Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa
File:                     34352e3134312e32302e302f32332d3234203d3e20323132333832.roa (raw, json)
Hash identifier:          f5o0ci5HD5AjNkKRr9f35YjtKSpfQ4BUEVWQ2TtTxZY=
Subject key identifier:   E7:11:D7:97:BD:88:B3:73:ED:2D:2B:06:B1:43:8D:0E:04:48:4F:C8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2C1D663C664ACC93CC3E0312BFAE72C68CCC2F85
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     212382
IP address blocks:        45.141.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1d:66:3c:66:4a:cc:93:cc:3e:03:12:bf:ae:72:c6:8c:cc:2f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=E711D797BD88B373ED2D2B06B1438D0E04484FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:6d:36:99:b0:32:0b:d4:1d:65:9d:d7:09:
                    5b:66:05:ff:b5:7d:9e:28:31:09:54:de:bc:6b:0b:
                    c0:3a:ee:a6:ae:d9:ea:33:5b:3f:a4:3e:99:8b:86:
                    f3:6c:8e:42:33:4c:7e:a5:1b:d0:13:9b:27:63:26:
                    58:a3:d3:5c:5a:ed:f7:6b:0e:49:26:bb:e2:8d:3b:
                    9c:cf:78:65:32:ff:9d:0e:b3:36:61:63:6e:1c:50:
                    46:af:ef:cb:5d:cb:b4:2f:d4:b7:a7:aa:67:5d:dc:
                    99:e8:71:0b:fc:a4:35:e4:d8:74:67:1e:ae:3f:cf:
                    10:76:cb:58:20:5f:1b:c1:c2:10:93:03:68:64:ad:
                    e6:96:8c:5b:d3:84:09:2e:74:3f:f1:ea:ac:89:c4:
                    ac:5c:ba:3e:da:67:31:ef:a7:1f:47:6e:b6:d9:6e:
                    1c:6c:e8:ae:0c:6d:69:84:85:7f:42:eb:4e:b7:0d:
                    4a:b3:60:e0:65:20:1e:b6:e1:cd:40:b9:ce:c9:56:
                    a6:77:69:b4:fe:85:24:f0:9c:07:55:35:4a:c4:9a:
                    53:8f:5e:c2:64:0a:6a:26:e9:8e:4c:e2:51:83:73:
                    d6:f1:9d:2e:d0:70:6f:83:08:e8:bf:2a:4c:63:c4:
                    d6:28:ef:8b:e8:ac:1e:a3:cf:0d:e4:e7:13:07:03:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:11:D7:97:BD:88:B3:73:ED:2D:2B:06:B1:43:8D:0E:04:48:4F:C8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:51:17:d1:b1:39:c1:e7:0f:f8:a2:86:07:1d:df:13:5b:ca:
         ef:fb:de:0a:49:e5:0e:2c:c3:00:d8:c3:6a:ec:ab:71:ba:dc:
         d8:4a:45:3b:63:82:69:75:98:33:40:9c:35:84:da:70:32:06:
         b0:23:0d:6e:8d:4b:90:7e:55:37:6b:78:14:9e:72:b3:86:b6:
         0a:35:56:6d:c3:ad:83:a8:8d:11:02:ab:b9:a0:ee:de:12:7c:
         9e:c4:3d:bf:84:0a:49:02:f4:7d:13:7d:43:d6:23:b0:68:5f:
         76:01:03:61:79:43:e0:75:8c:65:56:3e:87:a6:b8:d9:92:c4:
         be:5f:77:3d:f4:04:97:5f:46:66:ef:0a:7d:98:67:18:50:82:
         9a:d1:7a:e3:c6:dc:fe:9f:8a:83:9d:0e:7d:2c:42:49:9d:88:
         a6:51:2d:52:7e:88:d3:2c:ba:92:d7:5b:1d:5f:d6:b3:6c:c9:
         d7:e3:31:f8:f1:f0:a9:cf:ac:be:30:d0:31:bd:ac:42:51:e6:
         55:7f:93:0a:15:20:43:a1:49:7b:0c:22:41:af:0b:93:7a:1c:
         fa:56:61:ca:d8:dc:4b:6c:44:ea:3f:30:09:43:23:47:01:49:
         61:61:c5:a2:cf:38:97:a9:05:e7:34:1e:27:2e:26:b7:4a:ef:
         ad:08:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org