Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38322e302f32342d3234203d3e203631333137.roa
File:                     34352e3134332e38322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1ho3UmOPK8eQcYuMGX2z8HZP1ene+/8jzfspKrASq4g=
Subject key identifier:   C1:63:4E:5B:2E:A7:82:F4:FD:53:AF:1B:10:F5:71:6D:58:7F:9A:39
Certificate issuer:       /CN=3bc02841ee05535614927daa2cd69e043e5a6286
Certificate serial:       047DAA1A143AD3EDEFD9B99039E5CCBC14231C18
Authority key identifier: 3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38322e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 05 Jan 2021 14:17:24 +0000
ROA not before:           Tue 05 Jan 2021 14:12:24 +0000
ROA not after:            Tue 04 Jan 2022 14:17:24 +0000
asID:                     61317
IP address blocks:        45.143.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:aa:1a:14:3a:d3:ed:ef:d9:b9:90:39:e5:cc:bc:14:23:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc02841ee05535614927daa2cd69e043e5a6286
        Validity
            Not Before: Jan  5 14:12:24 2021 GMT
            Not After : Jan  4 14:17:24 2022 GMT
        Subject: CN=3082010A0282010100C2CCAF4E40C912C3860B77366E9FA9CD96F0E60AE9DCF5C02D70B093D34881216762E085F1A6E56397EF7F0A887772E4AD198E7809F0EF78E59CFDC8D85D67FFA9AEE758B78591ABE27668DE820FB683FEC8388D3BB30B04BF9D2F9721258D05768DDE4C5B5F01555AD40516945411A819F2103589E38893244F56314E4EA2024EAA5D90E766CDE963E2B45E196BEB8387668420B9EE1E33712C84429DF83A2151E481F23CF528A5173E498259E33795130EABAF70A40EF90EE45E69630B49DC2A37428073074F5DF5254BB5836C2178CB64D990CA453856A87C76B351B8956591D17F2332647D4DB826E94A6A3CA09FA724EB3B3D15611F3B62B8C138F590270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:af:4e:40:c9:12:c3:86:0b:77:36:6e:9f:
                    a9:cd:96:f0:e6:0a:e9:dc:f5:c0:2d:70:b0:93:d3:
                    48:81:21:67:62:e0:85:f1:a6:e5:63:97:ef:7f:0a:
                    88:77:72:e4:ad:19:8e:78:09:f0:ef:78:e5:9c:fd:
                    c8:d8:5d:67:ff:a9:ae:e7:58:b7:85:91:ab:e2:76:
                    68:de:82:0f:b6:83:fe:c8:38:8d:3b:b3:0b:04:bf:
                    9d:2f:97:21:25:8d:05:76:8d:de:4c:5b:5f:01:55:
                    5a:d4:05:16:94:54:11:a8:19:f2:10:35:89:e3:88:
                    93:24:4f:56:31:4e:4e:a2:02:4e:aa:5d:90:e7:66:
                    cd:e9:63:e2:b4:5e:19:6b:eb:83:87:66:84:20:b9:
                    ee:1e:33:71:2c:84:42:9d:f8:3a:21:51:e4:81:f2:
                    3c:f5:28:a5:17:3e:49:82:59:e3:37:95:13:0e:ab:
                    af:70:a4:0e:f9:0e:e4:5e:69:63:0b:49:dc:2a:37:
                    42:80:73:07:4f:5d:f5:25:4b:b5:83:6c:21:78:cb:
                    64:d9:90:ca:45:38:56:a8:7c:76:b3:51:b8:95:65:
                    91:d1:7f:23:32:64:7d:4d:b8:26:e9:4a:6a:3c:a0:
                    9f:a7:24:eb:3b:3d:15:61:1f:3b:62:b8:c1:38:f5:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:63:4E:5B:2E:A7:82:F4:FD:53:AF:1B:10:F5:71:6D:58:7F:9A:39
            X509v3 Authority Key Identifier:
                keyid:3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:84:2e:f1:e3:ed:ca:31:12:b8:aa:9c:f7:e8:2b:50:4f:bf:
         2a:9c:78:6f:f3:30:c6:3f:8d:9e:5c:0e:f5:54:42:f1:00:93:
         0e:1a:0d:7c:65:22:b8:d8:4e:35:0f:19:44:a5:32:9e:af:1d:
         62:ba:34:6d:a2:10:b0:7c:28:e6:10:ee:3e:29:aa:78:48:5f:
         69:60:aa:8a:de:af:8a:63:70:d3:f8:e6:e2:a6:b8:b4:fd:00:
         4f:d2:ea:b3:f9:41:c6:98:2d:67:cf:2a:fe:d5:08:9e:53:72:
         3f:7e:b3:dd:62:96:91:0c:fc:1f:f9:7e:55:6f:6c:eb:4c:b0:
         27:7f:fd:58:c2:96:67:00:93:1c:f3:c6:c8:e4:4d:60:c7:4e:
         c1:39:2a:b8:f2:37:0b:6c:3e:14:5e:22:79:f9:5e:ba:d1:b4:
         05:fe:5b:d3:2f:87:66:56:9c:61:55:df:fe:d3:da:b7:99:8b:
         a8:d3:37:8b:30:53:06:7f:7b:05:92:c5:f7:b1:39:25:33:90:
         d5:68:56:17:1a:78:70:56:a6:c0:50:b2:71:95:73:f6:9e:66:
         ae:4f:97:9e:e8:a8:14:e6:2c:bd:5d:af:7c:ca:68:71:a9:5f:
         b4:bc:05:05:a0:7a:8e:32:d6:5d:7a:5a:59:8d:bb:ef:83:cb:
         3c:2c:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org