Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135392e302f32342d3234203d3e20323133303336.roa
File:                     34352e3133322e3135392e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier:          DRFLLvNXckuOnAk1UrURCE+QzbFRqm7fyWAaiXupBjE=
Subject key identifier:   74:42:BD:9A:4D:27:14:91:EA:68:61:A6:13:CB:C2:64:EF:77:99:B5
Certificate issuer:       /CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
Certificate serial:       2C74D46263569D04A38805FAF860240FC4833219
Authority key identifier: 54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135392e302f32342d3234203d3e20323133303336.roa
Signing time:             Mon 30 Nov 2020 19:13:12 +0000
ROA not before:           Mon 30 Nov 2020 19:08:12 +0000
ROA not after:            Mon 29 Nov 2021 19:13:12 +0000
asID:                     213036
IP address blocks:        45.132.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:74:d4:62:63:56:9d:04:a3:88:05:fa:f8:60:24:0f:c4:83:32:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
        Validity
            Not Before: Nov 30 19:08:12 2020 GMT
            Not After : Nov 29 19:13:12 2021 GMT
        Subject: CN=3082010A0282010100A5502FC5AF659ADC9C487A98BF4FBD6FCF5F6E05F92D59F4C4024A8DDE305C79C3673861185D5B3901A719BDCDE9E8F53D31061B8C684ACCBDF0386596F00DF7647C7E007E520BD87F9E066C4AF66FE377E1DFAD55B2548BF9100559B9E96634DB409FB3D1FCEB7B58A79870ECB93EA3F3B265E2CB1B90D7B01FE996CB209A5739DE669DF124AF04668F924546D22797730BB01860E1243761170AFC9457ACE3C63E621B48F81B7FE6FCB74C6D05C5CD18654BA611A2B7E20CA467C755EFD9BBDE4697BF5DF8D3AC9B7B29AFCA2352CCA6DF12A29E0DF5C860BCAE153643442AFF37C1D9328F33157BBCEAE9EB5A816F490D4D540AB40CFA63373E71A76C52950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:2f:c5:af:65:9a:dc:9c:48:7a:98:bf:4f:
                    bd:6f:cf:5f:6e:05:f9:2d:59:f4:c4:02:4a:8d:de:
                    30:5c:79:c3:67:38:61:18:5d:5b:39:01:a7:19:bd:
                    cd:e9:e8:f5:3d:31:06:1b:8c:68:4a:cc:bd:f0:38:
                    65:96:f0:0d:f7:64:7c:7e:00:7e:52:0b:d8:7f:9e:
                    06:6c:4a:f6:6f:e3:77:e1:df:ad:55:b2:54:8b:f9:
                    10:05:59:b9:e9:66:34:db:40:9f:b3:d1:fc:eb:7b:
                    58:a7:98:70:ec:b9:3e:a3:f3:b2:65:e2:cb:1b:90:
                    d7:b0:1f:e9:96:cb:20:9a:57:39:de:66:9d:f1:24:
                    af:04:66:8f:92:45:46:d2:27:97:73:0b:b0:18:60:
                    e1:24:37:61:17:0a:fc:94:57:ac:e3:c6:3e:62:1b:
                    48:f8:1b:7f:e6:fc:b7:4c:6d:05:c5:cd:18:65:4b:
                    a6:11:a2:b7:e2:0c:a4:67:c7:55:ef:d9:bb:de:46:
                    97:bf:5d:f8:d3:ac:9b:7b:29:af:ca:23:52:cc:a6:
                    df:12:a2:9e:0d:f5:c8:60:bc:ae:15:36:43:44:2a:
                    ff:37:c1:d9:32:8f:33:15:7b:bc:ea:e9:eb:5a:81:
                    6f:49:0d:4d:54:0a:b4:0c:fa:63:37:3e:71:a7:6c:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:BD:9A:4D:27:14:91:EA:68:61:A6:13:CB:C2:64:EF:77:99:B5
            X509v3 Authority Key Identifier:
                keyid:54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135392e302f32342d3234203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:4f:9a:38:68:51:2c:26:dc:1f:f6:37:4e:8b:bc:46:cd:
         02:4d:82:4c:3c:14:1d:61:a4:c8:e0:7f:6c:68:7f:4d:8a:a5:
         fb:6d:13:7a:90:3e:d2:7d:9d:3f:af:ab:8a:4b:27:4b:61:9c:
         8f:3b:46:cb:93:2b:bc:cb:5f:bd:14:b9:7c:08:26:1c:5d:5b:
         44:64:ad:f3:1e:97:36:13:68:d1:7c:cb:06:93:53:e4:9d:4e:
         06:7f:22:2b:1d:9a:6c:57:08:34:0f:8a:9b:55:19:48:2e:80:
         9d:fc:c8:a0:2e:fa:8e:6a:84:2a:67:eb:57:a5:1b:ad:c2:41:
         fa:96:be:cc:31:4d:d3:76:31:08:79:e2:40:b7:71:6d:cb:04:
         bb:03:4f:49:c4:d3:9a:0f:cf:2a:0c:ca:0e:71:8d:f5:58:f6:
         a3:b2:72:a8:5d:c3:6b:0d:31:e9:3f:6c:f9:ef:80:40:db:63:
         31:cb:84:c9:2c:61:5f:99:81:31:01:a8:ec:f5:b7:b1:89:79:
         1b:bc:13:7f:48:5a:9a:dd:38:3c:f0:f9:19:58:ee:2f:15:d8:
         df:31:41:4d:b7:47:88:09:21:f8:2a:ea:e2:ce:7a:3c:a1:46:
         f2:9d:ab:ca:cf:a8:8e:1d:c0:67:72:34:1c:d5:83:01:4e:c8:
         9e:ec:3c:a5
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIULHTUYmNWnQSjiAX6+GAkD8SDMhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRmNTg3M2MxNDJhYjdiMjlkYzRmZDdmZTdhMjNhMzg0
Mzk0YzdiMTAeFw0yMDExMzAxOTA4MTJaFw0yMTExMjkxOTEzMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTU1MDJGQzVBRjY1OUFEQzlD
NDg3QTk4QkY0RkJENkZDRjVGNkUwNUY5MkQ1OUY0QzQwMjRBOERERTMwNUM3OUMz
NjczODYxMTg1RDVCMzkwMUE3MTlCRENERTlFOEY1M0QzMTA2MUI4QzY4NEFDQ0JE
RjAzODY1OTZGMDBERjc2NDdDN0UwMDdFNTIwQkQ4N0Y5RTA2NkM0QUY2NkZFMzc3
RTFERkFENTVCMjU0OEJGOTEwMDU1OUI5RTk2NjM0REI0MDlGQjNEMUZDRUI3QjU4
QTc5ODcwRUNCOTNFQTNGM0IyNjVFMkNCMUI5MEQ3QjAxRkU5OTZDQjIwOUE1NzM5
REU2NjlERjEyNEFGMDQ2NjhGOTI0NTQ2RDIyNzk3NzMwQkIwMTg2MEUxMjQzNzYx
MTcwQUZDOTQ1N0FDRTNDNjNFNjIxQjQ4RjgxQjdGRTZGQ0I3NEM2RDA1QzVDRDE4
NjU0QkE2MTFBMkI3RTIwQ0E0NjdDNzU1RUZEOUJCREU0Njk3QkY1REY4RDNBQzlC
N0IyOUFGQ0EyMzUyQ0NBNkRGMTJBMjlFMERGNUM4NjBCQ0FFMTUzNjQzNDQyQUZG
MzdDMUQ5MzI4RjMzMTU3QkJDRUFFOUVCNUE4MTZGNDkwRDRENTQwQUI0MENGQTYz
MzczRTcxQTc2QzUyOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApVAvxa9lmtycSHqYv0+9b89fbgX5LVn0xAJKjd4wXHnDZzhhGF1b
OQGnGb3N6ej1PTEGG4xoSsy98DhllvAN92R8fgB+UgvYf54GbEr2b+N34d+tVbJU
i/kQBVm56WY020Cfs9H863tYp5hw7Lk+o/OyZeLLG5DXsB/plssgmlc53mad8SSv
BGaPkkVG0ieXcwuwGGDhJDdhFwr8lFes48Y+YhtI+Bt/5vy3TG0Fxc0YZUumEaK3
4gykZ8dV79m73kaXv13406ybeymvyiNSzKbfEqKeDfXIYLyuFTZDRCr/N8HZMo8z
FXu86unrWoFvSQ1NVAq0DPpjNz5xp2xSlQIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FHRCvZpNJxSR6mhhphPLwmTvd5m1MB8GA1UdIwQYMBaAFFT1hzwUKreyncT9f+ei
OjhDlMexMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zMi81NEY1
ODczQzE0MkFCN0IyOURDNEZEN0ZFN0EyM0EzODQzOTRDN0IxLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBXSFBCUXF0N0tkeFAxXzU2STZPRU9VeDdFLmNlcjCB
iwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zMi8zNDM1MmUzMTMzMzIyZTMx
MzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzMwMzMzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC2EnzANBgkqhkiG9w0BAQsFAAOCAQEACk9PmjhoUSwm3B/2N06LvEbNAk2C
TDwUHWGkyOB/bGh/TYql+20TepA+0n2dP6+riksnS2GcjztGy5MrvMtfvRS5fAgm
HF1bRGSt8x6XNhNo0XzLBpNT5J1OBn8iKx2abFcINA+Km1UZSC6AnfzIoC76jmqE
KmfrV6UbrcJB+pa+zDFN03YxCHniQLdxbcsEuwNPScTTmg/PKgzKDnGN9Vj2o7Jy
qF3Daw0x6T9s+e+AQNtjMcuEySxhX5mBMQGo7PW3sYl5G7wTf0hamt04PPD5GVju
LxXY3zFBTbdHiAkh+Crq4s56PKFG8p2rys+ojh3AZ3I0HNWDAU7Inuw8pQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org