Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
File:                     34352e38302e3135322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          WmINgfZCWYVI8j2AiKYcKz3spu6PswWDvi3GiRYHi/0=
Subject key identifier:   2D:56:36:20:98:F9:1E:70:B0:71:7F:33:73:1C:D9:A2:48:84:6E:CF
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       667F64DE27D830C29FFC29F06D9FB28547FC9139
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:02 +0000
ROA not before:           Sat 22 Oct 2022 04:29:02 +0000
ROA not after:            Sat 21 Oct 2023 04:34:02 +0000
asID:                     47583
IP address blocks:        45.80.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7f:64:de:27:d8:30:c2:9f:fc:29:f0:6d:9f:b2:85:47:fc:91:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:02 2022 GMT
            Not After : Oct 21 04:34:02 2023 GMT
        Subject: CN=2D56362098F91E70B0717F33731CD9A248846ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:dd:34:73:d3:ab:dc:f4:5d:14:19:53:ad:
                    00:20:15:ee:4e:f7:93:84:d6:57:eb:fa:72:fd:79:
                    da:84:1d:54:e8:92:ae:1a:75:97:c7:41:f1:24:e9:
                    f2:85:0a:ed:29:9a:b6:cf:bc:ce:03:26:cc:e7:9f:
                    cf:03:33:ca:86:98:d9:2b:d5:59:cf:87:1a:8a:f9:
                    0b:99:a4:01:72:11:2b:61:ea:ba:0b:2d:3b:04:6a:
                    d4:a2:50:73:e9:9c:dd:80:cd:9e:79:1d:e8:86:22:
                    9c:f6:a3:ab:a9:f6:ee:b8:ef:91:fc:44:fb:05:4a:
                    ea:bc:69:bb:00:bc:bb:0f:ef:eb:6f:c4:f7:31:9c:
                    2f:d7:16:a5:4e:13:5f:99:05:73:61:c7:68:cc:e0:
                    8c:5c:ba:ee:c6:49:3a:51:31:a0:34:cd:72:6e:08:
                    2d:e2:d2:47:06:68:b1:3c:7b:75:2a:3e:6c:1a:2e:
                    12:cc:59:24:44:b2:e3:23:66:e0:b7:be:b0:79:fd:
                    79:a6:41:0d:ae:fa:09:dc:1f:b9:4a:dc:39:52:28:
                    b5:e2:4f:de:27:1d:a3:aa:02:b7:62:6a:e5:ae:72:
                    4d:a2:a9:c3:8e:31:0f:c3:a3:13:53:42:a0:39:72:
                    ff:a7:85:ab:c6:5b:5b:cf:dc:24:6c:9c:ea:02:63:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:56:36:20:98:F9:1E:70:B0:71:7F:33:73:1C:D9:A2:48:84:6E:CF
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e38302e3135322e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:9c:29:9b:d2:48:d5:91:3f:fc:74:be:c8:f7:29:f3:d4:
         8e:22:cf:7c:41:a6:87:5b:82:76:4d:66:38:05:68:d7:d1:82:
         58:e6:09:d7:2f:3b:7b:b8:6b:01:dc:11:1e:48:ad:eb:8c:96:
         e7:51:57:88:4d:e2:94:c8:b0:f6:21:97:9d:a1:13:09:5c:41:
         ae:87:ca:5d:9f:69:86:7f:a6:5c:e2:8c:58:02:62:45:33:ae:
         bc:83:ec:5d:6c:a1:ec:dc:23:a9:09:69:f1:03:04:15:44:93:
         d1:72:8d:6e:8f:8c:61:dd:6d:a1:8c:98:24:2a:a9:79:4d:08:
         e5:9f:40:0d:c9:d3:fa:11:dd:c6:38:a8:74:5e:1e:fe:41:0f:
         57:be:d4:dd:da:75:14:75:ac:06:c3:2d:b1:58:07:94:88:28:
         92:79:dc:c4:54:24:d6:7e:68:c7:78:1d:9b:8b:d3:f9:98:bc:
         d2:99:79:d4:34:9a:6c:0a:4f:76:50:fc:2c:e8:5e:99:3e:7e:
         4a:7f:8b:16:42:b9:56:66:5c:45:2e:20:79:a6:e3:63:54:60:
         17:ab:1a:dd:cc:46:c6:e4:ad:97:42:f5:24:4e:d4:f7:17:4a:
         30:08:13:4a:62:97:7e:89:99:bc:b9:1e:e9:4d:1c:04:6e:4f:
         2f:59:6b:62
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUZn9k3ifYMMKf/CnwbZ+yhUf8kTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI5MDJaFw0yMzEwMjEwNDM0MDJaMDMxMTAvBgNV
BAMTKDJENTYzNjIwOThGOTFFNzBCMDcxN0YzMzczMUNEOUEyNDg4NDZFQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppt00c9Or3PRdFBlTrQAgFe5O
95OE1lfr+nL9edqEHVTokq4adZfHQfEk6fKFCu0pmrbPvM4DJsznn88DM8qGmNkr
1VnPhxqK+QuZpAFyESth6roLLTsEatSiUHPpnN2AzZ55HeiGIpz2o6up9u6475H8
RPsFSuq8absAvLsP7+tvxPcxnC/XFqVOE1+ZBXNhx2jM4Ixcuu7GSTpRMaA0zXJu
CC3i0kcGaLE8e3UqPmwaLhLMWSREsuMjZuC3vrB5/XmmQQ2u+gncH7lK3DlSKLXi
T94nHaOqArdiauWuck2iqcOOMQ/DoxNTQqA5cv+nhavGW1vP3CRsnOoCY3BxAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQULVY2IJj5HnCwcX8zcxzZokiEbs8wHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zNDM1MmUzODMwMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLVCYMA0GCSqGSIb3DQEBCwUAA4IBAQAYLJwpm9JI
1ZE//HS+yPcp89SOIs98QaaHW4J2TWY4BWjX0YJY5gnXLzt7uGsB3BEeSK3rjJbn
UVeITeKUyLD2IZedoRMJXEGuh8pdn2mGf6Zc4oxYAmJFM668g+xdbKHs3COpCWnx
AwQVRJPRco1uj4xh3W2hjJgkKql5TQjln0ANydP6Ed3GOKh0Xh7+QQ9XvtTd2nUU
dawGwy2xWAeUiCiSedzEVCTWfmjHeB2bi9P5mLzSmXnUNJpsCk92UPws6F6ZPn5K
f4sWQrlWZlxFLiB5puNjVGAXqxrdzEbG5K2XQvUkTtT3F0owCBNKYpd+iZm8uR7p
TRwEbk8vWWti
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net