Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
File:                     34352e38302e36302e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          S+Hdgnmk1yba+sKaNW8Tu7siAm8vcEnolD7J6EBLYMg=
Subject key identifier:   FB:81:E4:82:08:ED:1F:BB:59:D6:44:86:97:F2:C7:81:85:A8:5F:A2
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       7FB5EAB987CA41604E4F0A192A95A843DA41E791
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:53 +0000
ROA not before:           Sat 22 Oct 2022 04:28:53 +0000
ROA not after:            Sat 21 Oct 2023 04:33:53 +0000
asID:                     203061
IP address blocks:        45.80.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b5:ea:b9:87:ca:41:60:4e:4f:0a:19:2a:95:a8:43:da:41:e7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:53 2022 GMT
            Not After : Oct 21 04:33:53 2023 GMT
        Subject: CN=FB81E48208ED1FBB59D6448697F2C78185A85FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:33:6c:bb:6d:8e:db:a9:48:f7:dc:3c:df:
                    aa:e2:d7:fa:8a:b9:6c:c9:b8:9a:ef:b5:6b:60:94:
                    de:36:47:2c:a0:01:e1:78:6c:09:7e:89:c8:b1:a7:
                    37:63:01:af:cd:da:82:5f:fa:24:04:d6:a8:8a:b4:
                    90:5f:e6:7e:22:78:91:eb:09:c2:c9:ea:ac:a6:91:
                    20:d0:f5:ad:89:ba:d9:62:f0:40:db:fd:2a:1d:7c:
                    22:e2:35:db:d2:4e:7f:35:73:91:e1:8c:b7:3c:02:
                    9d:bc:ca:0c:11:69:9d:26:5b:02:85:28:63:59:32:
                    56:c5:02:84:1b:fd:24:b6:35:e6:bc:47:8e:e0:95:
                    fb:8f:84:d1:d7:8b:1d:4c:94:54:24:54:73:59:df:
                    77:1e:77:19:70:7e:59:60:48:d9:3e:c4:47:e5:3b:
                    ef:95:cb:9e:a9:e6:df:08:7e:8c:c2:b2:3c:94:8e:
                    78:bf:60:fd:30:02:39:0c:a2:c9:17:9d:3a:98:0a:
                    0a:a4:21:ce:9f:8b:47:00:d9:29:d4:72:7e:fe:56:
                    cd:13:8e:39:8a:55:b9:e2:73:df:f6:9b:59:06:eb:
                    2e:03:af:38:c5:9e:0f:ea:7f:c8:34:75:af:f7:23:
                    88:12:19:16:2a:d0:c1:ef:ec:e0:21:22:ab:2a:6f:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:E4:82:08:ED:1F:BB:59:D6:44:86:97:F2:C7:81:85:A8:5F:A2
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:23:af:0a:b2:91:9f:ad:83:8c:50:22:5a:5b:41:67:28:b8:
         51:14:22:52:27:e5:75:92:db:15:a8:c4:20:b8:02:1b:83:2e:
         64:7a:8c:a0:bc:24:3d:a1:57:fb:79:d8:85:1f:e3:d2:d2:25:
         f7:20:89:f5:02:a7:bd:1b:d7:6f:92:27:22:ab:67:48:8f:2f:
         9d:fe:e7:95:94:5d:4f:b2:ed:3c:a4:b0:1f:18:f4:37:40:ea:
         ef:15:6f:f1:6e:11:34:75:07:78:56:4d:dd:f1:16:83:67:4d:
         68:fe:33:b9:05:0e:8a:71:7f:a8:f3:e2:72:70:4e:34:1c:69:
         57:c2:30:15:59:62:3a:0c:97:8a:15:ed:70:4d:21:c1:47:87:
         dc:d6:d9:ab:4b:c1:e4:e4:62:24:2b:b0:9d:42:ff:33:ba:64:
         ae:cb:f0:bb:41:a9:22:78:71:30:42:8e:6c:7a:e0:bd:bd:a5:
         9b:34:d1:2c:47:62:41:8f:ee:02:4c:aa:59:fe:01:09:6a:24:
         a9:43:eb:62:b0:59:c9:cd:84:81:6a:70:62:23:74:f0:75:97:
         3c:33:d3:4a:76:55:0e:d7:08:98:1a:52:d2:f9:63:e5:25:a7:
         ca:40:78:96:54:92:67:b4:f5:15:84:3a:a0:10:32:96:72:10:
         79:67:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net