Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132322e302f32332d3234203d3e203631333137.roa
File:                     34352e3135312e3132322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          e4wGv66mk+ty1zpWpj9YL53Ug5ZyugmI8NM5sHwbZEw=
Subject key identifier:   87:BB:8B:4C:9A:CF:AD:3D:B1:5A:4B:30:80:F3:D6:FA:64:31:F7:B4
Certificate issuer:       /CN=2f7cb84b1334e17130f0bb0bab35db5098eebbed
Certificate serial:       16AEC063FB36DBBE632F7A213F3241C6F2396BAA
Authority key identifier: 2F:7C:B8:4B:13:34:E1:71:30:F0:BB:0B:AB:35:DB:50:98:EE:BB:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3y4SxM04XEw8LsLqzXbUJjuu-0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132322e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 11:35:51 +0000
ROA not before:           Mon 30 Nov 2020 11:30:51 +0000
ROA not after:            Mon 29 Nov 2021 11:35:51 +0000
asID:                     61317
IP address blocks:        45.151.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ae:c0:63:fb:36:db:be:63:2f:7a:21:3f:32:41:c6:f2:39:6b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7cb84b1334e17130f0bb0bab35db5098eebbed
        Validity
            Not Before: Nov 30 11:30:51 2020 GMT
            Not After : Nov 29 11:35:51 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:1a:ba:c0:e7:4c:03:bd:62:ae:34:bc:ef:
                    36:4f:bd:71:c9:c9:d3:86:f7:00:09:9e:05:d8:be:
                    19:72:1e:bf:3b:9b:f1:5f:2d:e7:5a:c8:88:3e:b8:
                    53:c1:eb:27:bc:80:8d:03:a4:e1:42:ca:de:54:cc:
                    39:00:81:4e:02:ad:7b:14:4e:22:22:ea:55:9f:18:
                    75:d8:88:0c:50:46:9f:eb:77:12:af:b5:f4:27:6e:
                    39:67:ef:8a:a1:42:e7:89:21:91:1d:6e:f5:dc:3d:
                    8a:8f:a7:7d:51:c0:fb:f9:9b:25:93:9a:9a:6e:25:
                    4f:9c:34:89:7c:02:e4:43:c5:05:4e:2a:81:8f:88:
                    82:77:b0:03:6f:f6:28:48:aa:18:04:65:84:cb:63:
                    7d:d7:74:f4:de:da:8b:c8:a2:62:56:08:55:73:a7:
                    0d:a4:4b:f3:db:fe:d4:81:dd:20:29:4e:09:56:53:
                    d3:e9:e8:44:73:a0:0a:be:c0:9f:fc:67:b3:b8:6f:
                    c7:53:e1:68:32:dd:66:c7:13:6c:a4:45:c5:8a:2c:
                    ee:c2:e0:e5:85:dc:31:86:b2:36:24:8c:6e:44:56:
                    c0:f4:f8:8b:24:1c:cd:7b:89:66:7b:75:4b:b8:cc:
                    af:e6:ab:c3:91:72:8c:42:67:5e:d6:14:b9:49:e3:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BB:8B:4C:9A:CF:AD:3D:B1:5A:4B:30:80:F3:D6:FA:64:31:F7:B4
            X509v3 Authority Key Identifier:
                keyid:2F:7C:B8:4B:13:34:E1:71:30:F0:BB:0B:AB:35:DB:50:98:EE:BB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/14/2F7CB84B1334E17130F0BB0BAB35DB5098EEBBED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3y4SxM04XEw8LsLqzXbUJjuu-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:51:37:48:0d:13:af:57:67:5a:cc:7f:fb:6d:0f:a1:93:d2:
         e1:6b:f1:6c:86:68:af:63:e6:84:a6:db:60:43:b7:2f:da:36:
         7a:a0:91:87:ab:ba:9d:17:73:82:bf:ec:1e:4a:42:45:6a:8c:
         97:a3:41:a3:63:39:c5:4a:24:56:ce:a2:40:1e:57:c0:08:a8:
         d5:ae:ae:73:e2:ef:4d:da:cd:a3:cb:76:74:0a:01:ae:c9:ca:
         5d:64:3c:a0:53:25:9d:9d:98:6a:12:43:6c:1d:17:e7:11:98:
         a6:34:12:eb:08:35:a7:4c:74:1c:a8:fe:72:74:aa:af:72:a0:
         da:79:10:c5:c2:b9:be:a6:99:da:f8:46:69:3a:bb:92:cd:63:
         4c:95:dd:26:4f:7e:4f:ed:27:1f:5b:ce:52:cf:ad:8b:a0:ca:
         d9:e0:d5:1b:f2:b9:c3:bd:fb:af:e2:d9:76:b0:27:c7:ec:1e:
         7f:e0:e1:0a:7b:76:0b:ef:46:8a:78:5f:3d:89:b4:6f:6e:88:
         ad:69:9a:d5:a0:5f:f6:a2:61:bb:c2:7f:83:e9:58:02:da:2d:
         c0:b1:21:4f:59:bb:5d:fd:c3:75:ea:9c:1b:19:f8:e1:08:67:
         11:1f:2e:f2:59:03:4b:e8:dc:b6:4a:cf:25:70:c9:b2:8d:a1:
         3f:0d:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org