Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e2037393232.roa
File:                     34352e38352e3134372e302f32342d3234203d3e2037393232.roa (raw, json)
Hash identifier:          Nh5mW6NUKX9475y4yGq8NEWPJXdiNc7mU5i+GuQZTHU=
Subject key identifier:   CE:81:D6:23:2D:C6:75:78:63:E4:23:47:FA:8A:33:1D:B9:D6:B5:5E
Certificate issuer:       /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial:       520264A027462E422C48EBB788E37F43D220BA0C
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e2037393232.roa
Signing time:             Fri 27 Nov 2020 15:10:08 +0000
ROA not before:           Fri 27 Nov 2020 15:05:08 +0000
ROA not after:            Fri 26 Nov 2021 15:10:08 +0000
asID:                     7922
IP address blocks:        45.85.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:02:64:a0:27:46:2e:42:2c:48:eb:b7:88:e3:7f:43:d2:20:ba:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
        Validity
            Not Before: Nov 27 15:05:08 2020 GMT
            Not After : Nov 26 15:10:08 2021 GMT
        Subject: CN=3082010A0282010100A6224F29E5A96DC9644E93895A0F88D8BEFCFC8D004E061FD1DF63C1DFAE607C88D9DA8D578520CB4E67629358299BA9EDE88E914D25488E3D925C86056866D6FD482CE632A02681B8A81CE0978D555011C8F99BD0C627BFF2009B496C23466B72D1F54FD6185CE5BD94DB13B98A66F56B90C2B0A5BA355EFDFAE74E6F8B43C3497883C216AD4E350555AEEFFDD41D96B73ABA8D6D3E981E71925A7BA9C3E647E43980A215097BC4A427C5ADF88E420C9EAEA0F0B3164FF8D915BB44119E7E38D1B437450AF968D1B0AAFD3797D51747E93088096568CE2608CE3204F417034E564E2AAD22F3C50564089450FC4A11C89F74263CF2230E693AADC210465BA1810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:4f:29:e5:a9:6d:c9:64:4e:93:89:5a:0f:
                    88:d8:be:fc:fc:8d:00:4e:06:1f:d1:df:63:c1:df:
                    ae:60:7c:88:d9:da:8d:57:85:20:cb:4e:67:62:93:
                    58:29:9b:a9:ed:e8:8e:91:4d:25:48:8e:3d:92:5c:
                    86:05:68:66:d6:fd:48:2c:e6:32:a0:26:81:b8:a8:
                    1c:e0:97:8d:55:50:11:c8:f9:9b:d0:c6:27:bf:f2:
                    00:9b:49:6c:23:46:6b:72:d1:f5:4f:d6:18:5c:e5:
                    bd:94:db:13:b9:8a:66:f5:6b:90:c2:b0:a5:ba:35:
                    5e:fd:fa:e7:4e:6f:8b:43:c3:49:78:83:c2:16:ad:
                    4e:35:05:55:ae:ef:fd:d4:1d:96:b7:3a:ba:8d:6d:
                    3e:98:1e:71:92:5a:7b:a9:c3:e6:47:e4:39:80:a2:
                    15:09:7b:c4:a4:27:c5:ad:f8:8e:42:0c:9e:ae:a0:
                    f0:b3:16:4f:f8:d9:15:bb:44:11:9e:7e:38:d1:b4:
                    37:45:0a:f9:68:d1:b0:aa:fd:37:97:d5:17:47:e9:
                    30:88:09:65:68:ce:26:08:ce:32:04:f4:17:03:4e:
                    56:4e:2a:ad:22:f3:c5:05:64:08:94:50:fc:4a:11:
                    c8:9f:74:26:3c:f2:23:0e:69:3a:ad:c2:10:46:5b:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:D6:23:2D:C6:75:78:63:E4:23:47:FA:8A:33:1D:B9:D6:B5:5E
            X509v3 Authority Key Identifier:
                keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:89:a5:86:b9:24:f0:a9:f9:41:2a:03:0e:45:14:e1:a1:33:
         b8:3b:a9:99:cd:36:0f:d7:4a:82:b1:24:90:3c:0c:dc:61:da:
         30:9e:4d:40:01:37:9a:33:50:cb:88:fd:f3:3d:15:3f:67:38:
         57:5a:6c:66:05:8c:64:07:cc:82:ea:35:2b:1f:d3:f7:ad:81:
         43:57:fa:d0:ce:14:8c:b9:cb:49:0d:46:80:86:f8:7a:8b:f0:
         34:cf:ec:2d:8f:65:02:6a:e8:ab:33:4e:7f:01:2a:cf:eb:35:
         33:aa:f9:bc:a2:08:e9:fa:14:71:70:1c:40:88:24:33:6f:0c:
         3c:97:96:c2:a0:96:e6:18:ac:59:68:20:63:85:25:ef:5f:40:
         85:e1:ef:e4:e4:0f:7c:57:4e:fe:5d:54:9d:d0:27:7a:c3:3e:
         74:42:f7:e6:34:f6:ef:be:6c:1f:3e:4e:ac:b7:a4:a1:26:d4:
         2d:ff:16:c4:55:04:8a:15:3c:67:cd:ef:43:07:10:76:56:be:
         dc:3d:0d:66:f4:00:f6:a5:4c:09:22:ea:b2:c4:9e:e5:52:af:
         83:73:68:af:e5:06:1b:95:47:d2:8f:f7:29:1b:fe:72:dc:71:
         52:6c:76:4a:1e:bd:4a:b4:5e:4f:af:70:0c:9d:c4:a2:07:67:
         51:c6:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-fra.rpki-client.org