Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323132303737.roa
File:                     34352e38352e3134342e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          jodYn814oqXPaxpd4rBNKTsNHy2heJA6qZh2orFOCq0=
Subject key identifier:   B7:0C:9D:38:73:B4:4A:6D:D7:18:E0:E3:6C:EF:C4:26:2C:00:DC:B2
Certificate issuer:       /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial:       538E6860795B876857BCFB057B752E19979DB33E
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:38 +0000
ROA not before:           Thu 31 Dec 2020 18:46:38 +0000
ROA not after:            Thu 30 Dec 2021 18:51:38 +0000
asID:                     212077
IP address blocks:        45.85.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8e:68:60:79:5b:87:68:57:bc:fb:05:7b:75:2e:19:97:9d:b3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
        Validity
            Not Before: Dec 31 18:46:38 2020 GMT
            Not After : Dec 30 18:51:38 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:98:3c:75:df:89:95:e3:72:7b:4b:b8:cc:
                    f4:c7:ae:d0:85:db:ef:f4:56:20:6a:4f:12:b6:4a:
                    c0:f9:f3:25:b3:0c:f3:e6:94:b9:2d:48:7e:09:47:
                    ca:79:b0:95:29:7c:ae:40:f6:bb:c7:b6:d2:93:d4:
                    3d:f7:3e:b1:b2:22:0c:d4:03:e6:f6:8d:31:bc:cb:
                    92:d8:37:92:48:91:8b:4a:7c:1f:6e:b0:69:0b:ed:
                    77:3d:00:62:67:e8:b0:c2:1d:18:e8:8a:86:13:f2:
                    38:25:80:b6:71:b9:11:ed:23:4e:dd:96:52:ce:0a:
                    33:cc:99:6c:d2:f6:04:26:c7:30:35:b6:4c:36:69:
                    26:ca:f7:8e:ba:fc:d4:e8:30:b2:73:c7:6c:aa:b5:
                    91:91:5b:74:92:b2:07:8f:83:74:9f:d4:4d:31:3e:
                    b4:cd:99:15:8b:d4:b9:93:97:69:16:d8:95:ab:b8:
                    45:ba:60:ea:13:bb:9f:78:a6:3f:79:c8:89:18:b1:
                    a9:b4:34:7a:f7:2e:f6:06:3a:1b:21:6c:ea:f9:21:
                    7f:63:5c:40:6a:9f:95:2e:a2:a2:7a:a0:86:86:ab:
                    88:1b:4e:35:7b:fe:a3:cd:8b:ac:c5:b4:42:c4:31:
                    89:b9:d4:be:34:5e:2e:67:be:d3:97:ee:6e:28:6d:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:9D:38:73:B4:4A:6D:D7:18:E0:E3:6C:EF:C4:26:2C:00:DC:B2
            X509v3 Authority Key Identifier:
                keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:36:85:d3:d3:8c:8b:6a:db:4b:3d:16:e7:69:5c:ff:72:b3:
         1f:71:eb:1b:43:7f:89:58:2a:66:42:e4:af:1f:8d:19:41:0e:
         ad:f4:e4:47:7c:b7:29:69:fa:27:eb:8c:03:59:d7:9a:5c:2b:
         6b:8b:db:c0:33:85:6f:06:9a:e5:36:08:20:cf:fc:63:b4:ce:
         31:b1:29:1c:76:36:e7:a3:d0:42:1e:f4:2e:a5:a2:3c:a8:8b:
         21:69:a7:06:38:d1:b3:45:a0:1c:c7:1a:29:77:9e:da:a7:57:
         74:9a:f9:b7:4c:fb:21:3f:00:77:92:6a:89:96:7a:be:9f:cd:
         ef:9c:69:a6:c3:8e:79:25:70:79:70:6c:1e:39:8c:f1:2e:ca:
         d1:86:97:05:73:e6:56:46:f1:d4:ce:81:50:9f:13:16:49:46:
         5a:a9:86:71:8f:9e:67:c4:e7:2f:28:ad:9b:fa:fc:7f:e5:55:
         20:46:7f:c1:ec:76:c5:73:3a:38:98:dd:ca:2b:9d:bc:34:4d:
         bb:94:22:dc:68:d9:32:54:bd:84:73:3e:0a:72:0b:f9:99:41:
         71:a7:44:e4:b8:75:fc:78:db:b5:c6:c6:8b:b2:55:e8:e1:de:
         4f:37:7c:3a:d7:4f:2f:79:48:10:e1:6b:44:1e:22:08:e0:c5:
         b7:ec:fb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net