Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e203434363835.roa
File:                     34352e3135322e3139312e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          ZdqaFqbR9dtfJKvH9hlSUxj+oLOReOiwJP9gnMFRPc0=
Subject key identifier:   58:9E:FA:1B:7C:59:29:FC:56:97:4F:75:6E:D3:B4:FC:A9:FF:28:BF
Certificate issuer:       /CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Certificate serial:       70F41A577988C075D05169A975E4CF59AA85F158
Authority key identifier: 7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e203434363835.roa
Signing time:             Tue 01 Dec 2020 23:28:23 +0000
ROA not before:           Tue 01 Dec 2020 23:23:23 +0000
ROA not after:            Tue 30 Nov 2021 23:28:23 +0000
asID:                     44685
IP address blocks:        45.152.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f4:1a:57:79:88:c0:75:d0:51:69:a9:75:e4:cf:59:aa:85:f1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
        Validity
            Not Before: Dec  1 23:23:23 2020 GMT
            Not After : Nov 30 23:28:23 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:6e:1f:a8:ab:86:65:6b:d8:a3:b8:99:06:
                    71:ea:73:f2:df:1d:7e:7d:59:ec:1d:0a:b6:06:a7:
                    30:e4:22:23:5e:b7:54:0f:2f:6f:7b:2a:92:bf:ea:
                    23:86:56:c0:2c:ad:7c:e7:c0:af:d8:72:bf:7a:9a:
                    a5:9b:6d:43:f0:8a:7d:4f:95:46:96:70:d4:6a:08:
                    ba:5a:01:3d:ca:22:28:8d:9a:48:1e:f7:12:fe:0e:
                    b1:9b:15:bf:2e:4e:b9:12:97:c0:ce:bf:e0:5f:32:
                    b3:d8:0c:9f:5c:81:eb:82:ff:bf:97:07:8e:66:ac:
                    1d:e3:64:6f:08:a6:ce:55:f1:0b:71:73:0b:aa:32:
                    11:a0:fd:db:48:35:32:d5:be:0e:1a:0d:ae:c0:f2:
                    34:90:a2:35:4c:20:4d:ce:c5:7e:9e:32:07:bf:35:
                    c2:9b:2a:16:3c:c8:5e:5f:c5:c7:40:9d:15:7a:0b:
                    35:46:d5:9e:53:5f:04:24:d7:a9:41:65:5a:eb:0d:
                    32:f1:3a:b1:cb:97:3f:1c:17:8e:cb:f9:19:3f:36:
                    fe:15:b9:b7:5b:c6:32:4d:7f:fa:c0:ba:13:2c:1b:
                    3f:75:f9:a8:8e:31:74:03:92:21:37:a9:ac:a5:af:
                    01:53:25:63:ac:fc:f9:f7:ac:b0:13:a5:89:64:f2:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:FA:1B:7C:59:29:FC:56:97:4F:75:6E:D3:B4:FC:A9:FF:28:BF
            X509v3 Authority Key Identifier:
                keyid:7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:dd:d3:65:27:03:f8:9f:ac:53:9c:a0:9b:52:8c:70:11:
         7a:f2:0c:c7:41:0c:26:8b:25:cd:59:dd:6c:b3:0a:f1:2b:53:
         f2:ea:57:43:f9:bd:6f:e2:30:5d:5f:0f:b6:b4:ff:b8:7f:b0:
         fc:b7:d5:72:e9:74:1e:d3:8b:26:95:d0:63:92:17:2c:6a:04:
         3c:2d:aa:2a:e7:a4:a1:d5:dc:a6:df:77:ba:8a:6b:f1:38:2a:
         fd:cb:df:64:5f:b6:a2:82:f6:1a:38:78:07:24:b4:4f:e4:85:
         6b:56:41:15:fd:1a:cd:54:55:3f:e6:2c:72:cd:d5:27:d7:a1:
         e6:75:76:f9:72:06:99:35:8d:55:9f:c2:e4:ba:c0:a3:7d:32:
         17:3c:47:b9:ff:a4:10:3b:55:83:84:df:31:62:1d:e6:68:30:
         94:64:11:13:7f:d5:3b:2f:08:aa:02:e7:20:ea:df:3a:51:e2:
         ac:51:5c:21:1d:3b:79:24:dc:4e:1d:48:ab:9c:0a:41:35:6f:
         b8:14:04:36:4f:d2:63:d9:2d:7e:84:7b:60:63:49:15:0c:3c:
         85:62:29:78:de:17:94:f7:24:04:fd:10:1f:a2:01:4b:b3:23:
         6f:c9:80:c1:fe:bd:43:fe:63:7a:ea:7b:80:0e:67:8d:ca:a6:
         1e:29:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org