Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3135352e34342e302f32322d3234203d3e20323034313730.roa
File:                     34352e3135352e34342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          qCpmrU4g5Gnv9oyR+WEVt2gRVt/zTT9/61GrwbpaB/0=
Subject key identifier:   9B:F8:7D:63:C6:CA:8F:99:1E:86:39:59:9A:D6:03:E4:67:98:DD:CE
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       01085196B6A625C6D5F6221246A3D0DEA3076B06
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3135352e34342e302f32322d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:34:01 +0000
ROA not before:           Sat 22 Oct 2022 04:29:01 +0000
ROA not after:            Sat 21 Oct 2023 04:34:01 +0000
asID:                     204170
IP address blocks:        45.155.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:51:96:b6:a6:25:c6:d5:f6:22:12:46:a3:d0:de:a3:07:6b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:01 2022 GMT
            Not After : Oct 21 04:34:01 2023 GMT
        Subject: CN=9BF87D63C6CA8F991E8639599AD603E46798DDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:51:1b:08:97:da:2a:ce:da:86:ac:35:39:
                    39:53:7e:4c:99:0d:26:2f:a8:9f:5b:0e:bd:f2:b1:
                    23:a1:f3:95:9d:c6:51:71:0c:66:84:d7:86:33:92:
                    61:02:bf:42:78:4e:41:e4:54:2f:79:7f:54:65:43:
                    c9:92:13:34:be:b7:61:9c:69:92:df:31:93:a2:e6:
                    5d:b7:59:c8:b7:f1:bd:c4:9c:8d:cd:3a:8a:37:26:
                    14:c5:f7:96:3a:0b:8b:b1:dc:66:b5:46:6d:a2:e0:
                    03:9a:4a:33:df:47:a7:4d:1d:6d:2f:4d:46:8a:23:
                    12:41:0f:45:57:3b:90:49:84:96:20:cf:94:6f:ca:
                    05:6b:b6:c8:f3:4a:78:2e:03:2e:47:3c:4d:24:6a:
                    c5:3e:28:ad:b7:d8:02:8d:bd:d5:ea:0a:8d:c6:af:
                    d1:c1:67:58:05:e7:e0:ff:b1:75:b9:9c:e3:1d:ce:
                    46:32:e8:c5:a5:49:15:2f:f7:21:21:09:13:b0:69:
                    7b:12:94:5c:77:4d:76:27:85:ab:0b:5d:8c:30:ea:
                    1d:90:bf:b8:5e:0e:e3:d3:8f:14:d4:68:93:b0:f4:
                    ec:7c:be:c2:23:2e:94:0e:02:04:94:dd:d4:f6:59:
                    7d:02:c4:ca:c9:4e:71:57:3a:ef:9c:4b:d6:95:43:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:7D:63:C6:CA:8F:99:1E:86:39:59:9A:D6:03:E4:67:98:DD:CE
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3135352e34342e302f32322d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:57:b5:04:0d:47:f6:84:18:e2:85:85:3f:35:fe:41:85:9b:
         29:7b:64:35:91:4b:b4:6d:55:b2:3d:55:61:b7:82:fa:5f:69:
         da:0e:99:3f:f4:a5:20:4c:59:94:49:ed:a2:e0:78:68:77:29:
         24:7d:10:52:b3:84:cc:eb:ef:69:76:50:d7:66:e1:d4:c5:bc:
         88:b6:f6:3d:9c:a5:a7:ec:a4:72:cc:d6:b8:e0:d9:1f:73:3c:
         c8:47:95:06:98:05:bc:e8:9d:59:87:2d:37:00:05:cc:a2:94:
         2c:d3:09:a6:77:c7:60:da:d4:25:65:10:b4:e9:16:a3:ce:67:
         0d:53:6a:32:6a:9b:fd:9b:1c:32:fb:fb:8d:f4:7c:ca:e4:67:
         41:31:01:0e:75:33:cd:53:b9:c7:8e:7c:4a:7c:e4:01:86:0f:
         71:e7:ab:14:71:27:f6:23:9c:f5:50:b2:12:d4:3c:97:a9:2b:
         80:a6:04:d3:6d:fb:3d:fc:2f:f0:38:dd:17:c4:d2:54:51:d3:
         4a:df:2e:0c:2e:43:34:f7:8c:1e:10:bf:96:bd:ab:90:94:12:
         2e:73:60:29:32:71:af:c8:2c:cf:0b:3b:67:94:99:47:b8:a8:
         4d:3f:81:46:06:a3:26:00:70:80:65:9c:cf:5a:ca:69:05:2b:
         2f:47:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org