Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133342e302f32332d3234203d3e203631333137.roa
File:                     34352e382e3133342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          QMz0zE+qXQRIAWlvIcHJ5VW725FAhOtcqtcCfrRz8KQ=
Subject key identifier:   77:28:5E:54:D6:FA:5D:F4:C6:4F:69:2A:CF:50:C9:5A:3C:96:80:5B
Certificate issuer:       /CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
Certificate serial:       03CD205490B24CE71BEF83FB113B1F2C0A212576
Authority key identifier: 27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133342e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:26:13 +0000
ROA not before:           Tue 01 Dec 2020 23:21:13 +0000
ROA not after:            Tue 30 Nov 2021 23:26:13 +0000
asID:                     61317
IP address blocks:        45.8.134.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cd:20:54:90:b2:4c:e7:1b:ef:83:fb:11:3b:1f:2c:0a:21:25:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
        Validity
            Not Before: Dec  1 23:21:13 2020 GMT
            Not After : Nov 30 23:26:13 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:5c:eb:47:be:3e:91:e3:69:50:f1:7c:27:
                    d6:1c:18:c9:c8:c8:61:b1:92:0a:97:2b:95:53:4b:
                    30:30:ed:e0:2d:e0:12:f3:d5:57:e9:ad:1f:94:7e:
                    c8:9d:db:c9:48:c3:82:a6:89:e4:62:04:04:f5:4b:
                    90:37:9c:e9:b5:a6:89:8e:79:38:1d:c6:20:09:fc:
                    c4:27:a6:5e:e9:d3:86:34:5b:9d:a6:75:e7:6e:02:
                    87:94:53:1d:ca:d0:af:5b:c2:06:f5:5c:db:ab:f4:
                    89:63:70:12:7d:1f:6f:52:13:09:37:93:10:a9:88:
                    80:6f:18:82:80:85:d2:38:a4:37:bb:1e:b5:06:41:
                    7e:25:7d:cb:52:5b:36:2a:2b:a5:db:48:da:0d:92:
                    ff:6d:e2:b2:f8:f7:65:05:e1:1f:95:98:66:4d:11:
                    c6:18:b6:70:1d:85:86:2b:46:d1:50:59:32:ef:8c:
                    69:e4:2a:2f:8d:1b:a2:31:1e:93:e7:ac:f1:48:3a:
                    61:60:e1:d8:3c:87:67:f8:8a:0a:36:02:22:84:7f:
                    07:78:84:99:99:4c:1c:af:7d:ba:66:d1:3c:7a:d1:
                    b2:0f:86:5e:48:0d:3c:ec:cb:74:27:29:96:ed:55:
                    b2:7b:06:cd:d0:d1:1b:6b:22:3d:c4:61:1c:a7:4e:
                    b0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:28:5E:54:D6:FA:5D:F4:C6:4F:69:2A:CF:50:C9:5A:3C:96:80:5B
            X509v3 Authority Key Identifier:
                keyid:27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/2727235923158BC2DC42AD8D7CF3618A464AE58C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133342e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:13:61:45:f4:c2:9e:68:a4:0e:d7:27:b3:41:86:a3:2e:7c:
         11:12:ee:91:6d:c8:a2:56:09:c2:6e:b8:a8:cb:4c:d2:7e:47:
         8e:96:f6:17:c2:2d:c6:ea:ad:00:6a:78:72:6c:1d:78:d4:39:
         da:a5:c5:cb:c2:a0:4a:df:f4:8d:8e:31:28:ef:b3:3a:31:1b:
         92:f1:a7:5d:ab:4d:bc:bd:19:fb:09:17:b3:ee:60:44:e1:15:
         51:06:03:79:49:6b:47:8f:7b:27:5c:cc:c8:b3:91:6a:9f:a0:
         d2:f5:21:7e:6c:3f:a2:1d:50:ac:dd:d1:1b:e8:94:30:c0:12:
         0c:6b:f3:d1:94:d0:08:e2:ad:55:20:47:a0:16:a4:cf:9f:8c:
         81:1c:80:e2:2e:8d:9e:99:ad:15:9a:b3:72:5c:2d:e8:c3:91:
         ad:94:71:66:6d:eb:49:18:c4:c1:34:18:30:8e:a4:74:15:1d:
         c2:93:1c:16:22:a4:2a:b2:d7:1e:af:ac:9a:d5:87:5e:04:87:
         f8:aa:5f:1d:bd:49:4a:ba:de:6b:a6:7a:78:30:51:b4:f4:f9:
         83:d3:eb:c3:73:4b:53:8b:cc:a0:ce:ec:f0:b2:b8:78:8c:59:
         1b:46:bb:e2:28:23:83:ed:30:62:be:62:85:ec:82:b6:f6:c7:
         5b:46:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-fra.rpki-client.org