Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31372e302f32342d3234203d3e203235303938.roa
File:                     34352e3133362e31372e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          HeCdZe4Ag4SYqN5avJcm3I/vnZ5NqAPYKfC8HQSeVAI=
Subject key identifier:   2D:99:89:02:45:8D:80:84:07:66:22:F5:23:C9:71:27:A6:FA:03:9A
Certificate issuer:       /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial:       60ECE9A94C25E742985B831614651E862E849FC6
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31372e302f32342d3234203d3e203235303938.roa
Signing time:             Tue 01 Dec 2020 23:27:35 +0000
ROA not before:           Tue 01 Dec 2020 23:22:35 +0000
ROA not after:            Tue 30 Nov 2021 23:27:35 +0000
asID:                     25098
IP address blocks:        45.136.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ec:e9:a9:4c:25:e7:42:98:5b:83:16:14:65:1e:86:2e:84:9f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
        Validity
            Not Before: Dec  1 23:22:35 2020 GMT
            Not After : Nov 30 23:27:35 2021 GMT
        Subject: CN=3082010A0282010100C1EBA33553ADD3011895FFFF31BE6278D3B608A144E74224E4CF54114006B9C3585C3FD2C3A886CABF45EC56CFACC3929E56C6BE94A4E2D428A189DF60A28807B5123520955FAC5360E07DADA27CF47835A9C94725E56629B507EA72E8B5EA577B6F9B54EF02A5F534103969C1372726FDF7ADE0F3F69A6A4F9D9E3980A39E24428137FEEECDA17CAA4B0CF0DE3AA400F62801EE246C8DF5D31A74D462A4B1D458D1DF185A079DC115F2C2059AE915621BCC57E91A7C0FDE2C468287619F283714DB36A283EB4E6D07267A388049C0416A331B8444E9721174B8C9DC70EF627368CF605FC120086F624CE021B28ABE9C9DF71D387F4DADF7CD67B6895500D6C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:a3:35:53:ad:d3:01:18:95:ff:ff:31:be:
                    62:78:d3:b6:08:a1:44:e7:42:24:e4:cf:54:11:40:
                    06:b9:c3:58:5c:3f:d2:c3:a8:86:ca:bf:45:ec:56:
                    cf:ac:c3:92:9e:56:c6:be:94:a4:e2:d4:28:a1:89:
                    df:60:a2:88:07:b5:12:35:20:95:5f:ac:53:60:e0:
                    7d:ad:a2:7c:f4:78:35:a9:c9:47:25:e5:66:29:b5:
                    07:ea:72:e8:b5:ea:57:7b:6f:9b:54:ef:02:a5:f5:
                    34:10:39:69:c1:37:27:26:fd:f7:ad:e0:f3:f6:9a:
                    6a:4f:9d:9e:39:80:a3:9e:24:42:81:37:fe:ee:cd:
                    a1:7c:aa:4b:0c:f0:de:3a:a4:00:f6:28:01:ee:24:
                    6c:8d:f5:d3:1a:74:d4:62:a4:b1:d4:58:d1:df:18:
                    5a:07:9d:c1:15:f2:c2:05:9a:e9:15:62:1b:cc:57:
                    e9:1a:7c:0f:de:2c:46:82:87:61:9f:28:37:14:db:
                    36:a2:83:eb:4e:6d:07:26:7a:38:80:49:c0:41:6a:
                    33:1b:84:44:e9:72:11:74:b8:c9:dc:70:ef:62:73:
                    68:cf:60:5f:c1:20:08:6f:62:4c:e0:21:b2:8a:be:
                    9c:9d:f7:1d:38:7f:4d:ad:f7:cd:67:b6:89:55:00:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:99:89:02:45:8D:80:84:07:66:22:F5:23:C9:71:27:A6:FA:03:9A
            X509v3 Authority Key Identifier:
                keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31372e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:1e:f8:15:60:9c:c5:ee:90:89:f1:b5:74:94:4c:c8:87:b2:
         39:75:35:fb:8d:db:03:88:88:9a:79:8e:c3:36:38:61:9f:d2:
         d0:bb:a2:20:eb:de:7c:08:9d:f3:8b:92:dc:c3:98:cc:93:c9:
         db:55:e9:84:8a:cc:10:ad:68:46:83:bc:26:5a:85:3a:7e:e7:
         a8:24:21:6b:0e:bf:f5:8a:95:1f:99:ce:c9:b2:75:86:4c:e3:
         28:f3:ae:96:94:03:fd:ed:52:4e:c3:79:f9:58:c1:7c:fe:ad:
         51:f0:b0:00:e9:a9:76:07:03:c7:90:ee:68:70:f7:ae:74:c6:
         c0:08:b2:b0:ee:fd:78:16:d7:7b:36:b6:c9:da:a3:ca:e0:a6:
         7b:88:07:35:03:fb:43:12:35:d2:96:8b:f4:8d:c0:64:4e:5d:
         b4:6e:d1:c7:dc:5d:8a:d4:69:fb:9c:bc:84:cf:5c:1b:96:2e:
         06:55:1b:f8:83:48:e8:5a:76:94:63:18:17:47:36:30:3e:1e:
         48:47:6e:fc:17:6a:d6:4a:d2:0d:d0:c9:fb:4e:4c:3c:00:ec:
         c6:37:4f:67:87:cc:8d:b4:4c:ac:fa:58:2e:e3:46:d1:c3:b9:
         4b:c1:63:45:e8:4e:49:24:a4:07:e4:41:ee:60:5c:90:92:15:
         63:05:18:2e
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUYOzpqUwl50KYW4MWFGUehi6En8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U5ODBmOTFjYzk1MDg2ZmIwNDkxNzI2MTZkZTI1Yzhm
NjM1MzI1NTAeFw0yMDEyMDEyMzIyMzVaFw0yMTExMzAyMzI3MzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFFQkEzMzU1M0FERDMwMTE4
OTVGRkZGMzFCRTYyNzhEM0I2MDhBMTQ0RTc0MjI0RTRDRjU0MTE0MDA2QjlDMzU4
NUMzRkQyQzNBODg2Q0FCRjQ1RUM1NkNGQUNDMzkyOUU1NkM2QkU5NEE0RTJENDI4
QTE4OURGNjBBMjg4MDdCNTEyMzUyMDk1NUZBQzUzNjBFMDdEQURBMjdDRjQ3ODM1
QTlDOTQ3MjVFNTY2MjlCNTA3RUE3MkU4QjVFQTU3N0I2RjlCNTRFRjAyQTVGNTM0
MTAzOTY5QzEzNzI3MjZGREY3QURFMEYzRjY5QTZBNEY5RDlFMzk4MEEzOUUyNDQy
ODEzN0ZFRUVDREExN0NBQTRCMENGMERFM0FBNDAwRjYyODAxRUUyNDZDOERGNUQz
MUE3NEQ0NjJBNEIxRDQ1OEQxREYxODVBMDc5REMxMTVGMkMyMDU5QUU5MTU2MjFC
Q0M1N0U5MUE3QzBGREUyQzQ2ODI4NzYxOUYyODM3MTREQjM2QTI4M0VCNEU2RDA3
MjY3QTM4ODA0OUMwNDE2QTMzMUI4NDQ0RTk3MjExNzRCOEM5REM3MEVGNjI3MzY4
Q0Y2MDVGQzEyMDA4NkY2MjRDRTAyMUIyOEFCRTlDOURGNzFEMzg3RjREQURGN0NE
NjdCNjg5NTUwMEQ2QzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAweujNVOt0wEYlf//Mb5ieNO2CKFE50Ik5M9UEUAGucNYXD/Sw6iG
yr9F7FbPrMOSnlbGvpSk4tQooYnfYKKIB7USNSCVX6xTYOB9raJ89Hg1qclHJeVm
KbUH6nLotepXe2+bVO8CpfU0EDlpwTcnJv33reDz9ppqT52eOYCjniRCgTf+7s2h
fKpLDPDeOqQA9igB7iRsjfXTGnTUYqSx1FjR3xhaB53BFfLCBZrpFWIbzFfpGnwP
3ixGgodhnyg3FNs2ooPrTm0HJno4gEnAQWozG4RE6XIRdLjJ3HDvYnNoz2BfwSAI
b2JM4CGyir6cnfcdOH9NrffNZ7aJVQDWxQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FC2ZiQJFjYCEB2Yi9SPJcSem+gOaMB8GA1UdIwQYMBaAFD6YD5HMlQhvsEkXJhbe
Jcj2NTJVMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMzUvM0U5
ODBGOTFDQzk1MDg2RkIwNDkxNzI2MTZERTI1QzhGNjM1MzI1NS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1BwZ1BrY3lWQ0ctd1NSY21GdDRseVBZMU1sVS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTM1LzM0MzUyZTMxMzMzNjJl
MzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMDM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtiBEwDQYJKoZIhvcNAQELBQADggEBAHYe+BVgnMXukInxtXSUTMiHsjl1NfuN
2wOIiJp5jsM2OGGf0tC7oiDr3nwInfOLktzDmMyTydtV6YSKzBCtaEaDvCZahTp+
56gkIWsOv/WKlR+ZzsmydYZM4yjzrpaUA/3tUk7DeflYwXz+rVHwsADpqXYHA8eQ
7mhw9650xsAIsrDu/XgW13s2tsnao8rgpnuIBzUD+0MSNdKWi/SNwGROXbRu0cfc
XYrUafucvITPXBuWLgZVG/iDSOhadpRjGBdHNjA+HkhHbvwXatZK0g3QyftOTDwA
7MY3T2eHzI20TKz6WC7jRtHDuUvBY0XoTkkkpAfkQe5gXJCSFWMFGC4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org