Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135372e302f32342d3234203d3e20323133303336.roa
File:                     34352e3133322e3135372e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier:          hYCE4tdb/ooaGwdUOP0ADmohPS0p9Jd7EUAbKC7Wl3s=
Subject key identifier:   22:A1:D0:A2:51:8B:03:67:D9:A5:A3:30:53:BA:80:70:2A:9B:7D:EE
Certificate issuer:       /CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
Certificate serial:       3BEEBF3569831E4BE830D9F2C5D377F886CC0311
Authority key identifier: 54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135372e302f32342d3234203d3e20323133303336.roa
Signing time:             Mon 30 Nov 2020 19:13:11 +0000
ROA not before:           Mon 30 Nov 2020 19:08:11 +0000
ROA not after:            Mon 29 Nov 2021 19:13:11 +0000
asID:                     213036
IP address blocks:        45.132.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ee:bf:35:69:83:1e:4b:e8:30:d9:f2:c5:d3:77:f8:86:cc:03:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
        Validity
            Not Before: Nov 30 19:08:11 2020 GMT
            Not After : Nov 29 19:13:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:45:7e:1d:82:ab:13:86:bf:31:dd:bb:20:
                    cd:76:21:77:9d:50:78:5e:e7:4f:ae:5e:0a:de:a0:
                    49:ba:24:0d:85:91:e5:cc:cc:d4:cf:88:d7:43:b6:
                    7e:05:49:c2:7a:45:6d:86:7b:cf:d1:ce:0e:22:1b:
                    2c:b0:45:df:d9:9c:48:d4:ea:f1:75:21:7b:c5:e6:
                    dd:a1:56:b1:9a:87:93:2b:3c:00:13:b0:21:ce:4e:
                    66:15:6a:d6:7e:b0:9f:83:77:8a:9d:04:e5:08:51:
                    0f:a8:ac:c4:01:74:9b:b1:4b:0a:42:f6:0c:7d:d5:
                    fd:f8:ec:f9:4e:1c:6a:90:8d:00:74:66:36:99:de:
                    8b:16:5e:e3:b4:b3:b3:23:ae:9a:6d:41:c2:1a:d7:
                    97:db:68:ab:fc:2e:af:94:f4:49:5c:ab:36:c0:79:
                    e3:e7:d8:7e:3c:df:e4:a5:8d:cb:05:81:c0:38:92:
                    6b:da:f5:f8:b2:23:80:ff:f2:61:55:b7:6e:9c:d8:
                    8f:7f:68:42:8f:e8:f9:8c:7c:ba:45:d6:6e:e5:b3:
                    17:f2:cd:d9:69:be:71:80:84:47:52:6f:c4:ea:6c:
                    af:84:70:99:69:46:d8:53:04:6c:78:d4:5b:a4:a1:
                    7b:f5:32:33:24:de:f1:2a:b6:00:35:69:30:d0:05:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A1:D0:A2:51:8B:03:67:D9:A5:A3:30:53:BA:80:70:2A:9B:7D:EE
            X509v3 Authority Key Identifier:
                keyid:54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135372e302f32342d3234203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:02:07:cd:26:63:83:25:35:9f:df:9c:d5:ec:ef:8a:67:33:
         10:62:37:d9:9f:b5:3e:e9:01:c5:b8:6c:7b:3c:3a:40:fa:f5:
         03:6a:75:51:1f:80:59:3f:e0:e9:66:7c:c6:9d:fa:85:6f:e6:
         b5:b7:8e:45:23:e6:1d:f5:c3:de:33:e6:f3:59:0f:24:d7:c4:
         ab:ab:20:87:a2:b2:ac:77:eb:92:03:d5:45:eb:3c:64:e6:23:
         81:62:c4:11:a3:27:04:84:40:72:02:b7:f0:47:66:f5:72:f4:
         e2:87:38:66:69:4f:9e:25:e8:90:f7:9b:b9:ff:c9:2d:6f:3d:
         34:4a:91:0e:ab:85:fc:e0:8a:7f:61:78:35:34:ea:e9:14:40:
         7b:c2:dc:a5:60:d4:a7:28:f4:1d:71:4d:21:94:8c:a4:b7:87:
         2c:44:33:d0:9f:38:89:6e:fe:5f:9b:ac:0a:3a:41:e0:5f:a7:
         c6:7e:d5:08:09:8a:70:75:2e:dd:9e:e9:b0:cd:6c:3d:58:8c:
         7a:66:d5:6d:9d:ca:7e:be:b3:75:9a:0f:ec:05:8f:cd:88:dc:
         05:22:fd:e7:fb:ad:e9:91:d6:f6:9d:a7:b7:d4:a1:53:d3:52:
         ff:0f:a7:39:97:b0:81:e4:d1:11:df:f4:d1:61:88:75:27:b5:
         c8:ab:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org