Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38392e302f32342d3234203d3e203235303938.roa
File:                     34352e31342e38392e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          /Q63jt4KbOZ3Is8MUr0jML+zmpBYuBhU4gm7GuY4IPE=
Subject key identifier:   2E:3A:92:85:34:17:8C:E6:29:E3:A9:DD:C1:9E:0B:DA:CD:BA:2E:49
Certificate issuer:       /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial:       455AAFF3F5CD01B934AC76DC929113E35A0924F9
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38392e302f32342d3234203d3e203235303938.roa
Signing time:             Tue 01 Dec 2020 23:27:19 +0000
ROA not before:           Tue 01 Dec 2020 23:22:19 +0000
ROA not after:            Tue 30 Nov 2021 23:27:19 +0000
asID:                     25098
IP address blocks:        45.14.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5a:af:f3:f5:cd:01:b9:34:ac:76:dc:92:91:13:e3:5a:09:24:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
        Validity
            Not Before: Dec  1 23:22:19 2020 GMT
            Not After : Nov 30 23:27:19 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:f5:c3:6d:2e:47:ba:94:d8:f0:ab:e9:78:
                    35:38:57:62:a1:15:53:ac:e5:0d:40:31:e4:8f:72:
                    e3:57:6d:bf:f0:fc:d9:6a:83:63:1a:b7:12:19:2a:
                    aa:52:c1:a7:09:d4:b5:e4:0d:25:de:ed:f7:f0:31:
                    6b:48:30:be:d0:d8:f8:62:d9:ef:2f:2f:1e:55:b9:
                    7f:97:3b:04:4a:d2:14:b2:cb:34:30:ed:94:eb:43:
                    dc:87:02:f3:80:90:d5:31:81:39:bd:e0:80:16:30:
                    5b:22:58:44:ca:4d:bb:af:12:57:81:5f:30:69:28:
                    d6:54:a0:22:98:b5:61:43:58:10:25:b4:4d:15:4c:
                    96:a5:8e:4d:78:b6:fa:33:d7:fd:51:c7:1f:bb:58:
                    da:de:ab:45:81:dc:05:32:4d:66:7e:dd:93:fb:5b:
                    c2:49:85:a4:42:91:da:f2:53:0e:ee:ef:d9:60:2c:
                    4e:5c:73:6e:0b:b7:c7:c1:9d:9e:11:35:8f:81:92:
                    78:80:fc:f6:7d:55:0e:d2:d9:f8:c9:e1:0d:10:2e:
                    73:d9:ba:7b:2e:2f:e7:0c:8d:57:d4:c4:51:4b:cb:
                    4b:1f:09:6e:4a:9c:b6:00:b6:74:a1:04:66:eb:77:
                    18:2d:6e:31:93:a0:bb:7a:2a:b7:a2:70:48:cb:ca:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3A:92:85:34:17:8C:E6:29:E3:A9:DD:C1:9E:0B:DA:CD:BA:2E:49
            X509v3 Authority Key Identifier:
                keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e38392e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:7f:17:42:95:c0:e8:07:59:be:5e:ea:be:7b:c3:ac:4c:
         5d:44:6e:24:79:09:00:8d:d7:06:f1:0c:7b:62:b2:34:dd:0d:
         4b:8a:7b:e1:9d:25:8f:a7:a6:59:b7:9e:09:f6:89:20:c8:a2:
         fc:d4:2f:a7:46:56:f4:a6:ad:57:bd:24:fe:4c:38:d9:b3:fb:
         29:14:27:d6:30:18:e3:a9:1a:b6:91:5b:e6:76:49:d2:48:de:
         46:14:c0:17:ff:55:d3:b1:e4:81:d0:cf:85:81:9d:66:aa:2a:
         9e:9c:c1:9e:2a:41:d6:0a:aa:1b:46:d9:d5:82:af:87:f6:7a:
         44:c2:5f:e9:bc:27:68:7b:34:9b:92:6d:3c:84:75:7b:8d:b7:
         15:d4:17:18:fe:f7:c7:4c:b4:36:1f:47:47:84:7e:09:53:b2:
         43:30:7b:7b:9c:49:3c:fa:70:e8:32:68:15:a3:82:f9:87:7f:
         e0:61:5a:e8:05:4f:9f:98:61:a4:06:62:a1:b6:6b:a6:34:a2:
         49:02:36:bb:34:77:fe:15:c4:ba:86:b4:fb:39:42:fd:84:47:
         2d:39:99:16:ab:4c:5f:2f:7a:be:10:c0:75:77:30:59:8c:c0:
         4a:8c:65:ee:a3:79:55:69:14:22:9d:fb:b6:b9:e7:8e:a0:e8:
         c8:87:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org