Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31362e302f32332d3234203d3e203631333137.roa
File:                     34352e3133362e31362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          puvXF4G7JGc3zjSBAR9yiVe5YCljfwAMkfLSPmA80eU=
Subject key identifier:   06:62:EF:23:C0:32:59:A1:C8:4C:7C:66:F5:FD:8F:3F:98:48:97:08
Certificate issuer:       /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial:       21076A3AB6F3FD47409F440BBA843D1F75DDCB96
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31362e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:27:35 +0000
ROA not before:           Tue 01 Dec 2020 23:22:35 +0000
ROA not after:            Tue 30 Nov 2021 23:27:35 +0000
asID:                     61317
IP address blocks:        45.136.16.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:07:6a:3a:b6:f3:fd:47:40:9f:44:0b:ba:84:3d:1f:75:dd:cb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
        Validity
            Not Before: Dec  1 23:22:35 2020 GMT
            Not After : Nov 30 23:27:35 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:24:09:9e:64:15:c4:04:24:ee:d8:ba:bb:
                    b1:87:2d:48:95:76:cc:4d:fd:56:2c:33:d9:99:8d:
                    7c:af:52:1e:8c:5c:fe:a7:05:b1:1a:8b:66:2f:2d:
                    bf:1e:e6:5b:df:0f:37:44:6d:57:f4:a3:17:d4:40:
                    4b:36:54:b0:93:9d:65:83:62:0d:fe:85:cf:13:7e:
                    1f:f5:32:79:78:e0:12:c5:de:8b:1a:4c:df:52:c9:
                    9a:76:80:b7:87:3b:6a:ee:3e:57:98:ea:04:25:7f:
                    05:6b:81:fe:77:4c:b0:40:7f:ed:8f:1b:c5:55:fb:
                    89:2e:bc:ba:24:54:f8:1f:b4:a2:58:a8:77:73:bf:
                    80:f4:84:e0:6c:ad:f5:b7:06:05:60:eb:2d:72:5f:
                    36:8d:fe:0b:45:92:f1:75:76:91:30:b1:08:79:9f:
                    ab:bb:3f:e2:e1:8d:69:02:4c:d4:82:65:54:65:5d:
                    b3:72:e0:26:51:e2:c2:fe:a4:ce:b5:6c:8b:42:cf:
                    39:ad:4c:3c:46:fc:07:34:64:34:11:32:18:55:d4:
                    2d:4d:15:58:1d:0f:79:61:bb:c5:e9:13:c2:7e:7f:
                    e1:d6:94:4a:93:1f:40:f5:b7:24:66:9e:1c:3a:7c:
                    38:aa:e3:64:60:b2:88:82:dd:99:59:a2:34:12:8c:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:EF:23:C0:32:59:A1:C8:4C:7C:66:F5:FD:8F:3F:98:48:97:08
            X509v3 Authority Key Identifier:
                keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e1:83:b6:56:e5:dd:54:ee:20:df:84:ed:84:dc:b0:57:16:06:
         2d:df:8e:a7:a1:85:a6:5c:7e:72:de:fa:df:78:b4:8c:a1:2d:
         7b:55:e4:eb:0a:17:b3:70:af:57:13:be:80:fc:53:0a:2c:6e:
         10:5e:73:6a:79:4e:a1:31:ff:fb:25:a7:3b:f6:32:07:0a:b5:
         4b:49:39:c0:76:6d:11:e3:bf:86:61:25:d8:47:14:b2:bb:90:
         37:80:5b:b7:70:e2:ba:64:d3:09:40:a9:00:94:85:84:c5:d6:
         98:c1:df:19:01:54:53:4b:84:d2:65:44:1d:81:f2:1e:d2:2f:
         df:cd:6c:bf:e1:04:98:08:a1:f5:35:ae:0d:c4:3e:58:74:34:
         2e:b9:96:d0:03:94:03:4f:e9:f8:ff:4b:bb:d3:01:56:2d:f9:
         9a:cd:8d:45:fb:60:f5:18:ce:a1:18:3f:2d:ca:4d:11:05:9c:
         40:e6:14:63:b9:b4:eb:ad:03:c0:3c:fa:82:7a:24:25:80:87:
         10:fc:26:b9:1e:3a:0f:7a:46:c6:f3:be:e7:1a:7f:9a:47:fd:
         17:10:49:1b:fc:e7:0d:87:40:e9:71:f8:a3:bc:22:11:32:2b:
         49:06:bc:2e:56:c0:73:6a:e9:ec:66:52:dd:55:30:8c:d4:88:
         f5:0e:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org