Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa
File:                     34352e3135322e3138382e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          IJzuVGXNOqS8F10PQco4o0cYojwe546ojuWo5nfuYoY=
Subject key identifier:   29:4A:4C:9F:9E:E1:90:36:1F:DC:7D:77:08:16:41:4B:B3:59:4B:CC
Certificate issuer:       /CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Certificate serial:       44310814D11624C6E3D2642432BBB0D1E49267D7
Authority key identifier: 7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 01 Dec 2020 23:28:21 +0000
ROA not before:           Tue 01 Dec 2020 23:23:21 +0000
ROA not after:            Tue 30 Nov 2021 23:28:21 +0000
asID:                     3356
IP address blocks:        45.152.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:31:08:14:d1:16:24:c6:e3:d2:64:24:32:bb:b0:d1:e4:92:67:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
        Validity
            Not Before: Dec  1 23:23:21 2020 GMT
            Not After : Nov 30 23:28:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:4d:72:b4:2c:2f:d6:39:81:db:44:ed:1f:
                    f5:27:66:3f:85:c8:ab:33:31:d6:5e:c6:66:05:af:
                    38:00:96:e8:09:01:ea:09:c2:78:77:76:64:3d:24:
                    1e:7d:31:da:bc:52:17:6a:e0:0b:5a:95:bf:d4:fe:
                    a3:bc:41:ad:08:fe:36:dd:f4:7f:67:1c:dc:9f:40:
                    d6:1f:77:92:64:d1:4c:72:71:f4:97:e7:a0:65:9d:
                    8c:e2:8f:2c:0d:2a:97:c1:a1:69:78:08:62:50:52:
                    ed:4c:7b:01:4d:81:e7:2b:bb:eb:f6:8e:29:1b:64:
                    55:91:e6:ea:4f:c1:79:00:a7:51:ea:fc:5c:29:5b:
                    83:6b:78:7b:cb:9d:d0:47:53:d3:e7:51:a4:0d:ab:
                    0a:36:ac:62:3a:57:f0:f1:c2:c1:d5:8d:b5:de:f4:
                    60:0b:55:98:fc:db:59:7b:6d:be:57:c2:48:c2:74:
                    b0:0a:3c:dd:dd:c7:3d:f2:86:94:97:c2:7d:84:4a:
                    df:3c:7b:7b:d5:f8:81:91:4b:9d:51:44:e2:16:82:
                    8a:e5:14:68:78:6a:f2:df:5c:47:66:59:a5:e5:9d:
                    18:e9:78:b2:45:9a:80:19:aa:47:37:d9:4a:5a:8b:
                    8c:a1:c0:67:f3:63:b4:22:76:29:99:96:48:86:8f:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:4C:9F:9E:E1:90:36:1F:DC:7D:77:08:16:41:4B:B3:59:4B:CC
            X509v3 Authority Key Identifier:
                keyid:7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:2b:38:2f:e7:88:01:f2:be:10:49:21:1d:b8:7b:30:8c:
         fc:9b:4a:88:fa:3e:8f:64:ab:08:ec:05:47:56:eb:94:dc:91:
         5d:c7:0d:63:d3:a6:89:59:ba:6d:e2:05:60:51:b7:90:7f:c4:
         bf:e8:50:97:36:ad:01:8c:16:ed:a9:b6:06:e4:80:23:8e:c0:
         03:dd:7c:d3:40:1e:51:02:37:46:16:78:a6:83:70:b5:b5:04:
         69:d0:06:04:6e:2e:dd:9d:c5:7e:7c:62:86:04:93:38:52:f7:
         9b:da:d9:f9:b0:36:c7:57:d4:27:40:8e:55:49:2d:3d:e4:0e:
         02:8f:53:90:32:3d:e9:52:a8:c1:60:b6:95:39:61:c7:cd:92:
         3b:eb:b3:96:a8:7f:e0:79:25:1c:54:78:f9:ab:67:cf:b4:87:
         bd:ae:bf:a8:38:ca:ca:71:c7:0b:f8:9e:61:83:9a:f3:c9:20:
         13:e8:ee:4d:a4:62:d7:5b:b9:0d:8e:c2:60:3b:d0:ae:bc:31:
         dc:af:90:28:27:42:69:52:e5:80:af:81:e2:1a:58:ee:78:34:
         c1:df:ff:a2:63:57:ef:5f:02:b1:e4:19:b8:41:b1:35:0a:f9:
         f7:a9:50:94:f4:a8:cb:d3:2d:1d:3a:c9:ca:f9:63:ca:82:e4:
         e6:ed:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org