Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e39322e382e302f32322d3234203d3e2030.roa
File:                     34352e39322e382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          UAChLmcx574hVwsq1SNJdSATTXxARoM4Le9BSAEjGks=
Subject key identifier:   E8:46:7E:44:6C:1B:8C:FD:12:4F:50:06:E0:2D:5F:21:41:9E:A1:61
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       078F92F2BE95D06179DEE5D80BDFC868FA34A7B0
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39322e382e302f32322d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:01:42 +0000
ROA not before:           Fri 03 Mar 2023 15:56:42 +0000
ROA not after:            Fri 01 Mar 2024 16:01:42 +0000
asID:                     0
IP address blocks:        45.92.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8f:92:f2:be:95:d0:61:79:de:e5:d8:0b:df:c8:68:fa:34:a7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:56:42 2023 GMT
            Not After : Mar  1 16:01:42 2024 GMT
        Subject: CN=E8467E446C1B8CFD124F5006E02D5F21419EA161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:29:f2:17:51:cf:51:47:01:b3:5d:76:cf:
                    2a:2c:e7:72:15:04:6d:f6:79:a7:b2:0e:be:78:d4:
                    4f:a3:87:ad:ec:bc:3b:cd:13:8a:8a:e8:9b:a3:3e:
                    c1:e1:85:78:1f:eb:7c:1e:41:b5:ed:c5:06:ad:7a:
                    86:0c:8f:f3:82:f6:3e:02:da:c1:8d:9e:be:b6:7d:
                    59:da:65:50:b4:fd:35:6d:1d:7e:32:e4:1f:48:3f:
                    0e:a2:e4:95:0f:84:85:0d:40:9d:e0:15:a6:2d:13:
                    fc:84:e1:ef:cc:39:ea:ca:45:c7:db:f6:da:c5:cb:
                    0b:b0:2a:03:63:85:53:c9:90:d5:db:df:38:72:30:
                    26:b5:a7:73:25:6d:08:ed:23:16:91:dd:fa:64:62:
                    e2:17:d6:01:c3:0e:4b:a6:f0:df:9b:c7:5d:ad:28:
                    d3:5b:8d:63:07:22:ab:06:5b:7f:a7:e9:ab:b4:e4:
                    1b:21:0c:f9:60:ac:74:0c:e2:3e:ee:34:c2:60:43:
                    25:1f:bb:af:3e:fc:db:0d:1f:ba:26:d8:77:1e:5f:
                    ff:7a:9f:e3:81:69:6e:ac:3b:0e:a0:a8:50:ed:85:
                    86:4b:3f:a6:1b:80:8e:eb:cf:cc:0f:6a:b3:48:a0:
                    13:ea:4e:ea:33:e2:31:63:e1:66:18:f0:5a:fa:eb:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:7E:44:6C:1B:8C:FD:12:4F:50:06:E0:2D:5F:21:41:9E:A1:61
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39322e382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:79:03:fe:eb:7d:c8:d5:c4:ef:ee:62:ea:73:2a:60:61:
         d4:42:df:ab:33:7a:aa:d9:d7:11:88:1b:4c:37:69:bd:c6:1a:
         51:70:73:40:61:2b:95:4a:52:35:78:69:64:6e:bc:db:3a:df:
         ad:8c:aa:77:17:4c:ff:27:8d:57:19:bf:28:3d:ba:eb:45:58:
         51:f5:45:9d:64:eb:d4:2c:23:a2:fe:04:1a:62:6e:0b:a9:71:
         af:07:88:61:e3:fa:1f:db:9f:4c:a0:c3:25:c1:dd:ac:8e:20:
         5e:e2:bf:84:50:9f:b5:62:40:85:89:a3:c9:ec:1e:cc:e5:f4:
         7e:15:9d:c1:65:08:9e:62:e3:59:34:14:98:98:a6:bf:e8:da:
         c7:2e:fa:b1:e7:af:e9:ca:69:8c:eb:9b:a4:6a:c3:60:61:62:
         38:8d:3b:86:6d:f7:72:4f:19:36:2d:51:d2:da:b9:a2:88:28:
         67:e2:0a:89:e6:24:fa:47:fe:f8:88:91:29:bb:62:9e:82:61:
         b5:15:95:66:00:1b:90:99:21:2c:fa:0c:51:0b:51:ab:e0:8d:
         79:dc:35:55:be:22:b0:5b:8a:25:30:9d:c4:19:97:8e:12:2c:
         31:b8:49:d0:ad:89:11:36:b8:dc:0d:49:e5:4e:bb:1a:81:e7:
         aa:88:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org