Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133352e302f32342d3234203d3e203537303433.roa
File:                     34352e382e3133352e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier:          BtRZKXv8kAxeLP7mcBMLB6ZVKpJ3lG1fWhOOr7UbRF8=
Subject key identifier:   D9:78:B8:7F:A9:CE:7B:F3:FC:2A:2A:65:4E:A8:B1:20:27:3B:62:8E
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       258D764C43B2605C2F79F0568E13CB1238C851D6
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133352e302f32342d3234203d3e203537303433.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     57043
IP address blocks:        45.8.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8d:76:4c:43:b2:60:5c:2f:79:f0:56:8e:13:cb:12:38:c8:51:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=D978B87FA9CE7BF3FC2A2A654EA8B120273B628E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:4b:51:35:9a:97:19:90:f6:39:e9:a3:bc:
                    4f:96:70:81:72:04:9b:54:6f:67:08:d6:52:f6:8f:
                    b8:e2:08:3e:dc:f7:e8:d3:0b:d1:e7:b8:a3:8e:3e:
                    2d:95:a6:7c:4d:ed:b6:54:03:5b:65:a4:39:8f:1e:
                    dd:28:ad:0a:aa:11:ca:3c:d8:15:a2:0c:b0:ab:ae:
                    76:7f:08:92:f3:9a:e8:12:aa:f7:81:01:b2:22:4d:
                    fc:4a:dd:0e:0c:41:9b:d3:bb:6f:62:97:41:1c:93:
                    80:03:58:3c:2e:3b:29:89:fa:c2:ed:1d:f8:46:85:
                    6b:9f:cc:df:02:1c:83:4c:6c:95:8c:cd:1e:a4:18:
                    00:96:c3:41:b1:7f:8a:62:8d:1d:ed:25:5e:63:5a:
                    39:70:fe:c3:1b:60:bb:6e:f9:ee:4a:25:7c:6b:fa:
                    a8:43:d1:a9:c7:58:44:4b:0e:c0:1f:67:03:35:2b:
                    21:bc:fc:93:f8:0e:77:7d:40:49:74:2d:93:9c:35:
                    e4:7f:e2:e7:14:a0:1a:84:d7:df:8b:cf:8d:d6:c2:
                    a5:2d:69:7c:60:ed:0e:d5:97:30:17:7c:45:93:82:
                    25:26:71:6f:13:4b:3a:00:3f:5e:58:98:6c:93:96:
                    03:6a:25:85:37:c0:14:70:9d:ac:43:a5:46:d3:32:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:B8:7F:A9:CE:7B:F3:FC:2A:2A:65:4E:A8:B1:20:27:3B:62:8E
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133352e302f32342d3234203d3e203537303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:b7:ee:c5:82:92:1f:f3:6e:a3:c3:84:17:9b:5c:76:8c:7f:
         2f:42:0f:52:76:2d:7c:6a:69:21:e1:20:c8:d1:e7:90:af:12:
         e7:bb:7b:eb:4b:53:b6:21:e0:99:7c:fd:bf:d5:49:dc:a0:28:
         0e:6d:56:9b:e6:6a:b4:e7:14:18:ca:a4:41:63:95:65:f1:75:
         2e:00:e3:2c:60:fd:02:f3:b3:a7:01:ea:8f:4c:ab:e4:f0:0d:
         4a:d8:47:15:c2:41:ff:2e:b3:f4:8f:58:09:8f:2d:67:88:e0:
         8a:bc:60:c4:52:fd:8a:1d:82:9a:7c:e4:83:59:3b:c0:ee:93:
         21:a9:a4:20:37:d7:16:f7:82:fd:0d:5d:78:8e:e1:f7:05:23:
         91:ce:63:ec:4b:9e:22:ea:e2:a3:e2:91:fc:1a:db:d1:1d:92:
         26:b4:06:c6:93:66:63:86:9c:46:ec:93:34:cd:11:6d:87:5d:
         3b:50:29:8f:2e:80:94:2f:d1:83:3a:fc:e6:80:21:11:f4:9a:
         97:26:3e:a4:3a:f0:d5:93:87:60:e3:76:a4:c4:39:a6:0e:a2:
         a7:59:c6:a6:14:3d:d9:cb:2e:0e:0c:3d:1f:74:0c:05:be:6a:
         60:1f:3d:57:e3:8f:bf:8f:a8:36:84:e6:fc:8b:6b:b9:d5:86:
         0f:fc:21:de
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUJY12TEOyYFwvefBWjhPLEjjIUdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjEwMjIwNDI4NThaFw0yMzEwMjEwNDMzNThaMDMxMTAvBgNV
BAMTKEQ5NzhCODdGQTlDRTdCRjNGQzJBMkE2NTRFQThCMTIwMjczQjYyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xktRNZqXGZD2OemjvE+WcIFy
BJtUb2cI1lL2j7jiCD7c9+jTC9HnuKOOPi2VpnxN7bZUA1tlpDmPHt0orQqqEco8
2BWiDLCrrnZ/CJLzmugSqveBAbIiTfxK3Q4MQZvTu29il0Eck4ADWDwuOymJ+sLt
HfhGhWufzN8CHINMbJWMzR6kGACWw0Gxf4pijR3tJV5jWjlw/sMbYLtu+e5KJXxr
+qhD0anHWERLDsAfZwM1KyG8/JP4Dnd9QEl0LZOcNeR/4ucUoBqE19+Lz43WwqUt
aXxg7Q7VlzAXfEWTgiUmcW8TSzoAP15YmGyTlgNqJYU3wBRwnaxDpUbTMu8RAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQU2Xi4f6nOe/P8KiplTqixICc7Yo4wHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NS8zNDM1MmUzODJlMzEzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNzMw
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0IhzANBgkqhkiG9w0BAQsFAAOCAQEAs7fuxYKSH/Nu
o8OEF5tcdox/L0IPUnYtfGppIeEgyNHnkK8S57t760tTtiHgmXz9v9VJ3KAoDm1W
m+ZqtOcUGMqkQWOVZfF1LgDjLGD9AvOzpwHqj0yr5PANSthHFcJB/y6z9I9YCY8t
Z4jgirxgxFL9ih2Cmnzkg1k7wO6TIamkIDfXFveC/Q1deI7h9wUjkc5j7EueIuri
o+KR/Brb0R2SJrQGxpNmY4acRuyTNM0RbYddO1Apjy6AlC/Rgzr85oAhEfSalyY+
pDrw1ZOHYON2pMQ5pg6ip1nGphQ92csuDgw9H3QMBb5qYB89V+OPv4+oNoTm/Itr
udWGD/wh3g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net