Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/47/34352e36372e3231362e302f32332d3234203d3e203631333137.roa
File:                     34352e36372e3231362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          MhV7IpXJDa9bwVFK1dMwTwIkFfAlPzsViudSBBOhl+0=
Subject key identifier:   D6:30:C4:F6:37:67:91:70:66:90:23:D2:24:0B:19:5E:B7:40:01:C8
Certificate issuer:       /CN=1df1bf6ecef25c0ee0a521df9257ae3ee7a24dbb
Certificate serial:       222CACF6C5CC0D1A41D69F62980FC6B591166902
Authority key identifier: 1D:F1:BF:6E:CE:F2:5C:0E:E0:A5:21:DF:92:57:AE:3E:E7:A2:4D:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfG_bs7yXA7gpSHfkleuPueiTbs.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/47/34352e36372e3231362e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:25:01 +0000
ROA not before:           Tue 01 Dec 2020 23:20:01 +0000
ROA not after:            Tue 30 Nov 2021 23:25:01 +0000
asID:                     61317
IP address blocks:        45.67.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2c:ac:f6:c5:cc:0d:1a:41:d6:9f:62:98:0f:c6:b5:91:16:69:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df1bf6ecef25c0ee0a521df9257ae3ee7a24dbb
        Validity
            Not Before: Dec  1 23:20:01 2020 GMT
            Not After : Nov 30 23:25:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:fb:c8:26:cc:10:f1:22:53:13:7f:a1:8c:
                    65:dd:59:b8:14:a8:1c:c7:c3:2b:f5:91:f0:be:85:
                    44:55:1b:f9:c6:ec:20:15:10:ca:32:d1:dc:b4:d9:
                    19:5e:e8:19:98:89:4c:73:80:85:c7:f7:5c:e1:28:
                    c1:4a:4a:dc:84:b1:c9:de:0f:0b:16:29:20:52:a9:
                    b7:60:12:6c:6e:c0:18:77:15:71:ad:33:f1:ca:55:
                    60:0d:1e:54:db:f7:98:61:de:f9:8c:0a:e6:10:75:
                    67:23:a8:34:2e:68:1d:49:91:6b:49:26:5c:15:43:
                    82:b9:98:56:bb:8f:39:5c:1e:81:61:83:8e:c2:b9:
                    dd:84:6f:f3:e9:8c:b0:f8:38:07:e9:3b:81:f0:ad:
                    ff:f2:e1:1c:42:64:5a:0c:2a:17:ae:02:b1:34:c0:
                    99:77:78:f7:5b:65:a1:1d:3c:f2:98:c7:e6:bc:cf:
                    af:05:23:de:54:cd:d2:c1:58:76:48:af:4c:41:ff:
                    10:1c:1a:02:5e:c9:be:d0:04:eb:ba:02:c9:99:14:
                    56:b5:f1:a5:80:45:85:52:59:34:9e:ae:78:22:a0:
                    6f:21:7b:77:26:ed:31:c5:ca:31:0d:1f:9d:55:11:
                    5a:2b:6e:0a:46:8e:55:6a:4f:52:4f:00:77:62:71:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:C4:F6:37:67:91:70:66:90:23:D2:24:0B:19:5E:B7:40:01:C8
            X509v3 Authority Key Identifier:
                keyid:1D:F1:BF:6E:CE:F2:5C:0E:E0:A5:21:DF:92:57:AE:3E:E7:A2:4D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfG_bs7yXA7gpSHfkleuPueiTbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/47/34352e36372e3231362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:87:f7:c1:c4:51:1b:15:d5:c3:f0:81:4c:3d:a4:bb:67:15:
         ad:ca:a7:38:76:b2:19:b5:55:1e:3a:20:ee:68:63:50:d8:8b:
         e3:18:b4:ba:2f:67:25:6e:2d:4f:83:20:13:9a:e0:7a:46:c8:
         d4:a5:c0:96:59:f2:a5:cd:c6:98:8f:77:43:f5:09:62:30:66:
         bf:47:14:82:25:f7:87:22:5e:77:3c:91:cc:3a:24:f4:e7:46:
         39:c7:91:9c:98:e2:ae:04:7b:6e:e3:90:d1:7a:ea:fd:b6:22:
         72:6f:83:38:0a:1f:6b:12:7c:a1:db:53:f8:dc:72:61:66:96:
         65:64:af:4b:c7:5f:64:ca:e1:9d:77:ff:8b:a8:46:0d:1a:1f:
         03:0f:82:21:52:a9:2c:d7:72:59:86:f9:e3:47:07:4d:ff:78:
         b3:0b:cc:78:00:aa:12:be:3e:aa:3f:9a:6b:03:44:2e:79:c0:
         ed:30:67:0f:3e:a3:44:14:e4:92:a5:1c:48:2b:ec:ac:69:19:
         4f:29:93:c2:15:21:0e:01:07:06:c0:e1:98:27:12:d7:c2:a1:
         14:72:8e:15:87:da:cb:e9:e0:38:86:eb:49:cc:13:79:63:18:
         fb:da:e7:bc:79:a6:6d:d5:bf:0f:62:b8:c0:d3:4d:85:97:79:
         93:a4:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org