Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
File:                     34352e3134302e3138362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1EpSE9FlZqQQVuTcr/LJlk/z2zpg9/5DGNC+XATqsSY=
Subject key identifier:   52:42:1D:6A:2C:22:A5:E4:32:BB:72:BF:FC:9C:86:F9:2A:1D:AD:FC
Certificate issuer:       /CN=01e7a569556a65e7d9852cf72ac4c466ac380be8
Certificate serial:       67FE4F898522C0C5A1480B3FA0F03615D6CDF859
Authority key identifier: 01:E7:A5:69:55:6A:65:E7:D9:85:2C:F7:2A:C4:C4:66:AC:38:0B:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AeelaVVqZefZhSz3KsTEZqw4C-g.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:13:46 +0000
ROA not before:           Mon 30 Nov 2020 19:08:46 +0000
ROA not after:            Mon 29 Nov 2021 19:13:46 +0000
asID:                     61317
IP address blocks:        45.140.186.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fe:4f:89:85:22:c0:c5:a1:48:0b:3f:a0:f0:36:15:d6:cd:f8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7a569556a65e7d9852cf72ac4c466ac380be8
        Validity
            Not Before: Nov 30 19:08:46 2020 GMT
            Not After : Nov 29 19:13:46 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:85:01:eb:a2:9a:38:02:89:5e:f6:22:36:
                    0f:e5:40:c1:4f:ca:79:4c:fc:7d:ae:f2:2a:26:a1:
                    44:ad:ee:cf:79:4a:23:6c:5c:dc:5a:10:7f:fa:e8:
                    5f:99:0e:34:6d:ce:d4:c4:b2:14:a9:e8:9c:1f:85:
                    0b:ab:a6:61:83:a1:8f:de:4c:55:ad:09:9f:5e:79:
                    af:9f:a3:0c:85:89:eb:6c:b1:7f:43:19:76:83:d8:
                    e6:6a:7c:ca:8c:b9:84:5c:dc:97:6c:8e:87:7c:c1:
                    3a:82:de:b2:34:bc:04:d3:f1:9c:17:27:64:a8:24:
                    ab:88:0d:b4:84:b9:06:0e:36:e8:a3:fa:81:d4:e9:
                    ab:52:32:94:c0:89:b9:8f:64:77:c1:cf:19:68:bf:
                    23:20:78:fa:42:65:98:79:eb:1f:78:ef:3b:5b:f1:
                    57:35:5e:80:cc:0f:ae:18:74:7a:e9:d1:63:79:89:
                    8d:61:08:de:41:ac:db:85:9a:9c:a0:b0:f1:75:60:
                    a4:75:20:5a:cc:72:81:07:75:70:53:bb:d9:72:1b:
                    c4:91:ec:9f:c6:28:65:96:c0:51:4e:97:fb:14:91:
                    17:b6:fa:b3:94:23:d5:38:46:a3:80:45:d5:9a:fe:
                    20:f7:c7:ef:2c:74:a9:86:74:e0:27:89:a9:69:e4:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:42:1D:6A:2C:22:A5:E4:32:BB:72:BF:FC:9C:86:F9:2A:1D:AD:FC
            X509v3 Authority Key Identifier:
                keyid:01:E7:A5:69:55:6A:65:E7:D9:85:2C:F7:2A:C4:C4:66:AC:38:0B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/36/01E7A569556A65E7D9852CF72AC4C466AC380BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeelaVVqZefZhSz3KsTEZqw4C-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:07:f4:18:be:c1:5e:85:a9:74:1b:3f:4a:72:ac:b8:29:d7:
         aa:02:21:32:e4:be:2a:7e:a0:f1:0a:63:57:18:e3:3d:4a:5a:
         72:97:c9:03:cf:87:23:ce:c8:d7:e7:0d:a1:c2:48:3e:cf:c7:
         21:fa:ed:01:54:45:1e:30:42:4f:fb:6d:68:74:61:a9:41:3b:
         b7:0a:25:54:23:38:e1:e5:06:9d:9f:c1:c9:ce:46:f4:28:64:
         c1:0c:ca:f6:79:71:c5:a8:5e:b0:3d:e7:98:13:38:b4:21:9a:
         f5:67:94:dc:c6:da:51:50:09:85:c4:70:08:5d:d3:10:85:23:
         c9:7d:e3:04:f9:4e:e1:52:a1:d9:a9:e9:ea:03:5a:25:aa:22:
         32:9e:a2:2b:03:95:38:b4:e6:0a:6a:f6:26:a9:30:bf:a0:52:
         a3:8c:4f:24:11:17:5a:68:09:14:de:62:6e:3a:44:0d:eb:c9:
         0d:70:9e:d0:0c:a0:0b:93:64:50:41:7f:7b:cc:97:6c:97:ff:
         5a:27:c1:ae:9e:da:31:1f:7f:6d:37:91:2b:66:c1:cb:d3:06:
         df:ca:12:1d:f7:79:e4:f2:c2:8e:30:ea:a0:06:e2:9c:8c:3b:
         aa:17:c9:f4:f3:bc:1b:63:8a:5b:d1:ee:43:0f:0b:ef:69:7f:
         00:e7:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org