Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e38322e37322e302f32322d3234203d3e203437353833.roa
File:                     34352e38322e37322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          cLk2aMUvLANUPkI8Zz7XI/rae4OqrDoE3W3HmA58G1g=
Subject key identifier:   59:87:6B:3F:5E:E8:21:95:B1:E1:AD:81:E6:D6:61:20:83:31:94:8F
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       02F2454A2F703D5E68F61F6C9ED648B36ECF8F57
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e38322e37322e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     47583
IP address blocks:        45.82.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f2:45:4a:2f:70:3d:5e:68:f6:1f:6c:9e:d6:48:b3:6e:cf:8f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=59876B3F5EE82195B1E1AD81E6D661208331948F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:23:29:01:e3:02:f5:92:93:e1:78:08:cd:
                    c9:dc:24:fb:69:f7:a2:a8:18:22:08:08:0c:4c:e1:
                    85:32:4b:89:ae:1f:33:9e:71:08:3d:41:87:b7:10:
                    03:1d:0b:1d:cf:0a:85:9e:f1:08:b9:7e:ac:cb:dc:
                    d7:8f:40:89:56:e9:ea:f6:57:ee:21:23:1a:af:00:
                    76:24:cc:cd:37:03:a8:43:f5:d3:e3:d3:64:55:a1:
                    58:7a:6c:96:83:75:ff:77:33:03:9b:ee:26:e1:2e:
                    41:d0:cf:1b:7e:4f:6c:cf:3c:47:8b:82:32:46:51:
                    6b:5d:a8:7e:ab:9b:95:25:c7:e5:72:2c:f7:02:05:
                    b4:f3:3d:42:00:41:9e:0f:80:74:16:77:b4:4f:d5:
                    44:3a:1c:20:ae:d9:f8:2f:5c:ed:4a:bf:30:af:36:
                    e1:3c:1c:31:7f:a3:a0:30:d3:ee:22:9b:e6:55:e3:
                    db:48:b7:e7:e4:5c:3e:45:b0:80:79:37:17:8c:d9:
                    c4:95:5b:3d:cd:b5:7a:a9:98:0f:12:9b:15:5d:47:
                    e7:32:19:dd:2e:45:6a:cc:57:a0:3c:05:9c:15:b7:
                    c0:ed:bc:95:d6:5c:40:64:5f:af:80:d2:48:05:65:
                    26:34:7b:40:40:9f:26:21:13:64:f6:56:90:19:b9:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:87:6B:3F:5E:E8:21:95:B1:E1:AD:81:E6:D6:61:20:83:31:94:8F
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e38322e37322e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:0b:85:11:a4:2a:0c:e9:1f:d6:b2:96:13:52:3e:dd:1c:
         ff:0d:d1:ed:24:da:79:b3:8a:6a:fa:06:c2:98:01:e7:12:07:
         64:75:b8:38:32:d4:62:6e:5f:d0:f8:a4:e3:4a:af:07:9c:78:
         c5:20:e1:d1:7b:58:0b:e8:dd:e7:f0:18:2d:a2:3c:ef:00:c8:
         53:e8:5b:2f:65:f6:5d:3f:8d:7f:07:44:28:70:b5:5d:f1:85:
         51:7d:ca:7d:01:ca:9e:45:6a:29:d1:d6:29:16:79:34:cc:72:
         00:6a:09:2f:dd:22:ce:df:14:d2:08:4d:53:3b:87:85:51:f8:
         e2:5c:cc:8b:e7:25:be:71:62:0e:63:91:db:12:a1:a4:59:7f:
         df:58:20:d1:86:78:31:12:93:af:c2:ff:6d:8c:54:20:75:64:
         93:54:96:84:05:73:c9:ba:14:9a:95:89:08:12:8f:a4:33:99:
         69:c7:46:f4:6c:51:89:b6:8d:d0:58:f4:45:15:ff:35:d7:0f:
         92:85:bd:17:0a:73:b0:15:6b:ff:38:9b:be:34:29:4e:50:9a:
         7b:1d:36:a4:16:5e:e2:64:53:f7:05:c6:7b:56:c6:54:3d:7d:
         5b:71:e3:70:28:d9:dd:6d:9c:93:df:d8:5c:d5:c1:91:7d:6f:
         63:d9:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net