8:1a:9f:20:dd:d9:f7:11:
                    90:f4:e6:99:71:24:d5:2a:14:c7:ea:ee:0f:21:b6:
                    fe:fd:7a:7c:24:71:03:a9:99:ba:44:86:bd:12:91:
                    2b:56:54:b9:ef:2d:6a:79:e1:6e:20:14:f2:49:9e:
                    ad:b1:68:65:de:10:e7:0a:fe:e1:64:eb:dc:72:7e:
                    8c:8a:34:6a:ab:f5:12:2d:7e:b5:9f:20:58:d1:5c:
                    62:77:38:73:4d:0a:b0:62:ab:7a:1e:c1:51:66:3b:
                    8f:46:f4:33:51:d5:9b:91:00:55:5f:d1:ea:82:fa:
                    bc:21:d9:89:e2:8e:0e:e8:b6:9c:2a:50:7b:89:14:
                    58:ad:63:12:e0:80:06:c4:75:46:b6:4c:6f:4d:ba:
                    ae:f3:86:c1:c7:1c:4c:95:c5:cb:26:a2:b6:41:1e:
                    ec:b9:86:f7:d3:0b:ae:7f:9e:4d:ac:43:db:97:25:
                    e4:8e:39:17:65:96:3e:f9:ec:8c:5e:33:99:ac:aa:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:DC:37:B0:B3:B8:97:AD:8C:FB:67:FB:C4:74:00:91:A5:5C:19
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3134342e38332e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:77:81:78:8d:89:57:55:47:0f:43:cb:4e:95:b8:75:ee:
         16:a6:da:dc:a5:8e:73:00:ba:c7:67:04:cf:79:6a:6f:a6:c0:
         4e:62:ea:43:73:69:fb:8a:41:43:26:0a:ac:a3:bf:ea:7f:cd:
         a6:86:90:e4:41:c2:b6:03:63:62:27:fd:c1:28:0a:bc:ca:5d:
         f5:71:c8:b1:f9:9f:91:21:66:f2:0c:b1:95:af:04:05:2a:2f:
         90:97:ef:27:0f:94:cc:e9:6e:03:13:fc:d7:f0:99:3b:7b:8a:
         82:d1:2f:60:46:b7:e9:4d:21:c6:66:e9:64:94:46:1d:dc:dc:
         39:ae:cd:d4:c5:14:d3:32:70:73:d5:23:c2:cc:0b:d7:91:7b:
         c6:3b:72:fb:a3:0f:c8:bd:11:9a:2d:38:e7:2c:2c:1f:b6:03:
         61:c2:66:2d:3e:5a:99:30:18:14:e5:62:38:4f:d8:dc:9d:03:
         ea:22:8e:d5:bf:30:39:b0:ca:25:ab:26:53:e8:bf:d8:b7:47:
         44:8b:07:95:6a:d8:2c:22:f4:8d:f4:7f:a5:db:2c:b3:77:26:
         84:d6:2e:cc:c1:d5:96:00:73:7e:56:9c:bd:c4:bd:53:9f:51:
         ce:7c:66:1f:15:ce:de:41:04:a8:70:ec:41:ae:7b:7f:85:21:
         72:1e:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net