Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134352e302f32342d3234203d3e20323132323938.roa
File:                     34352e38352e3134352e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          0ZDYNOYDtzFIspR5N6n40juD7o4gGj/rTEJigpnxDsY=
Subject key identifier:   69:FA:45:AC:3B:26:AE:AE:2A:DE:19:00:65:AA:2E:3B:E4:57:0C:26
Certificate issuer:       /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial:       757C4AA99555C087669B49678CE312C062121254
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134352e302f32342d3234203d3e20323132323938.roa
Signing time:             Mon 07 Dec 2020 19:12:57 +0000
ROA not before:           Mon 07 Dec 2020 19:07:57 +0000
ROA not after:            Mon 06 Dec 2021 19:12:57 +0000
asID:                     212298
IP address blocks:        45.85.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7c:4a:a9:95:55:c0:87:66:9b:49:67:8c:e3:12:c0:62:12:12:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
        Validity
            Not Before: Dec  7 19:07:57 2020 GMT
            Not After : Dec  6 19:12:57 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:ee:c9:71:c7:83:a4:c2:8b:c3:98:8a:64:
                    48:c0:91:29:bd:18:fa:9f:13:16:17:55:61:f0:aa:
                    91:4f:97:bb:aa:83:b9:bd:e8:61:b6:4c:b0:96:20:
                    f8:50:4a:5f:8d:7f:63:0e:8f:ad:9e:1e:9c:27:e5:
                    81:4e:fc:77:a1:2b:7a:14:d9:ae:9d:53:89:46:2d:
                    19:81:a6:df:96:e4:0d:96:9b:a1:f3:28:45:3e:f2:
                    d6:fd:af:7f:8a:43:d8:0b:19:f5:06:b3:5c:d5:b1:
                    e5:f9:0f:ac:83:9a:37:ff:cc:01:3b:7d:a2:ab:92:
                    79:c0:80:71:8c:19:cd:46:06:5f:d5:e8:29:e3:ba:
                    88:42:49:8b:34:1a:24:51:21:be:20:31:73:7c:c6:
                    72:34:89:e1:b6:31:cd:1d:3e:93:c6:79:19:df:80:
                    f8:b9:08:67:42:a4:bb:a9:be:db:ce:65:4d:4e:5e:
                    43:27:01:58:ca:0a:03:1e:75:c7:70:73:ae:4e:a6:
                    91:ae:5e:3d:f8:14:4b:e8:f9:bc:5c:fa:38:b4:40:
                    ad:2b:e0:d1:82:e1:3e:e4:0c:ee:c3:da:7c:39:78:
                    1a:49:9c:42:ea:1d:e6:0e:7c:3f:fc:d6:f6:31:a2:
                    f0:09:e5:84:35:41:d2:d4:91:ae:57:62:35:3e:0d:
                    de:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FA:45:AC:3B:26:AE:AE:2A:DE:19:00:65:AA:2E:3B:E4:57:0C:26
            X509v3 Authority Key Identifier:
                keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134352e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:b8:9b:6a:bb:c6:2a:42:eb:e7:4f:87:74:92:29:79:85:
         5d:1e:c0:33:67:ea:46:b6:c3:39:cf:fb:74:77:9d:06:48:49:
         14:ff:ef:0d:03:30:17:9d:fa:ad:02:c5:22:f0:1c:db:2b:2b:
         a1:0f:c2:a4:8f:a5:90:f6:87:03:c9:90:86:e9:3e:b3:d8:fa:
         73:b0:19:b9:8f:b8:9a:d8:58:7f:f4:a8:a0:31:63:30:29:08:
         9f:a9:5e:f0:75:45:f1:c5:75:f7:c1:97:9b:8c:b3:3e:66:ce:
         10:8f:5a:02:77:02:a6:ed:51:a1:09:62:cc:94:8b:4e:94:07:
         09:02:71:85:2e:73:a8:e5:bc:48:3d:45:c6:98:99:4f:d7:01:
         2f:51:67:bb:de:51:5d:5e:42:23:1b:af:ef:ee:b7:d5:09:8b:
         4c:a9:30:35:7b:9c:92:4a:ce:be:de:5e:1c:0f:22:87:5f:66:
         37:5f:ff:8e:b1:49:e0:5a:56:03:29:a5:bc:87:a3:6b:5c:a0:
         bf:98:b6:bf:52:a5:90:de:7a:51:dd:71:52:f9:98:ec:aa:f1:
         40:eb:58:90:9c:27:ce:5a:48:f8:ca:a7:cf:8e:5e:70:37:d5:
         c5:7f:c6:dd:95:e9:0c:b4:b4:28:ec:ca:6e:34:5a:64:cf:ad:
         5a:40:ac:75
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUdXxKqZVVwIdmm0lnjOMSwGISElQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc0OTU3NTc3MTM5NjA3MGMxZWI4Y2NlYmZmYWY3NWYw
NWRiYWYzYzAeFw0yMDEyMDcxOTA3NTdaFw0yMTEyMDYxOTEyNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJGMEVFQzk3MUM3ODNBNEMy
OEJDMzk4OEE2NDQ4QzA5MTI5QkQxOEZBOUYxMzE2MTc1NTYxRjBBQTkxNEY5N0JC
QUE4M0I5QkRFODYxQjY0Q0IwOTYyMEY4NTA0QTVGOEQ3RjYzMEU4RkFEOUUxRTlD
MjdFNTgxNEVGQzc3QTEyQjdBMTREOUFFOUQ1Mzg5NDYyRDE5ODFBNkRGOTZFNDBE
OTY5QkExRjMyODQ1M0VGMkQ2RkRBRjdGOEE0M0Q4MEIxOUY1MDZCMzVDRDVCMUU1
RjkwRkFDODM5QTM3RkZDQzAxM0I3REEyQUI5Mjc5QzA4MDcxOEMxOUNENDYwNjVG
RDVFODI5RTNCQTg4NDI0OThCMzQxQTI0NTEyMUJFMjAzMTczN0NDNjcyMzQ4OUUx
QjYzMUNEMUQzRTkzQzY3OTE5REY4MEY4QjkwODY3NDJBNEJCQTlCRURCQ0U2NTRE
NEU1RTQzMjcwMTU4Q0EwQTAzMUU3NUM3NzA3M0FFNEVBNjkxQUU1RTNERjgxNDRC
RThGOUJDNUNGQTM4QjQ0MEFEMkJFMEQxODJFMTNFRTQwQ0VFQzNEQTdDMzk3ODFB
NDk5QzQyRUExREU2MEU3QzNGRkNENkY2MzFBMkYwMDlFNTg0MzU0MUQyRDQ5MUFF
NTc2MjM1M0UwRERFMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsvDuyXHHg6TCi8OYimRIwJEpvRj6nxMWF1Vh8KqRT5e7qoO5vehh
tkywliD4UEpfjX9jDo+tnh6cJ+WBTvx3oSt6FNmunVOJRi0ZgabfluQNlpuh8yhF
PvLW/a9/ikPYCxn1BrNc1bHl+Q+sg5o3/8wBO32iq5J5wIBxjBnNRgZf1egp47qI
QkmLNBokUSG+IDFzfMZyNInhtjHNHT6TxnkZ34D4uQhnQqS7qb7bzmVNTl5DJwFY
ygoDHnXHcHOuTqaRrl49+BRL6Pm8XPo4tECtK+DRguE+5Azuw9p8OXgaSZxC6h3m
Dnw//Nb2MaLwCeWENUHS1JGuV2I1Pg3eJwIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FGn6Raw7Jq6uKt4ZAGWqLjvkVwwmMB8GA1UdIwQYMBaAFDdJV1dxOWBwweuMzr/6
918F2688MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85LzM3NDk1
NzU3NzEzOTYwNzBDMUVCOENDRUJGRkFGNzVGMDVEQkFGM0MuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9OMGxYVjNFNVlIREI2NHpPdl9yM1h3WGJyencuY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzkvMzQzNTJlMzgzNTJlMzEzNDM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LVWRMA0GCSqGSIb3DQEBCwUAA4IBAQBuVbibarvGKkLr50+HdJIpeYVdHsAzZ+pG
tsM5z/t0d50GSEkU/+8NAzAXnfqtAsUi8BzbKyuhD8Kkj6WQ9ocDyZCG6T6z2Ppz
sBm5j7ia2Fh/9KigMWMwKQifqV7wdUXxxXX3wZebjLM+Zs4Qj1oCdwKm7VGhCWLM
lItOlAcJAnGFLnOo5bxIPUXGmJlP1wEvUWe73lFdXkIjG6/v7rfVCYtMqTA1e5yS
Ss6+3l4cDyKHX2Y3X/+OsUngWlYDKaW8h6NrXKC/mLa/UqWQ3npR3XFS+ZjsqvFA
61iQnCfOWkj4yqfPjl5wN9XFf8bdlekMtLQo7MpuNFpkz61aQKx1
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net