Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139302e302f32332d3234203d3e203631333137.roa
File:                     34352e3135322e3139302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          zy9aC4Kh9z2RJoV1lgnzrQLFQIrNNlfoG6K0+bUvj3U=
Subject key identifier:   4A:A9:32:FD:FE:4A:C7:54:8B:EC:89:24:BB:90:D9:B1:F8:64:9D:71
Certificate issuer:       /CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Certificate serial:       4B937B8574EF9FC0E8C4A0A284CC5BE29E02447E
Authority key identifier: 7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139302e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:28:21 +0000
ROA not before:           Tue 01 Dec 2020 23:23:21 +0000
ROA not after:            Tue 30 Nov 2021 23:28:21 +0000
asID:                     61317
IP address blocks:        45.152.190.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:93:7b:85:74:ef:9f:c0:e8:c4:a0:a2:84:cc:5b:e2:9e:02:44:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
        Validity
            Not Before: Dec  1 23:23:21 2020 GMT
            Not After : Nov 30 23:28:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:0c:b0:06:e5:5e:8c:53:e1:8c:57:d3:cf:
                    b2:0b:63:64:f8:c1:ba:19:92:9c:0a:fc:f1:6a:3f:
                    9b:17:b1:cb:ce:87:17:fe:9b:5c:ec:a6:5e:d9:c7:
                    fc:8c:e9:8a:ed:ad:f3:05:a8:8a:4c:55:92:6d:b7:
                    f7:d9:d0:02:91:b9:70:15:4d:a0:3d:7a:00:16:b6:
                    b2:fc:ac:c9:8b:f5:b1:44:30:02:26:28:ac:e2:a0:
                    6e:2b:9d:d3:b1:5d:19:d9:48:57:d6:81:0a:90:5a:
                    15:3c:d0:64:03:d9:01:28:e3:43:af:58:9c:99:c6:
                    58:93:53:70:dd:31:7f:5b:db:ab:e6:2b:9b:c5:45:
                    a4:f2:2c:f5:38:44:62:4d:e7:09:f5:b8:a5:78:aa:
                    ed:b5:b5:cf:34:47:0b:5c:8d:e9:5a:e5:a0:f0:cd:
                    a3:67:f8:cf:4b:d8:8c:65:2d:50:0a:23:67:cf:97:
                    71:7b:c1:e0:2d:34:49:96:63:c9:1d:9f:38:11:86:
                    71:a5:2c:b8:b2:50:95:47:46:36:5f:78:29:9f:8d:
                    99:1c:b0:c6:5b:73:8d:82:11:92:ea:77:9c:af:a0:
                    57:f6:db:7e:a1:61:f8:19:da:d5:aa:5b:04:a1:ef:
                    a7:a8:0b:c5:44:55:4d:2a:15:95:e4:9a:eb:75:d7:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:32:FD:FE:4A:C7:54:8B:EC:89:24:BB:90:D9:B1:F8:64:9D:71
            X509v3 Authority Key Identifier:
                keyid:7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:05:02:89:97:e6:5f:c3:34:11:c8:bf:ae:0e:dc:23:8f:b2:
         6c:73:92:5f:18:69:c5:d2:06:e0:a0:3f:1c:a5:5b:3b:60:bc:
         95:d0:15:ec:a6:6f:c6:fd:25:59:65:0c:8e:73:c4:1a:98:d8:
         84:3f:b1:5d:32:78:e7:59:6a:68:58:4d:e0:06:7d:15:3d:70:
         f1:9c:6e:75:e9:37:01:ed:ef:52:a8:1f:15:4c:ee:40:13:2c:
         6e:55:01:34:39:e3:b2:f8:3a:26:76:26:00:ef:d7:9d:96:ae:
         ef:e1:06:ef:1a:49:10:2f:26:3a:99:0a:79:af:d9:1a:83:c7:
         08:48:c2:55:1f:45:52:7f:c7:02:27:51:48:92:7f:1b:3a:f7:
         ea:62:92:45:d0:1a:2e:b4:70:38:cd:55:84:d3:c3:de:e7:88:
         d2:b4:b3:56:87:4d:48:76:f6:bb:85:4b:fb:18:ef:b8:6f:bd:
         8b:08:03:7d:2b:41:e9:02:43:d7:be:ab:c4:cb:0a:ec:54:cc:
         0b:39:25:b5:d9:c7:5b:30:ce:9b:dd:82:b1:d4:d5:a6:e1:c1:
         f7:a6:cc:7f:b1:f5:b7:53:ff:60:64:6f:40:ce:3f:5e:2c:5d:
         84:bc:10:ea:cc:ca:06:cf:8d:25:31:d2:da:66:49:71:9c:d8:
         6f:4b:40:77
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUS5N7hXTvn8DoxKCihMxb4p4CRH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U3YjRiNDAxMDU0MWY4ZTk1ZGI3ZWJkMjhkNzNlYTky
NzJjODZjYTAeFw0yMDEyMDEyMzIzMjFaFw0yMTExMzAyMzI4MjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE3QjBDQjAwNkU1NUU4QzUz
RTE4QzU3RDNDRkIyMEI2MzY0RjhDMUJBMTk5MjlDMEFGQ0YxNkEzRjlCMTdCMUNC
Q0U4NzE3RkU5QjVDRUNBNjVFRDlDN0ZDOENFOThBRURBREYzMDVBODhBNEM1NTky
NkRCN0Y3RDlEMDAyOTFCOTcwMTU0REEwM0Q3QTAwMTZCNkIyRkNBQ0M5OEJGNUIx
NDQzMDAyMjYyOEFDRTJBMDZFMkI5REQzQjE1RDE5RDk0ODU3RDY4MTBBOTA1QTE1
M0NEMDY0MDNEOTAxMjhFMzQzQUY1ODlDOTlDNjU4OTM1MzcwREQzMTdGNUJEQkFC
RTYyQjlCQzU0NUE0RjIyQ0Y1Mzg0NDYyNERFNzA5RjVCOEE1NzhBQUVEQjVCNUNG
MzQ0NzBCNUM4REU5NUFFNUEwRjBDREEzNjdGOENGNEJEODhDNjUyRDUwMEEyMzY3
Q0Y5NzcxN0JDMUUwMkQzNDQ5OTY2M0M5MUQ5RjM4MTE4NjcxQTUyQ0I4QjI1MDk1
NDc0NjM2NUY3ODI5OUY4RDk5MUNCMEM2NUI3MzhEODIxMTkyRUE3NzlDQUZBMDU3
RjZEQjdFQTE2MUY4MTlEQUQ1QUE1QjA0QTFFRkE3QTgwQkM1NDQ1NTREMkExNTk1
RTQ5QUVCNzVEN0Q1MDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwXsMsAblXoxT4YxX08+yC2Nk+MG6GZKcCvzxaj+bF7HLzocX/ptc
7KZe2cf8jOmK7a3zBaiKTFWSbbf32dACkblwFU2gPXoAFray/KzJi/WxRDACJiis
4qBuK53TsV0Z2UhX1oEKkFoVPNBkA9kBKONDr1icmcZYk1Nw3TF/W9ur5iubxUWk
8iz1OERiTecJ9bileKrttbXPNEcLXI3pWuWg8M2jZ/jPS9iMZS1QCiNnz5dxe8Hg
LTRJlmPJHZ84EYZxpSy4slCVR0Y2X3gpn42ZHLDGW3ONghGS6necr6BX9tt+oWH4
GdrVqlsEoe+nqAvFRFVNKhWV5JrrddfVAwIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FEqpMv3+SsdUi+yJJLuQ2bH4ZJ1xMB8GA1UdIwQYMBaAFH57S0AQVB+Oldt+vSjX
PqknLIbKMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMjIvN0U3
QjRCNDAxMDU0MUY4RTk1REI3RUJEMjhENzNFQTkyNzJDODZDQS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL2ZudExRQkJVSDQ2VjIzNjlLTmMtcVNjc2hzby5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTIyLzM0MzUyZTMxMzUzMjJl
MzEzOTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAS2YvjANBgkqhkiG9w0BAQsFAAOCAQEAWAUCiZfmX8M0Eci/rg7cI4+ybHOS
XxhpxdIG4KA/HKVbO2C8ldAV7KZvxv0lWWUMjnPEGpjYhD+xXTJ451lqaFhN4AZ9
FT1w8Zxudek3Ae3vUqgfFUzuQBMsblUBNDnjsvg6JnYmAO/XnZau7+EG7xpJEC8m
OpkKea/ZGoPHCEjCVR9FUn/HAidRSJJ/Gzr36mKSRdAaLrRwOM1VhNPD3ueI0rSz
VodNSHb2u4VL+xjvuG+9iwgDfStB6QJD176rxMsK7FTMCzkltdnHWzDOm92CsdTV
puHB96bMf7H1t1P/YGRvQM4/XixdhLwQ6szKBs+NJTHS2mZJcZzYb0tAdw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org