Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa
File:                     34352e3133302e3130362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          GwJvyZcvUPh8pESUyshOk78mIPbJBMxhwmEtu+UtR1Y=
Subject key identifier:   2D:AD:3D:BB:E6:0E:7B:4C:D2:64:C4:F6:1C:DB:89:9D:88:0D:21:96
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       44F1F34F9E0C3387B56B311D08BB296C547592F8
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:41 +0000
ROA not before:           Sat 22 Oct 2022 04:28:41 +0000
ROA not after:            Sat 21 Oct 2023 04:33:41 +0000
asID:                     61317
IP address blocks:        45.130.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f1:f3:4f:9e:0c:33:87:b5:6b:31:1d:08:bb:29:6c:54:75:92:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:41 2022 GMT
            Not After : Oct 21 04:33:41 2023 GMT
        Subject: CN=2DAD3DBBE60E7B4CD264C4F61CDB899D880D2196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:1a:01:e7:4b:5a:32:8d:4f:db:e2:7d:68:
                    f9:68:50:de:f1:c4:3e:53:e9:c7:2b:6d:ea:28:c9:
                    86:83:46:20:31:c2:2d:35:8e:41:77:47:40:13:11:
                    27:6a:8f:25:de:1c:bd:df:4d:30:0c:2c:41:bf:3c:
                    95:16:01:db:ec:f9:5a:9d:f1:10:1d:df:66:34:7d:
                    49:9a:f1:22:c9:08:5e:33:44:37:d1:f0:d9:aa:69:
                    92:6b:8a:d5:ff:52:33:32:5f:05:37:ab:e1:8f:d9:
                    31:7e:a6:0c:be:eb:78:5e:4f:e3:7d:30:2a:c9:f3:
                    97:57:5d:e6:14:db:d1:1a:83:6a:c4:3e:5f:ae:7c:
                    3a:ed:87:6b:15:db:93:1b:8c:68:62:97:dd:40:cf:
                    9e:fb:ea:85:34:3e:7d:ac:9d:84:7a:01:5a:8e:cf:
                    2b:f0:50:86:8b:1a:23:e8:e8:87:86:54:01:eb:2b:
                    36:d1:fa:37:a8:fc:6f:1f:37:cd:52:e2:e1:a2:24:
                    09:23:f5:fa:09:bc:0d:e8:a6:b6:72:c2:30:1c:78:
                    1e:c5:06:94:c8:67:9c:87:1a:6e:a5:28:5f:38:bd:
                    67:64:b4:4b:aa:65:66:69:38:2d:36:1e:42:e1:8e:
                    87:19:26:90:1a:ab:35:22:9d:4c:a1:37:10:4b:04:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AD:3D:BB:E6:0E:7B:4C:D2:64:C4:F6:1C:DB:89:9D:88:0D:21:96
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:4b:c2:99:28:a5:6a:5e:ee:fc:6d:79:e2:65:a5:c6:40:ba:
         1f:9b:a3:6f:c4:d6:db:58:27:ac:f9:75:0a:76:72:70:e7:11:
         5d:cd:15:21:2f:ff:2c:b4:dd:bc:90:45:f5:82:04:19:f4:e8:
         1a:f6:ab:d8:f4:4d:e8:bf:62:c4:cb:14:dc:fb:25:0f:8e:55:
         17:60:b5:89:6f:cb:e8:5b:20:34:2b:2a:9e:83:87:c3:13:94:
         62:64:c8:43:2e:3a:f1:11:3c:98:52:71:17:11:45:94:f7:83:
         5f:6a:b3:1f:4a:82:c3:22:30:89:e9:42:0a:e3:6e:5f:8e:da:
         14:e9:89:0a:c8:9a:f1:b8:1b:24:a4:fe:2e:f2:21:de:46:93:
         d0:f9:29:84:50:b9:53:3e:57:9a:d0:e6:cd:e3:84:36:e6:bd:
         56:df:9e:a2:bf:f3:70:46:b7:77:8f:9d:76:e2:55:ea:1e:4a:
         86:7d:6b:59:cb:bb:4d:d2:63:9a:23:fa:da:b0:ce:d1:46:1a:
         6c:3b:d5:68:4c:f2:3d:21:2a:17:4c:84:0d:a0:89:78:e5:b5:
         4f:ce:d4:bc:af:b9:f2:ac:99:be:a9:2b:94:02:f2:16:67:10:
         3f:56:a1:23:57:f8:4d:c0:97:61:2a:f2:1a:c3:e8:68:5b:ea:
         e3:fb:1c:34
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIURPHzT54MM4e1azEdCLspbFR1kvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDFaFw0yMzEwMjEwNDMzNDFaMDMxMTAvBgNV
BAMTKDJEQUQzREJCRTYwRTdCNENEMjY0QzRGNjFDREI4OTlEODgwRDIxOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZRoB50taMo1P2+J9aPloUN7x
xD5T6ccrbeooyYaDRiAxwi01jkF3R0ATESdqjyXeHL3fTTAMLEG/PJUWAdvs+Vqd
8RAd32Y0fUma8SLJCF4zRDfR8NmqaZJritX/UjMyXwU3q+GP2TF+pgy+63heT+N9
MCrJ85dXXeYU29Eag2rEPl+ufDrth2sV25MbjGhil91Az5776oU0Pn2snYR6AVqO
zyvwUIaLGiPo6IeGVAHrKzbR+jeo/G8fN81S4uGiJAkj9foJvA3oprZywjAceB7F
BpTIZ5yHGm6lKF84vWdktEuqZWZpOC02HkLhjocZJpAaqzUinUyhNxBLBH2TAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQULa09u+YOe0zSZMT2HNuJnYgNIZYwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zNDM1MmUzMTMzMzAyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtgmowDQYJKoZIhvcNAQELBQADggEBAKFLwpko
pWpe7vxteeJlpcZAuh+bo2/E1ttYJ6z5dQp2cnDnEV3NFSEv/yy03byQRfWCBBn0
6Br2q9j0Tei/YsTLFNz7JQ+OVRdgtYlvy+hbIDQrKp6Dh8MTlGJkyEMuOvERPJhS
cRcRRZT3g19qsx9KgsMiMInpQgrjbl+O2hTpiQrImvG4GySk/i7yId5Gk9D5KYRQ
uVM+V5rQ5s3jhDbmvVbfnqK/83BGt3ePnXbiVeoeSoZ9a1nLu03SY5oj+tqwztFG
Gmw71WhM8j0hKhdMhA2giXjltU/O1LyvufKsmb6pK5QC8hZnED9WoSNX+E3Al2Eq
8hrD6Ghb6uP7HDQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org