Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e38302e3138342e302f32322d3234203d3e2030.roa
File:                     34352e38302e3138342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          VR8YMydThgafksy0xjynzXydKty9APiTZWk5LEl+Vx4=
Subject key identifier:   54:0F:4F:82:AD:97:AF:B9:D8:FF:A5:DC:83:00:ED:FE:FA:F9:6B:1A
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       45FBB259E3A787418E2EA28BEAA2CC4C9C88CBD9
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e38302e3138342e302f32322d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:00:48 +0000
ROA not before:           Fri 03 Mar 2023 15:55:48 +0000
ROA not after:            Fri 01 Mar 2024 16:00:48 +0000
asID:                     0
IP address blocks:        45.80.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fb:b2:59:e3:a7:87:41:8e:2e:a2:8b:ea:a2:cc:4c:9c:88:cb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:55:48 2023 GMT
            Not After : Mar  1 16:00:48 2024 GMT
        Subject: CN=540F4F82AD97AFB9D8FFA5DC8300EDFEFAF96B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:90:bd:77:8d:fc:56:a6:2b:0e:dd:b7:bb:
                    1e:08:8b:a1:c2:3a:62:c2:a1:dc:84:5e:8f:94:ce:
                    ab:20:87:0f:6f:c5:a6:a6:a3:92:f3:00:96:c2:d0:
                    ee:ed:25:42:8f:f9:e9:a8:6a:58:26:2f:98:47:86:
                    98:cd:5d:69:5c:5a:99:4e:f9:a9:07:21:f3:b1:06:
                    30:f5:f0:4b:13:a0:f1:46:9c:6b:71:8d:97:51:80:
                    15:19:2c:02:d5:00:54:73:19:32:06:b2:d9:75:91:
                    87:f8:f3:c3:cb:0d:a1:b3:d1:c4:6a:8a:1a:e3:98:
                    3a:88:48:a0:6d:4b:db:ee:13:71:b9:0e:73:37:e5:
                    fb:ce:e0:b5:88:d8:81:39:09:38:2f:6b:13:65:0e:
                    25:e9:8d:a8:72:91:c6:ed:ad:4b:00:da:0d:27:b8:
                    35:7b:a4:1e:ba:3e:38:ea:3e:1c:9c:28:b0:5d:69:
                    61:3b:02:96:ea:7c:4e:a1:69:86:32:b4:b4:bc:2e:
                    64:c8:1e:21:35:1e:18:4a:21:bd:b4:fc:6f:0e:43:
                    90:4d:52:ec:c4:e6:78:c1:d9:7e:6f:cb:9b:a2:41:
                    df:03:c1:14:d6:41:27:d3:96:c1:58:14:a8:45:34:
                    e2:09:34:08:c5:2d:12:19:36:d4:b8:88:1d:36:3f:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0F:4F:82:AD:97:AF:B9:D8:FF:A5:DC:83:00:ED:FE:FA:F9:6B:1A
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e38302e3138342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:a9:c4:75:32:03:44:8a:ef:7f:49:58:d8:1b:39:af:2a:33:
         aa:6d:f2:fa:d8:66:ac:3c:d0:77:33:cb:bc:d6:5d:d5:fc:ca:
         c4:23:ff:63:d9:88:cb:77:06:48:64:d0:d9:83:b0:d8:0b:c8:
         62:ad:a6:55:7f:c7:23:d5:49:71:f7:2c:8e:72:eb:fd:57:e5:
         d5:d7:a3:d1:b7:c4:3e:5e:27:28:e7:6b:28:3c:0f:fa:cb:4c:
         6b:ad:9c:e9:d9:d3:ce:b8:2d:0c:f5:a5:69:ad:f0:0b:91:ef:
         3e:01:a5:68:57:8d:4a:32:71:79:4e:6b:06:1c:37:22:72:bc:
         99:8a:10:5b:6f:6c:59:31:e3:70:c2:d5:87:c9:42:da:55:c2:
         20:9e:0c:62:de:29:16:4a:ea:29:61:1b:a7:e5:4f:fa:5b:8f:
         5b:19:21:1a:43:ef:5a:cd:96:56:63:20:30:d2:9c:17:ff:20:
         ae:b1:2e:cf:dc:27:76:4d:71:1f:98:96:71:ef:2c:20:e3:df:
         e8:91:e0:05:34:c6:4f:5e:df:f7:5f:f7:5c:99:6b:d5:46:62:
         38:56:1d:ea:dc:3e:96:6b:ab:00:5e:09:fc:0f:9d:38:b7:c5:
         6a:20:53:6d:ef:4a:00:cf:bf:6f:83:36:81:d3:1a:71:00:9c:
         6d:78:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org