Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38382e302f32332d3234203d3e203631333137.roa
File:                     34352e31342e38382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ASxmooLMKIjKDlKi4OaQ4TH26f4SCmVH9rN+GVVwsMY=
Subject key identifier:   AA:27:77:5B:23:CB:A1:32:5B:68:A9:71:D6:6B:D7:58:3E:FE:04:9E
Certificate issuer:       /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial:       6F4DD4AD318B4701C8EBC0612F5C23C9B15FD489
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38382e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:27:18 +0000
ROA not before:           Tue 01 Dec 2020 23:22:18 +0000
ROA not after:            Tue 30 Nov 2021 23:27:18 +0000
asID:                     61317
IP address blocks:        45.14.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4d:d4:ad:31:8b:47:01:c8:eb:c0:61:2f:5c:23:c9:b1:5f:d4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
        Validity
            Not Before: Dec  1 23:22:18 2020 GMT
            Not After : Nov 30 23:27:18 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:e8:07:05:4f:d9:af:55:15:bb:80:92:12:
                    1c:14:37:29:2c:d4:4c:15:87:f1:ad:06:54:bd:b1:
                    82:89:6e:e7:05:5d:ab:22:1b:a4:f0:2e:8d:d9:79:
                    10:d7:10:f4:6d:69:1d:a4:59:8c:76:32:52:fa:cd:
                    86:50:52:dc:f3:c3:22:b5:7b:9b:71:07:72:1f:a3:
                    59:51:95:9a:b7:ae:45:86:60:49:bc:ca:50:13:45:
                    7a:e8:0a:1e:c2:8d:55:eb:6e:ef:43:02:22:c6:5c:
                    a3:67:8d:cd:4c:24:f3:be:96:2d:d2:c1:5b:0d:1b:
                    e0:3a:11:3b:65:8e:3a:bc:d1:a4:f3:1a:f2:26:4f:
                    3e:ff:e1:fe:d3:9a:11:ff:f8:1b:69:81:0f:f5:a9:
                    e2:d0:e8:31:ac:bb:08:3d:2b:01:d5:85:89:a1:fa:
                    20:d6:d7:f5:bc:88:59:b8:e6:7f:e0:a9:a6:2c:b3:
                    77:90:5f:f1:de:41:e8:48:31:d2:7f:24:bb:be:10:
                    44:76:66:cb:63:aa:20:de:d6:66:c4:e5:ff:97:25:
                    0a:44:8a:b5:0c:10:92:d1:d6:15:1f:22:e0:7c:eb:
                    53:2f:27:01:5f:0f:6d:e8:fa:f6:82:6e:1e:3e:d0:
                    04:65:ae:41:4a:18:40:dd:96:48:79:ef:8c:7f:07:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:77:5B:23:CB:A1:32:5B:68:A9:71:D6:6B:D7:58:3E:FE:04:9E
            X509v3 Authority Key Identifier:
                keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:32:40:0f:1e:8f:de:dd:84:66:95:6b:1d:4d:1b:47:e9:
         cc:1a:48:7a:bb:e3:47:2d:c3:aa:59:d0:50:e7:85:9e:8b:9c:
         b9:c4:74:e3:5a:ef:93:dc:58:45:a4:ce:df:1b:23:72:44:be:
         13:3a:e4:7d:86:76:d0:31:7e:a4:a1:f5:38:04:4a:85:18:db:
         56:0d:54:01:03:1d:25:18:e9:ae:b6:1a:6f:c3:3d:c5:ce:07:
         91:4a:64:a4:fd:fd:19:fe:10:e7:f2:8b:f9:5b:6f:ff:53:dd:
         c8:83:21:dc:01:42:1f:72:5f:ee:a5:6c:78:ae:1a:a9:8d:b5:
         bb:0f:00:0d:4d:e5:16:70:2f:9c:4c:64:2d:cb:e1:cd:88:c4:
         7a:ce:f5:d5:05:84:70:06:0a:0a:6b:71:69:b2:3a:50:6d:e1:
         e2:24:ce:ea:57:48:12:25:9d:9f:67:16:cf:61:d1:22:a2:4f:
         28:23:1e:67:b0:1a:da:e6:55:35:b3:21:a5:f4:14:80:89:41:
         51:42:34:6b:22:d6:9c:6f:42:18:a8:1a:0e:b3:2c:78:57:6d:
         6f:45:2f:6c:de:ef:98:6e:fc:8c:63:66:1b:11:28:94:fe:46:
         25:29:34:21:b4:e9:b8:99:75:44:94:50:3a:5b:bd:a0:68:ce:
         ed:7f:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org