Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133322e302f32332d3234203d3e203631333137.roa
File:                     34352e382e3133322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          kcLx4wNuyAJ/Ef5kLx88TQAK7Tu6Vv2b6lw1LnH/o/M=
Subject key identifier:   AE:98:CE:A5:C4:30:4E:F5:C6:B7:7C:78:95:8D:2F:6F:A3:06:C0:B1
Certificate issuer:       /CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
Certificate serial:       30BA4D129220F331171DEEA75F8FCFCD3C5C7FFD
Authority key identifier: 27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133322e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:26:12 +0000
ROA not before:           Tue 01 Dec 2020 23:21:12 +0000
ROA not after:            Tue 30 Nov 2021 23:26:12 +0000
asID:                     61317
IP address blocks:        45.8.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ba:4d:12:92:20:f3:31:17:1d:ee:a7:5f:8f:cf:cd:3c:5c:7f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
        Validity
            Not Before: Dec  1 23:21:12 2020 GMT
            Not After : Nov 30 23:26:12 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:ff:fa:b0:ed:66:f1:9c:04:8c:39:16:8d:
                    55:84:72:c0:ab:bf:8c:3f:98:f9:ff:12:34:5a:d3:
                    36:d6:7d:8d:6c:f6:b6:db:11:db:d4:07:f9:23:ca:
                    09:21:95:78:7d:d1:c0:d2:b6:5b:e0:2f:0a:5b:86:
                    5f:79:6a:e0:31:99:2e:a7:4c:77:c5:5f:99:a4:b0:
                    10:eb:6a:69:69:5f:53:b7:51:38:d6:5c:7e:81:24:
                    dd:19:bf:b8:7b:83:e1:33:15:1e:94:f9:29:8e:29:
                    33:77:ff:a8:e7:3f:5f:e9:e7:92:7b:db:d0:ad:91:
                    ca:41:9e:97:31:df:ed:de:27:cc:6f:5f:e3:94:2b:
                    3d:3b:19:ba:89:f9:76:c6:11:19:6c:95:21:4b:4c:
                    f9:1a:61:07:e4:fa:09:70:47:e8:9b:42:2d:ea:40:
                    a1:7d:24:3a:49:36:8a:67:9a:0f:ca:1b:4c:01:6b:
                    5a:db:a2:d6:ed:24:1c:e7:07:1e:d1:85:50:55:76:
                    10:f4:a6:1c:ea:6d:aa:d9:be:70:97:05:68:4c:9b:
                    b8:08:b7:93:9a:4b:87:6e:d2:ed:fc:a5:f8:3d:93:
                    0e:2d:5c:49:e5:45:9c:3e:c3:43:a8:54:d8:42:78:
                    6b:ee:37:4e:83:bb:3f:09:28:96:4d:a6:30:56:68:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:98:CE:A5:C4:30:4E:F5:C6:B7:7C:78:95:8D:2F:6F:A3:06:C0:B1
            X509v3 Authority Key Identifier:
                keyid:27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/2727235923158BC2DC42AD8D7CF3618A464AE58C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:bc:bd:c0:9c:fb:ba:5f:68:02:62:bd:f2:af:ac:1a:0b:
         d1:c5:1e:85:9d:c9:ea:f4:50:08:df:21:9a:00:37:74:73:ae:
         49:6c:06:00:66:45:1a:61:28:f5:56:4e:c9:e7:bf:df:f4:84:
         74:42:c2:b2:93:a5:52:35:fb:10:59:34:5a:08:2e:f0:67:b1:
         ae:f5:a7:05:77:fd:95:05:31:75:d1:e9:79:4d:30:89:e4:d6:
         0a:a4:7c:29:19:91:4d:63:ae:f9:4b:ce:b0:20:6a:ef:e1:bc:
         26:f3:a5:75:65:51:35:44:f4:a1:a1:06:f9:32:0e:ef:2b:6b:
         37:09:12:d8:4f:06:b1:ec:5d:5e:8e:c4:bc:1b:5f:45:26:02:
         6a:3a:88:de:45:37:e6:d0:45:9b:e0:d0:97:4f:5b:b7:49:ec:
         94:3c:d7:30:2b:ab:cb:52:f4:fa:83:51:bc:65:bd:db:49:bb:
         fe:ff:60:6c:e7:cc:ab:79:cd:97:e9:c1:5f:91:b7:5a:dc:a4:
         e8:fc:83:73:ef:2c:a8:42:5c:76:68:14:d0:1e:de:4e:bb:b6:
         84:cc:94:69:11:31:72:cf:00:df:fa:7a:7c:e1:11:85:20:aa:
         41:e4:0c:e4:c3:c3:26:9b:bc:92:58:96:5d:bb:6d:7c:8a:df:
         50:a6:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org