Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32332d3234203d3e203631333137.roa
File:                     34352e3133362e31382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          3PycWeqBXcKxHA/VeH69YXBgs2ZGHtCLo1bXSSL/f9o=
Subject key identifier:   6C:CE:DD:A1:E5:0E:DC:4B:05:B9:82:BC:F5:7A:61:49:A5:FA:42:04
Certificate issuer:       /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial:       7B58D97B590279435D99A039C94A913F892FF932
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:27:35 +0000
ROA not before:           Tue 01 Dec 2020 23:22:35 +0000
ROA not after:            Tue 30 Nov 2021 23:27:35 +0000
asID:                     61317
IP address blocks:        45.136.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:58:d9:7b:59:02:79:43:5d:99:a0:39:c9:4a:91:3f:89:2f:f9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
        Validity
            Not Before: Dec  1 23:22:35 2020 GMT
            Not After : Nov 30 23:27:35 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:50:fe:24:90:63:e9:77:b1:ea:00:d9:bc:
                    ef:99:e8:bb:d1:8c:14:b3:24:6e:f7:10:15:ff:91:
                    6e:92:2e:05:e4:d9:b6:2f:fa:cf:c3:d4:8e:c4:af:
                    8d:b9:86:fb:4b:4d:e7:fb:ab:08:e5:ac:61:ad:8c:
                    2b:76:0e:52:50:72:22:25:38:2e:c4:07:38:84:b3:
                    d0:02:e7:f0:19:3a:dd:1e:9f:12:83:8c:c1:43:b9:
                    1a:0c:f0:54:d2:c7:53:97:a9:ca:11:c2:af:ae:c5:
                    a7:0b:e1:e5:81:d4:ef:b1:e4:2a:56:77:8a:51:1c:
                    f9:08:87:01:20:ab:61:65:7b:11:bc:2c:6b:a9:40:
                    0a:c1:f6:68:8c:99:f8:63:d1:9f:c5:62:e7:1f:e1:
                    a1:e4:54:89:90:b8:e7:5f:00:d0:f0:b5:e6:e4:8f:
                    00:81:2e:e6:59:e9:34:e6:f8:58:35:53:cc:7f:e7:
                    ab:b7:4e:f7:3a:7d:b0:72:67:c1:22:55:72:e2:73:
                    7a:48:0f:5a:ad:5e:2c:bc:ea:db:9d:8c:01:2a:34:
                    d0:3b:b4:c1:e3:f1:23:e1:f2:8f:74:a1:2b:c1:2b:
                    f8:bf:f9:dc:7e:e2:d6:1a:e3:40:1d:9c:e6:1a:57:
                    a4:c7:ae:ad:3e:bc:26:fc:87:16:a3:6d:f7:8f:55:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:DD:A1:E5:0E:DC:4B:05:B9:82:BC:F5:7A:61:49:A5:FA:42:04
            X509v3 Authority Key Identifier:
                keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:9c:57:4b:9a:30:a6:81:13:ea:3a:86:76:8a:4d:88:d1:
         56:1a:22:c4:bc:7d:75:90:4b:e6:39:0a:95:09:49:30:ed:fc:
         c2:2a:28:a5:c6:64:13:b8:c3:21:0d:5f:e6:cc:9a:96:b7:28:
         4f:ce:74:07:be:f9:ee:7d:c6:9e:ce:54:8b:43:38:75:02:50:
         9b:2b:29:b1:0e:c9:2c:dc:e2:01:9f:0d:2d:ee:ac:32:e5:ed:
         c4:2a:49:0c:60:a8:e6:a1:37:43:9b:37:23:28:4b:38:2b:1a:
         61:11:cf:bf:aa:cf:8d:cd:d5:06:66:5d:89:ac:86:29:e6:60:
         38:db:06:00:af:97:52:9e:a7:34:d5:43:63:1a:e4:02:ae:c2:
         8b:2e:42:ff:df:ca:cc:6c:e6:ec:12:53:1a:ad:d1:42:4f:b8:
         4a:a4:ea:bc:15:b3:95:f7:6d:f5:ae:4b:51:28:e7:15:86:fa:
         9c:5e:50:9f:26:fc:7a:01:8c:87:84:54:98:f3:a9:69:56:e1:
         8c:23:12:b7:2e:08:ee:07:d1:86:35:23:81:7e:c4:7a:74:2f:
         58:0d:0a:ac:e8:9b:7b:87:47:2b:fc:49:3c:9d:9f:4d:a6:6c:
         b1:aa:44:40:b0:d8:0f:f3:9e:80:d8:c9:92:97:78:3b:77:af:
         45:a0:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org