Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132302e302f32342d3234203d3e203437353833.roa
File:                     34352e3135312e3132302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          7Zj6O/jGzA1Y78HEStkyZzFkcC8iTbDgXmGaROWLh1Q=
Subject key identifier:   1D:31:7F:C7:13:9F:B9:17:50:3F:B0:77:6F:B6:1B:D2:B1:70:BF:60
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       78E18C02BFC466F047C1CCB67A1859D8A3992180
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132302e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     47583
IP address blocks:        45.151.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e1:8c:02:bf:c4:66:f0:47:c1:cc:b6:7a:18:59:d8:a3:99:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=1D317FC7139FB917503FB0776FB61BD2B170BF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:31:9e:53:3d:fa:75:bf:5d:ee:57:26:46:
                    c9:ef:cf:e4:06:00:0e:f5:d8:1a:b8:d9:13:b9:71:
                    dc:a2:7b:43:cb:d3:58:3c:18:46:c9:ed:0e:4e:55:
                    7e:1d:71:09:77:48:3f:f8:38:91:d8:3a:f6:46:68:
                    01:09:0e:39:94:9b:4f:6a:e1:21:5e:27:fd:8d:64:
                    dd:14:8a:e6:c7:c1:01:e9:0f:1d:45:54:e0:0b:9f:
                    35:5a:03:b7:93:00:b6:07:30:41:20:52:8c:34:95:
                    85:8c:30:87:72:ed:39:07:7a:21:94:bf:93:98:0c:
                    76:7b:82:54:4b:51:ee:fb:d8:0a:75:b3:62:55:ff:
                    24:79:2a:6d:a3:1d:62:60:8f:84:47:60:b8:7f:c8:
                    36:92:fe:5e:03:a5:4c:54:e2:1a:9d:e6:54:1c:89:
                    1e:1c:3e:30:ac:03:38:bc:dc:a5:3d:b9:a4:68:93:
                    ce:21:b5:4e:78:75:29:30:98:3f:45:62:00:f4:08:
                    1b:da:8b:95:b6:13:a2:61:3b:a1:71:62:f8:f6:71:
                    77:4f:a3:c2:4c:d2:db:4e:63:aa:88:26:1d:cf:12:
                    9f:b5:47:84:a8:b2:9b:60:49:57:5a:40:10:e6:b2:
                    c5:f5:4f:76:70:d5:0a:7f:67:21:d7:13:d3:00:4d:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:31:7F:C7:13:9F:B9:17:50:3F:B0:77:6F:B6:1B:D2:B1:70:BF:60
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:e1:ed:1d:f9:c7:e7:2f:a5:96:f6:01:07:dd:18:76:db:
         44:ed:51:59:ce:32:6f:a1:57:b9:bb:ee:fd:da:2c:7f:a5:5a:
         27:32:f8:18:87:fd:7b:98:0c:26:cd:64:40:f4:41:4f:35:ea:
         f0:d7:05:7f:58:70:0f:95:0c:53:c0:b6:63:e5:4c:7c:aa:f2:
         13:ec:a7:a8:b7:58:6f:e2:99:df:29:39:3f:90:4e:de:ca:2f:
         af:05:e0:62:13:15:05:be:b7:1e:01:ea:a4:ea:36:e7:9f:3e:
         cb:85:3f:8d:f6:71:e7:0b:12:a8:5f:46:37:39:38:f7:86:ba:
         15:d6:ac:51:69:bb:6c:b3:a6:ee:71:b0:0d:4d:54:50:fc:0e:
         f8:c0:d3:76:1e:0e:05:92:39:c7:a7:b4:7a:bf:33:65:e5:bf:
         2a:df:6b:ac:1d:bf:f2:68:6f:2c:46:f6:f4:d2:19:9d:5d:76:
         79:0b:90:7d:62:f9:0f:24:d3:65:ad:55:cf:94:e1:86:06:a9:
         97:5d:43:fe:ee:4a:a4:d9:c9:9d:1c:6f:69:84:c3:be:0b:15:
         6b:1d:68:e2:81:69:09:62:f6:d7:3c:74:d8:d5:5a:cf:9b:b2:
         16:99:58:ad:26:6e:49:e0:a4:e3:7f:12:a3:95:da:9c:d4:1b:
         12:7a:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org